Welcome to PotSave.com, PotSave.ca, PotSave.de, and their associated sub-domains (collectively referred to as the "Site"). The Site is operated by PotSave, LLC, along with its affiliates, subsidiaries, parent company, and other related companies (referred to as "Us," "We," or PotSave). This Privacy Notice from PotSave ("Notice")outlines how we collect, use, and disclose information about you when you use our Site, mobile applications, and related services (referred to as the "Services"), as well as how we utilize, process, and disclose that information. Additional notices may supplement this Notice. Please note that this Notice applies to the Services that display or reference this Notice, and it does not apply to any services that display or reference a different privacy statement.

Information Collected Through Your Use of the Services

The information we collect from you varies based on your interactions with us, the Services you utilize, and the choices you make. We gather information about you through different channels and methods when you engage with our Services. This includes information you directly provide, information collected automatically, data from third-party sources, and information derived or generated from other data.

Directly Provided by You: You can provide us with additional information through various means, such as filling out forms on the Services, corresponding with us via phone, text, email, live chat, or other methods. If you create an account, we may collect the following types of information from you:

• Contact Information: We collect your name, username, email address, and phone number.
• Demographic Data: At the time of registration or later, we may ask you to provide demographic information, such as your gender and location.
• Content and Files: Any photos, documents, files, reviews, or other information that you provide to us will be collected. Additionally, any email messages or communications sent to us will be stored.
• Reservations and Transactions: If you initiate a reservation or order through our Services (e.g., pickup reservation), we collect necessary information to fulfill your request. This includes your contact details, order information, government-issued ID (if required), and, depending on the type of reservation or order, a valid delivery address. In certain cases, you may also submit personal medical information, such as a medical marijuana patient identification, for specific orders made through our Services. This information is used to facilitate your order, from receiving it to forwarding the relevant details to the retailer or their authorized service provider responsible for fulfilling your order.

Automatically Collected Information

During your use of the Services, we automatically gather certain information about you. Examples of such information include:

• Usage Data: We log your activity on our Services, which includes the pages you have viewed and the actions you have taken. Additionally, we collect the URL of the website that directed you to our sites.
• Identifiers and Device Information: When you access our Services, our servers automatically collect technical details about your device. This includes your Internet Protocol (IP) address, device identifiers (such as MAC address), browser type, language preferences, operating system, application version, device type, device model, manufacturer, and your device's operating system type and version. Please note that our Services utilize cookies and similar technologies, as explained further in the "Cookies and Similar Technologies" section below, to store and retrieve cookie identifiers, mobile IDs, and other relevant data.
• Geolocation Data: Depending on your device settings and the configuration of our apps or online services, we may collect geolocation data when you use them.

Cookies and Similar Technologies

In order to operate our Services and gather data, including other identifiers, device information, and usage data, we utilize cookies, web beacons, mobile analytics, advertising IDs, URL information, and similar technologies. Cookies are small pieces of information that a website sends to your computer'shard drive while you browse a website. Our use of cookies includes both session cookies (which expire when you close your web browser) and persistent cookies (which remain on your computer until you delete them). These cookies enhance your experience on our Site by providing a more personalized and interactive environment. The text within a cookie typically consists of a unique string of numbers and letters that identifies your device, but it can contain additional information as well. On our websites, cookies are employed to store your preferences and settings, facilitate sign-in, enable interest-based advertising, combat fraudulent activities, analyze the performance of our Services, and fulfill other legitimate purposes.

Our web pages may also incorporate electronic images known as web beacons or single-pixel gifs. These web beacons assist in delivering cookies on our websites, counting the number of users who have visited those websites, and gathering usage and performance data. Furthermore, we may include web beacons in our promotional email messages or newsletters to track whether you open and engage with them.

Mobile analytics and advertising IDs are generated by mobile operating systems (such as iOS and Android) and can be accessed and utilized by apps in a similar manner to how websites use cookies. Our apps contain software that enables our third-party analytics and advertising partners to access these mobile IDs.

We, along with our third-party analytics service providers and advertising partners, employ these technologies within our Services to collect personal information, such as cookies stored on your browser, the advertising identifier on your mobile device, or your device's IP address, when you visit our Services. Additionally, we and our partners may use these technologies to gather personal information about your online activities across various websites over time. This information is utilized for storing preferences and settings, enabling sign-in, analyzing the performance of our Services, tracking interactions with the Services, developing insights, delivering tailored interest-based advertising,combating fraud, and fulfilling other legitimate purposes. We may also share the information we collect or infer with third parties for these purposes.

