CARDEROCK VENTURES, LLC PRIVACY POLICY

Last Updated: April 14, 2026

Thank you for taking the time to read our privacy policy. At Carderock Ventures, LLC ("Carderock Ventures", "we", "us", or "our"), your privacy is of the utmost importance. We want you to be fully informed about the information we collect, how it is used, disclosed, and protected, and the choices you have with it.

Carderock Ventures, LLC operates as a venture studio that rapidly prototypes, validates, and scales startup concepts across multiple business models including lead generation services, SaaS products, marketplaces, community platforms, content services, and AI-driven tools. Our Services may operate under different brand names, domains, or product names as part of our portfolio (collectively, our "Services"). This privacy policy sets out how we collect, use, process, store, and disclose personal information in providing the Services and on our websites and applications.

TABLE OF CONTENTS

1. Information We Collect

2. How We Use Your Information

3. How We Share Your Information

4. Your Privacy Rights

• Right to Access
• Right to Correction
• Right to Deletion
• Right to Opt Out of Sale/Sharing
• Right to Limit Use of Sensitive Personal Information
• Right to Data Portability
• Right to Non-Discrimination
• How to Exercise Your Rights
• Authorized Agents
• Verification Process

5. Cookies and Tracking Technologies

6. Data Security

7. Data Retention

8. International Data Transfers

9. State-Specific Privacy Rights

10. European Privacy Rights (GDPR)

11. AI and Automated Decision-Making

12. Children's Privacy

13. Data Breach Notification

14. Third-Party Links and Services

15. Changes to This Privacy Policy

16. Contact Us

1. PERSONAL INFORMATION WE COLLECT

Customer/Business Information

In order to serve our business customers ("Customers"), we may collect:

• Business contact information including names, company email addresses, company names, and job titles.
• Account information including username, password, and authentication credentials.
• Billing information including payment method details, billing addresses, and purchase history.
• Communications data including email correspondence, support tickets, and customer service interactions.
• Customer Data uploaded, transmitted, or created through use of our Services, which may include customer information, employee data, and business records.
• Usage data including feature usage, API calls, session logs, and performance metrics.

Users/Consumers

For individual users of our Services, we may collect:

• Personal identifiers such as name, email address, phone number, postal address, and username.
• Account credentials including passwords and security questions.
• Demographic information such as age, gender, location, and preferences (when voluntarily provided).
• Payment information for purchases (processed through third-party payment processors such as Stripe).
• User-generated content including uploads, posts, notes, comments, reviews, marketplace listings, and interactions within our Services.
• Lead Request information including details about products or services you're interested in, your contact preferences, and information needed to match you with service providers. By submitting a Lead Request through our Services, you provide your express written consent to be contacted as described in Section 7 (Lead Generation Services; Communications; TCPA Consent) of our Terms of Service, which is incorporated into this Privacy Policy by reference.
• Survey and research data including responses to surveys, questionnaires, customer feedback forms, user research interviews, and other voluntary information you provide to help us understand customer needs, preferences, and ideal customer profiles. This may include demographic information, business information, usage patterns, pain points, feature requests, and opinions about our Services or competitors.
• Tax Reporting Information: If you receive $600 or more in aggregate incentive payments (gift cards, cash, credits) from Carderock Ventures in a calendar year, we are required by U.S. tax law to: Collect your full name, address, and taxpayer identification number (SSN or EIN); Report the payments to the Internal Revenue Service (IRS); Provide you with IRS Form 1099-MISC. This information is collected and used solely for tax compliance purposes and is not used for marketing or shared with third parties except as required by law.

Website Visitors

We automatically collect certain information from all visitors to our Services:

• Technical information including IP address, browser type and version, device type, operating system, and unique device identifiers.
• Usage data including pages visited, time spent on pages, clickstream data, referral sources, and navigation patterns.
• Cookie data and similar tracking technologies (see Section 5 for more details).
• Location data (general geographic location based on IP address).
• Mobile Application Data: When you use our mobile applications, we may collect: Device information including device model, operating system version, unique device identifiers (UDID, advertising ID); Mobile network information including carrier and connection type; App usage data including features accessed, session duration, and interactions; Push notification tokens (if you enable notifications); Mobile-specific permissions you grant (camera, microphone, location, contacts, photos) - we only collect data from permissions you explicitly authorize. You can manage app permissions through your device settings at any time.

