Schedule Engine's Privacy Policy

Effective: August 24, 2021

Privacy Policy

Scope and Consent

This Privacy Notice describes:

• the personal information we collect and how we use that information;

• the choices you have about how we communicate with you and what personal information you share;

• when we might disclose your personal information;

• how we retain and protect your personal information; and

• your privacy rights under the California Consumer Privacy Act of 2018 ("CCPA").

Personal Information Defined. "Personal information" is information that can be associated with a specific person and could be used to identify that specific person, whether directly from that data, or from that data combined with other information that Schedule Engine has or is likely to have access to. We do not consider personal information to include information that has been made anonymous or aggregated so that it can no longer be used to identify a specific person, whether in combination with other information or otherwise.

Changes to this Privacy Notice. We may change this Privacy Notice from time to time by posting the amended terms on this site. We advise you to read it regularly. All material changes automatically take effect when posted and of the Effective Date at the beginning of this Privacy Notice. Material changes to our Privacy Notice will be announced via the Services, or the email address specified in your account. Please note that your continued use of our Services will signify your acceptance of the changes to this Privacy Notice.

Collection

When you elect to use our Services and provide us with your personal information, you agree that such information is sent to and stored on our servers in accordance with this Privacy Notice, and applicable legislation and regulations. Certain features of our Services may be used without registering for an account. We collect the following types of personal information:

Information You Provide to Us: We collect and store any information you provide to us, including but not limited to:

• When you register for an account: personal information that can identify you and authenticating information such as your name, telephone number, company name, email address, User Name, password or profile picture;

• When we verify you or your account: we may collect and process additional information (as permitted by law) to authenticate you or your account, or to verify the information we have collected;

• When you transact on our Services: such as content that you generate or that is connected to your account as a result of a transaction you are involved in. We may also collect your financial information (such as credit card or bank account numbers) and billing information (such as billing address) if you are required to pay fees to us;

• When you interact with your account: other content that you generate, or that is connected to your account, such as updating the information in your account profile;

• When you upload pictures to Schedule Engine: we may access your camera or photo library, if you choose to enable this service on your computer or device;

• When you contact us: information provided in the context of dispute resolution, correspondence through our Services or correspondence that is sent to us; and

• When you respond to surveys: information provided in survey responses that we might ask you to complete for research purposes;

Information We Automatically Collect from Your Computer or Other Electronic Device: When you visit our website, use our Services and/or reply to other content, we automatically collect the information sent to us by your computer, mobile device or other equipment that provides access, including but not limited to:

• Information we collect from the devices you use when interacting with us or our Services: such as device ID or unique identifier ("UDID"), device type, ID for advertising, any unique device token;

• Computer and connection information: including, but not limited to, statistics on page views, traffic to and from the application or website, referring URL, IP address, your browsing history and standard web log information

• Information collected through our use of analytics software: that allows us to better understand the functionality of our software on your computer or mobile device. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage, performance data, and from where the application was downloaded. We may link the information we store within the analytics software to any personally identifiable information you submit within the application. This sort of combined information will be treated as personal information and may be used in the ways described in this Privacy Notice.

• Information about your location: including precise geo-location information from your computer or mobile device if you have enabled this service. Keep in mind that most devices allow you to control or disable the use of location services by any application on your device in the device's settings' menu.

Information We Collect Using Cookies, Web Beacons and Similar Technologies: When you use our Services, we and our service providers acting on our behalf (e.g., Google Analytics) may place cookies (data files on your phone or mobile device's drive) or web beacons (electronic images that are placed in a web page's code) or use similar tracking technologies to collect information about the pages you view, the links you click, and other actions you take on our Services. We also use this technology to gather demographic information about our user base as a whole. We use cookies to help us identify you as a user, to provide you a better experience on our Services, to measure promotional effectiveness and to ensure trust and safety on our Services. We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).

The information we collect automatically may include personal information, or we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

• Estimate our audience size and usage patterns.

• Store information about your preferences, allowing us to customize our Website according to your individual interests.

• Speed up your searches.

• Recognize you when you return to our Website.

You can control the use of certain cookies and similar tracking technologies at the individual browser or device level. If you reject cookies, you may still use our website and our Services, but your ability to use features or areas of our website and Services may be limited.

Information We Collect from Other Sources: We collect and store information provided to us from other sources, including but not limited to:

• Information we obtain from third parties: we may supplement the personal information we collect with additional information about you from third parties and add this to your account information. This information includes, but is not limited to: publicly available demographic data, publicly available contact data, credit check data from credit bureaus, and additional data about you from other sources, such as public authorities, to the extent permitted by law.