The third-party analytics and advertising providers we use on our websites include:

We authorize third-party Internet advertising firms (also known as ad networks or network advertisers) to deliver advertisements to you. These firms may employ cookies, Web beacons, platform device identifiers, software agents, and other technologies. These tools gather non-personally identifiable data about your browsing history on our Service and on other websites over time. Their aim is to provide you with advertisements tailored to your interests, gauge advertisement efficacy, personalize advertising content, and gain insights into Service usage, as well as other applications and websites tracked by these advertising entities. We don't have the ability to access or manage these tools, including cookies, Web beacons, platform device identifiers, software agents, or similar technologies that they employ. It'simportant to note that we aren't responsible for the privacy practices of third-party advertisers. To understand how they handle information they collect separately from you, it's recommended to review the privacy policy of the respective third-party advertiser. Furthermore, the Network Advertising Initiative offers insights into certain Internet advertising companies we might engage with.

To get acquainted with the privacy practices of these third parties and to opt out of their use of cookie data for targeted advertising, please explore the provided links above.

Many of these companies are also members of associations that offer a straightforward way to opt out of analytics and ad targeting. You can find these options through the following links:

• United States: NAI (http://www.networkadvertising.org/managing/opt_out.aspx) and DAA (http://www.aboutads.info/choices/)
• Canada: Digital Advertising Alliance of Canada (https://youradchoices.ca/)
• Europe: European Digital Advertising Alliance (http://www.youronlinechoices.com/)

California "Do Not Share My Data"

The California Consumer Protection Act ("CCPA") necessitates the revelation of personal data categories shared with third parties and outlines how to opt out of future data sharing. Within the CCPA, personal information encompasses online identifiers such as IP addresses, cookie IDs, and mobile IDs. The concept of a "sale" is also broadened to encompass instances where data is simply provided to third parties. Our platforms enable advertising and analytics providers to gather IP addresses, cookie IDs, and mobile IDs when using our online services, but we refrain from sharing any other types of personal information as a "sale."

If you prefer that we and our associates refrain from sharing your personal data with third parties for advertising intentions, you can express your "Do Not Share" request by contacting us at privacy@PotSave.com.

While our sharing of personal data as a "sale" will cease upon receiving your email, certain personal information will still be shared with our partners, who act as service providers. This sharing aids in executing advertising-related functions, which include assessing ad efficiency, regulating ad exposure frequency, generating ad performance reports, ensuring service functionality and security, delivering cumulative statistics and analytics, optimizing ad display time and placement, and/or minimizing ad fraud. Importantly, sending us an email may not necessarily halt the usage of previously shared personal information or entirely cease all interest-based advertising. If you access this site (or app) through alternative devices or browsers, please visit the provided link from those sources to ensure your preference applies to data collected when using those particular devices or browsers.

Further details regarding your right to opt out of data sharing are covered in the California Privacy Rights section of this Notice.

Cookie Management: Most web browsers are set to accept cookies by default. Should you prefer, you can modify your browser settings to learn how to remove or decline cookies. Bear in mind, altering these settings may impact specific features or services on our website. Deleting cookies could also result

in the removal of settings and preferences controlled by said cookies, including advertising preferences, which may need to be reset.

Mobile Advertising ID Controls: iOS and Android operating systems offer options to restrict tracking and/or reset advertising IDs.

Email Web Beacons: Many email clients allow settings to prevent the automatic loading of images, effectively disabling web beacons in the emails you read.

Do Not Track: A number of browsers incorporate "Do Not Track" (DNT) functionalities, signaling to visited websites your preference not to be tracked. Given the varied interpretations of the DNT signal, our websites presently do not respond to browser DNT signals. Instead, you can utilize a range of alternative tools for data control, including the above-mentioned cookie and advertising controls.

Third-Party Sourced Information: We also acquire data from third-party sources, safeguarding this information in accordance with the practices delineated in this Notice, along with any additional restrictions mandated by the information source. These third-party sources include, for instance:

Information Generation and Inferences

We derive fresh insights from the data we collect, often using automated methods to deduce probable preferences or other attributes ("deductions"). As an example, we deduce your city, state, and country based on your IP address.

Opting Out and Essential Information

When requested to provide information, you retain the option to decline. Moreover, you possess the ability to employ app or device controls to limit specific forms of automatic data collection. However, if you opt not to furnish or permit information crucial for certain products or functionalities, these offerings may not be accessible or operate as intended.

Your Dissemination of Data

PotSave Services may offer the opportunity to connect and share your activities, remarks, content, profile, and details openly or with other individuals. Depending on your account's domain and type, you might control some categories of personal data shared via your profile using the account settings menu on the Site. While establishing connections and determining what to share and publicize, remember your privacy requirements. Note that we lack the capability to regulate the privacy or security of data you elect to make public or distribute to others.