Social Media and Third-Party Integrations

When you interact with our Services through social media platforms or third-party integrations, we may collect:

• Information from your social media profile (name, email, profile picture, connections) as permitted by your privacy settings.
• Social media interactions such as likes, shares, notes, comments, and click-throughs.
• Authentication data when you use social login features (Google, Facebook, etc.).

AI and Automated Processing Information

If our Services incorporate artificial intelligence or machine learning technologies, we may collect:

• Input data provided to AI systems (queries, prompts, commands, text, images, or other content you submit).
• Interaction data with AI features including usage patterns, feedback, and corrections.
• Model performance data for quality improvement (typically aggregated and anonymized).

2. HOW WE USE PERSONAL INFORMATION

We may use personal information for the following purposes:

• Provide Services: To provide, deliver, maintain, and improve our Services; process transactions; match you with service providers (for lead generation Services); generate AI-powered outputs; and provide the functionality you request.
• Communications: To send confirmations, receipts, technical notices, security alerts, and administrative messages; provide customer support; respond to inquiries; and communicate about products, services, offers, and events (with your consent where required).
• Personalization: To personalize and improve user experience; provide customized content and recommendations; remember your preferences and settings.
• Analytics and Improvement: To monitor and analyze trends, usage, and activities; conduct research and development; test new features and products; train and improve AI (artificial intelligence) models and technologies.
• Security and Fraud Prevention: To detect, prevent, and address technical issues, fraud, security threats, and abuse; verify identity; maintain the security and integrity of our Services.
• Legal Compliance: To comply with legal obligations; enforce our Terms of Service and other policies; respond to legal requests and prevent harm.
• Business Operations: To process payments; manage accounts; maintain records; communicate with business partners; facilitate business transfers.
• Marketing: To send promotional communications about our Services, offers, and events (you can opt out at any time); conduct surveys and market research. We may also use anonymized or aggregated Outputs (content generated through your use of AI-powered Services) to market and promote our Services, provided we will not publicly attribute specific Outputs to you individually without your prior consent.
• Research and Development: Conduct customer development research and user studies; Identify and validate ideal customer profiles (ICPs); Understand customer needs, pain points, and preferences; Test prototypes, concepts, and new features with users; Conduct market research and competitive analysis; Measure product-market fit and validate business hypotheses; Create aggregated market insights and trend reports; Inform product roadmap and strategic decisions.
• Survey Incentives: Process and deliver survey incentives (gift cards, discounts, credits); Track incentive eligibility and prevent duplicate rewards; Comply with tax reporting requirements for incentive payments over $600/year
• Other: To carry out any other purpose described to you at the time of collection.

3. HOW WE DISCLOSE PERSONAL INFORMATION

Lead Generation Services - Lead Partners

IMPORTANT FOR LEAD GENERATION SERVICES: When you submit a Lead Request through our lead generation Services, we share your contact information (name, email address, phone number, and inquiry details) with up to 5 third-party service providers ("Lead Partners") who offer products or services related to your inquiry.

For California Residents: This sharing constitutes a "sale" of personal information under the California Consumer Privacy Act (CCPA). You have the right to opt out of this sale (see Section 9 below).

The Lead Partners who may receive your information include companies in the following categories (specific partners vary based on your inquiry type and location):

• Home services providers (contractors, landscapers, cleaners).
• Financial services providers (lenders, insurance companies, financial advisors).
• Professional services (lawyers, accountants, consultants).
• Technology services (software vendors, IT services, telecommunications).
• Other categories disclosed on the lead form at the time of submission.

Consent to Contact: When you submit a Lead Request and check the consent box on the submission form, you provide your prior express written consent as described in our Terms of Service Section, 7 (Lead Generation Services; Communications; TCPA Consent). This consent authorizes us and our Lead Partners to contact you using:

• Live telephone calls
• Autodialed or prerecorded calls
• Text messages (SMS/MMS)
• Email communications.

This consent applies to the telephone number(s) and email address(es) you provide and remains in effect for 12 months or until you revoke it. For complete TCPA consent terms, opt-out procedures, and your rights, please review Section 7 of our Terms of Service at https://carderock.vc/terms.

Lead Partners may contact you via phone (including autodialed and prerecorded calls), text message, and email in accordance with your consent provided at submission. For more information about Lead Partner communications, see our Terms of Service Section 7.