• Information we get from third party social networking or sign-in services: we may allow you to use social networking services, such as Facebook, Instagram, Google and Twitter, that enable you to create your account, share information, or to connect your account with the respective social networking services. Those social networking services that enable you to access our Services may automatically give us access to certain personal information retained by them about you (e.g., content viewed by you, content liked by you, and information about the advertisements you have been shown or may have clicked on, etc.). You control the personal information you allow us to have access to through the privacy settings on the applicable social networking service and the permissions you give us when you grant us access to your personal information retained by the respective social networking service about you. By associating an account managed by a social networking service with your account and authorizing us to have access to this information, you agree that we may collect, use and retain the information provided by these social networking services in accordance with this Privacy Notice.

We do not control third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

Information Other Users May Provide Us About You. Other users must get your explicit consent before providing us with your information. If another user gives us information about you, such as when providing a referral, they must tell you about our collection, use, disclosure and retention policies before giving us the information.

Categories of Personal Collected in the Past 12 Months: We have collected the following categories of personal information in the 12-months preceding the Effective Date of this Notice:

Use and Retention

You agree that we may use and retain your personal information (see above) for the following purposes:

To Provide, Improve, and Personalize our Services. Your personal information allows us to:

• provide you access to and use of our Services as well as access to your history, and other features we may provide;

• personalize, measure and improve our Services and content;

• offer you site content that includes services that you may like;

• give you access to your transaction history, and other Service features;

• facilitate the processing of payment cards when you pay within our Services with a payment card or when we use a third party payment provider to process your payment; and

• provide you with other services that you have requested, as described when we collected the information.

To Contact You About Your Account and Provide You Customer Service. We may contact you via any means through which you've provide us your information, including but not limited to email, telephone, SMS/text messages, direct message or postal mail, to:

• provide you Customer Support about your account, such as to troubleshoot problems, to collect fees or monies owed to us, or to get your opinion through surveys;

• send you legal, transactional or administrative communications;

• contact you, based on your communication preferences (where applicable), to obtain your feedback about our Services and the services of Schedule Engine providers for the purpose of targeted marketing activities, updates, and promotional offers, or for any other purposes as set forth in this Privacy Notice; and

• deliver targeted marketing and advertising, service updates, surveys and promotional offers based on your communication preferences.

To Personalize our Advertising and Marketing. We use your personal information to personalize our advertising and marketing, including to:

• personalize, measure and improve our marketing and advertising;

• send you offers, whether personalized or not, or to contact you (via email, telephone, SMS/text message, direct message or postal mail) with information regarding Services offered by us (if you have consented to this contact); and

• deliver targeted marketing and advertising, service updates and promotional offers.

Please keep in mind that we will not sell or rent your personal information to third parties for their marketing purposes without your explicit consent. We may combine your information with information we collect from other companies and use it to improve and personalize our Services and functionalities. We may use other companies to deliver e-mail communications on our behalf or to place our advertisements on other websites. We are not responsible for any tracking technologies used by third parties unless specifically provided for in this Privacy Notice.

Testimonials. If you choose to provide us with a testimonial, we may post your testimonial along with your name in accordance with our Terms of Use. If you want your testimonial and/or your name removed, please contact Customer Service.

Other Uses. We will ask for your consent before using information for a purpose other than those that are set out in this Privacy Notice.

Retention. We retain your personal information as long as it is necessary and relevant for our operations. In addition, we may retain personal information from closed accounts to comply with national laws, prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigation, enforce our Terms of Use and take other actions permitted or required by applicable national laws. After it is no longer necessary for us to retain your personal information, we dispose of it in a secure manner according to our data retention and deletion policies.

Communication Preferences

You have a choice about how we use personal information to communicate with you, to send you marketing information, provide you with personalized advertising, and whether you want to stay signed into your account.

Marketing Communications. Emails and other electronic communications Schedule Engine sends to you may contain code that enables Schedule Engine to track your usage of the communication, including whether the communication was opened and/or what links were followed (if any). Schedule Engine may combine this information with other information Schedule Engine has about you and Schedule Engine may use that information to improve our Services and/or provide customized communications to you. Keep in mind, we do not sell or rent your personal information to third parties for their own marketing purposes without your explicit consent. If you no longer wish to receive marketing communications from us, follow the "Unsubscribe" link in the marketing communication you received or contact Customer Service

Push Notifications. Upon download of certain Services, you are provided the option to opt into receiving push notifications from Schedule Engine on your device and within the application. We send you push notifications from time-to-time to inform you of service related messages, and update you about any features, events, or promotions that we may be running. If you no longer wish to receive notifications from us, you can, where applicable, change your preferences by logging into your account or by disabling notifications in your device settings. To ensure you receive proper notifications, we will need to collect certain information about your device such as operating system and user identification information.