Additionally, the Services might allow you to share specific PotSave account details with social media platforms like Facebook, Google, or Twitter. Subsequent use or redistribution of any of your information by third parties post-publication is beyond our purview. If preventing your information from being public is your objective, it is advisable to refrain from utilizing PotSave Services in this manner and/or adjusting your privacy settings on the relevant social networking platform accordingly. The privacy practices of these social networking services lie outside our control and responsibility. To comprehend their information utilization, please consult the pertinent privacy policy.

Utilization of Your Information by PotSave

The data we gather is employed for the purposes elucidated in this Notification or as otherwise revealed to you. To illustrate, PotSave commonly applies your data to achieve the following objectives:

Utilization Objectives - Personal Data Categories

Service and Product Provision: Furnishing and delivering our Services, encompassing tasks like creating accounts, fortifying security, resolving issues, enhancing functionality, and customizing the Services. Contact details, demographic insights, payment specifics, content and data files, identifiers and device particulars, geolocation data, usage trends, deductions.

Business Operations: Orchestrating our business functions, such as invoicing, bookkeeping, refining internal processes, safeguarding our systems, and uncovering and safeguarding against fraudulent or unlawful conduct. Contact details, demographic insights, payment specifics, content and data files, identifiers and device particulars, geolocation data, usage trends, deductions.

Enhancement, Innovation, and Exploration of Services and Products:Elevating our Services, conceptualizing novel products or features, and conducting research activities. Contact details, demographic insights, payment specifics, content and data files, identifiers and device particulars, geolocation data, usage trends, deductions.

Personalization: Gaining insights into your preferences and traits to heighten your experience and enjoyment while utilizing our Services. Contact details, demographic insights, content and data files, identifiers and device particulars, geolocation data, usage trends, deductions.

Client Assistance: Supplying customer support and addressing your queries. Contact details, demographic insights, payment specifics, content and data files, identifiers and device particulars, geolocation data, usage trends, deductions.

Correspondence: Transmitting information regarding your Service usage, including confirmations, invoices, technical notifications, updates, security advisories, and support and administrative messages. Contact details, demographic insights, content and data files, identifiers and device particulars, geolocation data, usage trends.

Promotions: Engaging with you about fresh products, offers, promotions, rewards, competitions, imminent events, and other pertinent details concerning our products and those from our chosen partners (refer to the "Information Choices" segment of this Notice for modifying your preferences regarding promotional correspondence). Contact details, demographic insights, content and data files, identifiers and device particulars, geolocation data, usage trends, deductions.

Advertising: Presenting advertising content to you (refer to the "Cookies and Similar Technologies"portion of this Notice for insights into customized advertising and your advertising choices). Contact details, demographic insights, content and data files, identifiers and device particulars, geolocation data, usage trends, deductions

Achieving these Objectives with Data Fusion

To fulfill these aims, we amalgamate data from diverse origins, culminating in a more seamless, uniform, and individualized user experience.

Additionally, we may leverage your data to verify your geographic location. This geographic information assists in tailoring our Service, suggesting suitable content, verifying the availability of requested information in your locale, and determining the suitability of Service provisions for your area. In scenarios where data is aggregated or de-identified to the extent that it no longer relates to an identifiable individual, PotSave retains the right to utilize it for any operational purpose.

Disclosure of Your Information by PotSave

We may share your data according to the following protocols:

• With your consent or at your directive, or as deemed essential to finalize your transactions or deliver the requested Services. By initiating a reservation or placing an order through our Services, you authorize PotSave to share pertinent details with the respective dispensary or retailer, as necessary for order fulfillment.


• Among our subsidiaries and affiliates, promoting shared data systems and streamlined information processing to render Services and facilitate business operations.


• Disclosure to third-party service providers entrusted with tasks on our behalf (e.g., sharing data with Twilio when utilizing Service for calls or texts).


• Sharing with third-party service providers to meet your requests and perform tasks on our behalf, such as order fulfillment and delivery. Such sharing is confined to the data required for these third parties to execute their tasks, strictly limiting its utilization.


• For advertising and marketing services, we may share your details including order history, demographic particulars, and interests with specific third-party partners. This aids in targeting and serving you ads concerning our Services on external platforms. These partners may also employ the shared data to make inferences for their purposes or to track your online activity across various websites and services (in addition to ours), fine-tuning ad displays to align with your preferences. Notably, this Privacy Policy solely encompasses our data use and excludes third-party data usage. For opting out of interest-based advertising, please refer to http://www.aboutads.info/choices/. California residents can consult the California Privacy Rights segment for opting out.