TCPA Compliance Records

You agree that we may maintain records reasonably necessary to demonstrate your consent and the disclosures presented to you at submission, including the content of the consent disclosure, the categories and maximum number of Lead Partners disclosed, the date/time of submission, and technical information such as IP address, device identifiers, and user agent.

Service Providers and Business Partners

We may share information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers.
• Payment processors and financial institutions.
• Email and communication service providers.
• Customer support and help desk systems.
• Analytics and data analysis services.
• Marketing and advertising platforms.
• Security and fraud prevention services.

AI and Machine Learning Providers

If our Services utilize third-party artificial intelligence or machine learning models, your data inputs may be shared with third-party AI service providers, including, without limitation:

• OpenAI (ChatGPT, GPT-4) - subject to their data usage policies
• Anthropic (Claude) - subject to their data usage policies
• Google (Gemini, Vertex AI) - subject to their data usage policies
• and any other artificial intelligence, machine learning, cloud, hosting, or infrastructure providers we may engage from time to time, in each case subject to the applicable provider’s terms, privacy policy, and data usage practices.

Important: While we select AI providers carefully, these third parties process your inputs according to their own terms and data policies. We select AI providers whose API terms and data practices are designed to limit unnecessary data retention and use. However, these third parties process your inputs according to their own terms and data policies, and we cannot control their processing practices entirely. Inputs sent to AI providers may be processed in multiple geographic locations and may be retained according to the provider's data retention policies.

Research and Survey Platforms

When you participate in surveys or research studies, we may use third-party platforms to administer surveys, schedule interviews, and process incentive payments.

We may share limited personal information with third-party service providers, which may include, for example:

• Survey and form platforms (such as Typeform, SurveyMonkey, Google Forms, or similar services)
• Interview scheduling tools (such as Calendly, Google Calendar, or similar services)
• Incentive delivery services (such as Tremendous, Tango Card, or similar gift card platforms)
• User research platforms (such as UserTesting, Hotjar, or similar analytics tools)
• Video conferencing tools (such as Zoom, Google Meet, or similar services)

These third-party providers process your data according to their own privacy policies. We configure these platforms to minimize data retention and sharing where possible.

Cross-Service Data Sharing (Portfolio Companies)

If you use multiple Services operated by Carderock Ventures, we may share your Account information, usage data, and Service Data across those Services to:

• Provide you with a unified experience across our Services.
• Improve our Services through aggregated analytics and product development.
• Personalize your experience by recommending other Services that may be relevant to your needs.
• Market and communicate about other Services we offer, including through email, in-product notifications, and targeted advertising.
• Prevent fraud and abuse.
• Comply with our legal obligations.

We will not share Your Content (data you create or upload) from one Service to another Service without your permission unless necessary for Service functionality.

Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, spin-out of a portfolio company, or sale of assets, your information may be transferred as part of that transaction. We will provide notice of Material Transfers (as defined in our Terms of Service) in accordance with applicable law. Following a Material Transfer, you may delete your Account at any time if you do not wish to continue using the Service under the new ownership.

Legal Requirements and Protection

We may disclose information when we believe in good faith that disclosure is necessary to:

• Comply with applicable laws, regulations, legal processes, or government requests.
• Enforce our agreements, policies, and Terms of Service.
• Protect the security or integrity of our Services.
• Protect the rights, property, or safety of our company, users, or the public.
• Detect, prevent, or address fraud, security, or technical issues.
• Respond to claims of intellectual property infringement.

Aggregated and De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for any business purpose, including industry analysis, market research, and service improvement, and AI model training.

4. YOUR PRIVACY RIGHTS AND CHOICES

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request a copy of your personal information in a portable, structured format.
• Opt-out of Marketing: Unsubscribe from promotional communications at any time.
• Opt-out of Sale/Sharing: Opt out of the 'sale' or 'sharing' of your personal information (where applicable).
• Limit Use of Sensitive Information: Limit our use of sensitive personal information (where applicable).
• Object to Processing: Object to certain processing of your personal information.
• Withdraw Consent: Withdraw consent for processing based on consent (without affecting prior processing).
• Withdraw from Research: Withdraw from ongoing research studies or request removal from research recruitment lists at any time by emailing support@carderock.vc.

How to Exercise Your Rights:

To exercise these rights, please contact us at:

• Email: privacy@carderock.vc
• Subject line: Include the specific right you're exercising (e.g., "Data Deletion Request").
• Information to provide: Your name, email address, phone number (if applicable), the applicable Service that your information is associated with, and description of your request.