Geo-Location Information. When you use a computer or mobile device to access our Services, we may collect your precise geo-location information only if (a) "location services" for the device is enabled; and (b) the permissions on your device allow communication of this information. If you do not want us to collect your precise geo-location information, you may prohibit the sharing of this information or you can opt out of sharing this information at any time by changing the relevant preferences and permissions on your device. If you elect not to share precise geo-location information with us, you may still access our website and Services, but your ability to use certain features may be significantly limited. Even if you do not provide us with consent to collect precise geo-location information from your computer or mobile device, we may use your IP address, or other geo-location information that you provide us with (such as when you input your city or zip code), to infer an approximation of your location when using certain features of the Services.

Staying Signed In. In case you visit our Services from a shared device, we strongly recommend that you log off after each session. If you do not want the shared device to remember you and/or your credentials, you will need to remove cookies and/or the history of your device visits.

Withdrawing Consent. If you withdraw your consent for the use or disclosure of your personal information for purposes set out in this Privacy Notice you may not have access to all of our Services and we might not be able to provide you all of the Services and customer support offered to our users and authorized under this Privacy Notice and our Terms of Use.

Access and Deletion

Account Settings. You can see, review and change your personal information by logging into your account settings. If you want to close your account with us, please send us a request to Customer Service. We will process your request within a reasonable period of time and process your personal information in accordance with applicable laws.

We will honor your right to request access to, or modification or deletion of, your personal information. To make such a request, send an email to [EMAIL ADDRESS]. We cannot delete your personal information except by also deleting your user account. We may have the right or obligation to withhold that access or refuse to modify or erase your personal information under applicable laws or if it would cause the information to be incorrect. To contact us about access and to find out if any fees apply, please contact Customer Service.

Disclosure

Information Disclosed to Service Providers and Other Third Parties. We may disclose your personal information to third party service providers and other third parties in accordance with this Privacy Notice and applicable legislation and regulations. We may disclose aggregated information about our users, which may or may not identify any individuals, without restriction. As further described herein, we will not disclose your personal information to third parties for their marketing purposes without your explicit consent. We may share your personal information with:

• third party service providers with whom we have entered into an agreement to help us provide our Services: they may assist us in providing our core services, payment processing services, customized advertising, violations of our Terms of Use, bill collection, and other business operations;

• third party financial institution partners (payment providers) who may offer financial products to you: for them to provide joint content and services (such as, registration, transactions and customer support). These third-party financial institution partners will use your personal information to send you marketing communications only if you have requested their services.

• third party social networking and sign-on services: that enable you to access our Services with your login credentials, such as Facebook, Google and Twitter;

• third party marketing partners: to market their products or services to you if you have consented to these disclosures; and

• other third-party partners: to fulfill the purpose for which you provided your personal information, or for any purpose disclosed by us when you provide the information.

Information Disclosed to Law Enforcement and Other Parties in Connection with the Law. We may disclose your personal information to law enforcement and other parties in connection with the law, including:

• law enforcement or governmental agencies, or authorized third parties, in response to a verified request regarding a criminal investigation, alleged or suspected illegal activity. We will only disclose information we deem relevant to the investigation or inquiry, such as name, city, state, postcode, telephone number, email address, IP address;

• third parties to comply with our legal requirements, enforce our Terms of Use, or if we otherwise believe in good faith that the disclosure is needed to prevent imminent physical harm, harm to property, financial loss or to report suspected illegal activity;

• we may also disclose your personal information to any other third party with your prior consent.

Change of Ownership. If we were to merge with or be acquired by another company, we may share information with them in accordance with applicable laws. Should such an event occur, we will require that the new combined entity follow this Privacy Notice with respect to your personal information. If your personal information will be used or disclosed for any purposes not covered in this Privacy Notice, you will receive prior notification of the use of your personal information for the new purposes.

Personal Information We've Disclosed for a Business Purpose: In the 12 months preceding the Effective Date of this Notice, we have disclosed to one or more third parties for a business purpose the following categories of personal information that identifies, relates to , describes, is capable of being associated with or could reasonably be linked, directly or indirectly, with a particular consumer or household:

• Identifiers (e.g., a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver's license number, passport number, or other similar identifiers);

• Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information;

• Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies);

No Information Sold to Third Parties: Schedule Engine has not sold any personal information that identifies, relates to , describes, is capable of being associated with or could reasonably be linked, directly or indirectly, with a particular consumer or household to third parties in the 12 months preceding the Effective Date of this Notice.

Security

We have implemented reasonable measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our App or Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet and mobile platforms is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted through our App or to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures we provide.