• In cases where legal requirements compel us, or court orders, subpoenas, or warrants necessitate disclosure, we may share your information.


• We might disclose your data if deemed suitable to prevent liability, fraudulent activities, abusive or unlawful conduct, or to safeguard PotSave and its Services, as well as rights, property, or personal well-being of PotSave or others. This includes enforcement of our agreements, terms, and policies.


• In the event of PotSave's potential acquisition, merger, or involvement in business transactions, including financing, divestitures, or transfers involving our assets, your data may be transferred or assigned as part of such dealings. In cases of insolvency, dissolution, bankruptcy, or receivership, data transfer may occur as a business asset.

Third-party analytics and advertising entities also gather personal data through our Services, incorporating account details, marketing and communication data, demographic insights, content and data files, geographic particulars, usage trends, and deductions linked with identifiers and device information (e.g., cookie IDs, device IDs, IP addresses), as outlined in the Cookies and Similar Technologies section of this Notice.

Furthermore, we may share aggregated or anonymized data with partners, advertisers, and other third parties, as permitted by law, for their own advertising and marketing endeavors.

Please bear in mind that some of our products may reference or link to third-party provided offerings, with distinct privacy practices. Any data shared with such third parties or consented to for sharing is subject to their privacy terms.

Safeguarding Data Integrity

PotSave employs a variety of protective measures meticulously devised to ensure the security of the personal information you provide. This encompasses encrypting stored data and securing data during transmission. When availing third-party providers for data storage and transmission, PotSave adopts the security mechanisms provided by these entities, designed to safeguard your personal data. Complementing the tools extended by third-party providers, PotSave undertakes rational and fitting measures to mitigate the risks of data loss, misuse, unauthorized access, or disclosure. Despite our dedicated efforts, it is essential to recognize that no company can eliminate security risks entirely. While we earnestly strive to shield your personal information, we cannot guarantee absolute invulnerability. To further enhance your security, it is prudent to select a unique password for our Services and avoid utilizing a password on our platform that corresponds with any other website or online service.

Location of Personal Information

The data we gather may find residence and processing in your geographical location or another country where our affiliates, subsidiaries, or service providers maintain facilities. Presently, our data centers predominantly operate in the United States, chosen for optimal functionality and efficiency. This data might subsequently be transferred within the United States or beyond its borders to different countries, contingent upon the data type and its storage practices. Notably, these countries, including the United States, may not possess data protection laws as extensive or comprehensive as those in your country of domicile. However, our procedures are strategically designed to ensure that the information adheres to the stipulations outlined in this Notice and applicable law, regardless of its geographical location.

Consequently, the transfer of personal data from the European Economic Area and Switzerland to other countries—some of which may lack an adequate level of data protection, as determined by the European Commission—occurs. In such instances, we utilize various legal mechanisms, including contracts, to guarantee the safeguarding of your rights and protections. For more information on the EuropeanCommission's determinations concerning data protection adequacy, kindly visit: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en.

Data Retention

We retain information for the duration necessary to fulfill your requested Services, conform to legal obligations, resolve disputes, enforce agreements, and fulfill legitimate and lawful business purposes. Given the diverse nature of these needs across various data types and product contexts, actual retention periods vary considerably. Factors influencing retention include user expectations or consent, data sensitivity, availability of automated data deletion controls, and legal or contractual obligations.

Choices Regarding Your Information

Access, correction, and deletion: If you desire to access, rectify, or erase the information we possess about you, you may convey your request via email to privacy@PotSave.com.

Subject to applicable laws, we reserve the right to levy fees or reject requests deemed unreasonable or excessive. We may also decline if sharing the information violates another person's rights, privacy, or if we fail to verify your identity

Communication Preferences: You can opt out of receiving marketing or promotional emails by following instructions within the emails or modifying settings in your account, based on the type of account you possess. For marketing or promotional text messages, you can halt them by responding STOP to the respective text message. Note that ceasing marketing communications might still result in receipt of non-promotional emails pertaining to account-related matters or ongoing business interactions.

Cookies and Similar Technologies: For options regarding cookies and analytics, please refer to the Cookies and Similar Technologies section.

Numerous third-party tracking entities belong to associations offering convenient opt-out mechanisms for analytics and ad targeting. Links are provided below:

• United States: NAI (http://www.networkadvertising.org/managing/opt_out.aspx) and DAA (http://www.abouads.info/choices/)
• Canada: Digital Advertising Alliance of Canada (https://youradchoices.ca/)
• Europe: European Digital Advertising Alliance (http://www.youronlinechoices.com/)

Mobile Advertising ID Controls: Apple and Android mobile devices generate advertising identifiers akin to cookies on websites. These identifiers are accessible by apps and advertisers. Each operating system provides means to limit tracking or reset the advertising ID.

Declining to share certain data with PotSave may affect the availability of certain Site or Service features. You may possess the right to access your personal information held by PotSave and correct any inaccuracies. Requests can be directed to privacy@PotSave.com or other listed contact methods.

Right to Opt-out: To opt out of future "sales" of personal information, please visit the"Do Not Sell My Personal Information" section in the Cookies and Similar Technologies segment of this Notice.

Your EU Privacy Rights

If the processing of personal data about you is subject to European Union data protection law, you have certain rights with respect to that data:

• You can request access to, and rectification or erasure of, personal data;
• If any automated processing of personal data is based on your consent or a contract with you, you have a right to transfer or receive a copy of the personal data in a usable and portable format;
• If the processing of personal data is based on your consent, you can withdraw consent at any time for future processing;
• You can to object to, or obtain a restriction of, the processing of personal data under certain circumstances; and
• For residents of France, you can send us specific instructions regarding the use of your data after your death.

To make such request, contact us at the contact information set forth below. When we are processing data on behalf of another party that is the “data controller,” you should direct your request to that party. You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns.

We rely on different lawful bases for collecting and processing personal data about you, for example, with your consent and/or as necessary to provide the Services you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests.

California Privacy Rights

If you are a resident of California and your personal information falls under the scope of the California Consumer Privacy Act ("CCPA"), you possess specific rights pertaining to that information.

Right to Information: You are entitled to request that companies furnish you with the following details:

• The categories and specific components of personal information we have gathered about you.
• The origins from which we source personal information.
• The intentions behind collecting, utilizing, or disseminating personal information.
• The categories of external parties with whom we share personal information.
• The categories of personal information we have revealed for business purposes. Note that the CCPA's interpretation of "business purpose" is extensive. In the past 12 months, we have disclosed data from each personal information category to service providers for various business purposes requiring access to our systems containing personal information (such as providing cloud data storage, upholding system security, and offering customer support).
• The categories of personal information (if any) that we have sold about you, categorized by each group of third parties to which the personal information was conveyed. It is pertinent to mention that the CCPA's definitions of "sell" and "personal information" are far-reaching. Under this definition, some of our data sharing outlined in this Notice might be construed as a "sale." Specifically, we allow advertising and analytics providers to gather IP addresses, cookie IDs, and mobile IDs through our online services. However, we do not "sell" any other forms of personal information. Our "Do Not Sell My Info" disclosures can be found in the Cookies and Similar Technologies section of this Notice. To submit a "request to know,"kindly contact us at privacy@PotSave.com. Much of this information is already covered in this Notice.

Right to Deletion: You also possess the right to request the deletion of personal information under certain conditions, subject to specific exceptions. To initiate a deletion request, you can reach out to us at privacy@PotSave.com.

Right to Opt-Out: You retain the right to opt out of prospective "sales" of personal information. To exercise this right, please visit our "Do Not Sell My Info" page in the Cookies and Similar Technologies section of this Notice.

You may designate an authorized agent in writing or through a power of attorney to act on your behalf and exercise your CCPA rights. Before accepting an agent's request, we will require evidence of your authorization, and you might need to verify your identity directly with us. Furthermore, the verification of your identity, according to legal standards, is necessary to provide or delete specific personal information. Lastly, exercising your rights as established by the CCPA will not result in discriminatory treatment.

Furthermore, pursuant to California Civil Code section 1798.83, also referred to as the "Shine the Light"law, California residents who have shared personal information with a business they have a personal, family, or household relationship with ("California Customers") can seek information regarding whether the business has disclosed their personal information to third parties for direct marketing purposes. California Customers can request additional information on our compliance with this law by emailing support@PotSave.com. Kindly note that businesses are required to respond to one request per California Customer per year and might not be obligated to respond to requests made through means other than the designated email address.

Modifications and Revisions to this Privacy Notice

Occasionally, we may modify this Notice to align with changes in our Services, information usage, or applicable regulations. To ensure you remain informed about any alterations, we provide the date of the most recent Privacy Notice update above. In the event of substantial changes to the Notice, we will offer notification or obtain consent as necessitated by law.s

Contact Information for PotSave

Feel free to reach out to PotSave with queries, concerns, grievances, or feedback about this Notice, your information, our disclosure practices involving third parties, or your consent preferences:

PotSave, LLC

Attn: Privacy Officer

[street address]

Sacramento, CA [zip code]

Email: privacy@PotSave.com