Other Important Information

Third Party Privacy Practices: This Privacy Notice addresses only the use and disclosure of personal information we collect from you. If you disclose your information to others, or if you are directed to a third party website or application, their privacy policies and practices will apply. We can't guarantee the privacy or security of your information once you provide it to a third party.

You may use social login (logging in from a social networking service) or regular sign-in each time you log into your account with us. If you use regular sign-in but a password has not been issued to you (because you registered through social login) you need to obtain a password through the password reset flow. When you use social login, the "keep me signed in" policies of the social network provider apply. We do not control those policies. For your safety we recommend that you:

• Don't use social login if you are accessing our Services using a public or shared device; and

• Visit your social networking service provider site to learn about their sign in policies and your options.

Children's Privacy: Our website is a general audience website, and our Services are not intended for children under the age of 13. We do not knowingly collect personal information from users in this age group. If you are under 13, do not use or provide any information on this Website or through any of its features, register on the Website, book any service appointments through the Website, use any of the interactive or public comment features of this Website, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at [CONTACT INFORMATION].

Your Rights Under the California Consumer Privacy Act

This section supplements the information contained in this Privacy Notice and applies solely to all visitors, users, and others who reside in the State of California ("California residents"). This section does not apply to workforce-related personal information collected from California-based employees, job applicants, contractors, or similar individuals. California residents have the right under the California Consumer Privacy Act of 2018 (CCPA) and certain other privacy and data protection laws, as applicable, to exercise free of charge:

Disclosure of Personal Information We Collect About You: You have the right to know:

• The categories of personal information we have collected about you;

• The categories of sources from which the personal information is collected;

• Our business or commercial purpose for collecting or selling personal information;

• The categories of third parties with whom we share personal information, if any; and

• The specific pieces of personal information we have collected about you.

Please note that we are not required to:

• Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained;

• Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information; or

• Provide the personal information to you more than twice in a 12-month period.

Disclosure of Personal Information Sold or Used for a Business Purpose: In connection with any personal information we may sell or disclose to a third party for a business purpose, you have the right to know:

• The categories of personal information about you that we sold and the categories of third parties to whom the personal information was sold; and

• The categories of personal information that we disclosed about you for a business purpose.

Right to Deletion: Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

• Delete your personal information from our records; and

• Direct any service providers to delete your personal information from their records.

Please note that we may not delete your personal information if it is necessary to:

• Complete the transaction for which the personal information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;

• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;

• Debug to identify and repair errors that impair existing intended functionality;

• Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;

• Comply with the California Electronic Communications Privacy Act;

• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;

• Enable solely internal uses that are reasonably aligned with your expectations based on the your relationship with us;

• Comply with an existing legal obligation; or

• Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Protection Against Discrimination: You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things:

• Deny goods or services to you;

• Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;

• Provide a different level or quality of goods or services to you; or

• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Please note that we may charge a different price or rate, or provide a different level or quality of services to you, if that difference is reasonably related to the value provided to us by your personal information.

How to Exercise Your Rights: If you would like to exercise any of your rights as described in this Privacy Notice, please: email us at privacy@ScheduleEngine.com or write to us at Schedule Engine, Attn: Legal, 101 N Queen St, Suite 302, Lancaster, PA 17603, USA.

Please note that you may only make a data access or data portability disclosure request twice within a 12-month period.

Verifying Your Identity: If you choose to contact us directly by email, phone, or in writing, you will need to provide us with:

• Enough information to identify you (e.g., your full name, address and customer or matter reference number;

• Proof of your identity and address (e.g., a copy of your driver's license or passport or a recent utility bill); and

• A description of what right you want to exercise and the information to which your request relates.

We are not obligated to make a data access or data portability disclosure if we cannot very that the person making the request is the person about whom we collected information, or is someone authorized to act on such person's behalf.

Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Response Timing and Format: We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact privacy@ScheduleEngine.com. We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Notice Regarding the Sale of Your Personal Information or Use for a Business Purpose: We may sell or disclose to a third party personal information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

You have the right under the CCPA and certain other privacy and data protection laws, as applicable, to opt-out of the sale or disclosure of your personal information. If you exercise your right to opt-out of the sale or disclosure of your personal information, we will refrain from selling your personal information, unless you subsequently provide express authorization for the sale of your personal information.

To opt-out of the sale or disclosure of your personal information, send an email to privacy@ScheduleEngine.com with the subject line: "Do not sell my personal information." And include your name and email address.

Questions or Complaints

For questions about this Privacy Notice or our privacy practices, you can reach us in writing at

Schedule Engine, Attn: Legal, 101 N Queen St, Suite 302, Lancaster, PA 17603, USA

We will try to provide a prompt response to your inquiry. For any other questions or complaints please contact Customer Service.