We will respond to your request within the timeframe required by applicable law, which is generally 45 days from receipt of a verifiable request, with a possible extension of an additional 45 days where reasonably necessary.

Verification: We will verify your identity before processing your request by matching the information you provide with information in our records. For deletion requests, we may require additional verification.

Authorized Agents: You may designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization.

For Customer Employees (B2B Services)

Important: If you are an employee or user of one of our business customers, and you would like to exercise your rights regarding personal information we process on behalf of that customer, please contact your employer/organization directly. We process such data only on their instructions and cannot fulfill individual requests without their authorization.

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to collect information about your browsing activities and interactions with our Services. This includes:

Types of Cookies We May Use:

Essential Cookies: Required for the Services to function properly. These may include, for example, technologies used for:

• Authentication and account security
• Session management and preferences
• Load balancing and performance
• Security and fraud prevention

Analytics Cookies: Help us understand and improve how users interact with our Services, including, for example, by measuring usage patterns, feature adoption, error rates, and performance, and by using third-party analytics and monitoring providers we may engage from time to time, such as Google Analytics, Mixpanel, Amplitude, or similar services.

Advertising Cookies: Used to help deliver more relevant advertising and measure campaign effectiveness, including, for example, through advertising and marketing tools such as Google Ads conversion tracking, Meta Pixel, LinkedIn Insight Tag, or similar services, as well as for retargeting, remarketing, attribution, and audience measurement.

Functional Cookies: Enable enhanced functionality and personalization of the Services, including, for example:

• remembering user preferences and settings
• customizing content and user experiences
• supporting language, locale, and regional selections
• retaining information about recent activity, interactions, or viewed items

Managing Cookies:

Browser Settings: Most browsers allow you to block or delete cookies through their settings. Visit your browser's help section for instructions.

Opt-Out Tools:

You can opt out of interest-based advertising at:

• Interest-based advertising (US): http://optout.aboutads.info
• Interest-based advertising (EU): https://www.youronlinechoices.eu/
• Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

Note: Disabling cookies may limit functionality of the Services. Essential cookies cannot be disabled without affecting core functionality.

6. DATA SECURITY

We implement reasonable security measures designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. As an early-stage venture studio, our security measures currently include:

• Encryption of data in transit using industry-standard protocols (TLS/SSL) where technically feasible.
• Use of secure, reputable third-party service providers (such as hosting platforms, email services, and analytics tools) that maintain their own security standards.
• Access controls limiting who can view personal information.
• Secure password practices for accounts and systems.

As we grow and scale our Services, we continuously evaluate and enhance our security measures to protect your information.

However, no method of transmission or storage is 100% secure. While we strive to protect your personal information using commercially reasonable safeguards appropriate to our scale and operations, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

7. DATA RETENTION

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on:

• The nature of the information and why we collected it.
• Legal, accounting, or regulatory requirements.
• Whether the information is necessary for our legitimate business operations.
• Our need to defend or establish legal claims.

Minimum Retention Periods:

We maintain certain data for minimum periods required by law or legitimate business needs:

• Lead request data and TCPA consent records: 4 years from submission or last contact (whichever is later).
• Financial and tax records: 7 years.
• Do Not Call/opt-out records: Indefinitely (to prevent re-solicitation).
• Legal holds: As required by applicable law or ongoing legal matters.

General Retention:

For all other personal information, we retain data based on ongoing business needs, which may include:

• Maintaining your account and providing Services.
• Analyzing and improving our Services.
• Complying with legal, regulatory, or contractual obligations.
• Preventing fraud and maintaining security.
• Resolving disputes or enforcing our agreements.

We may retain aggregated, de-identified, or anonymized data indefinitely for analytics, reporting, and service improvement purposes.

You may request deletion of your personal information (see Section 4), subject to exceptions for legal compliance, fraud prevention, and dispute resolution.

When we no longer need personal information, we will securely delete or anonymize it in accordance with applicable law.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to, stored, and processed in the United States and other countries where we, our affiliates, or our service providers operate. These countries may have data protection laws that differ from the laws of your country.

When we transfer personal information from the European Economic Area (EEA), United Kingdom, or Switzerland to countries, we rely on appropriate safeguards recognized under applicable data protection laws, which may include:

• Standard Contractual Clauses approved by the European Commission.
• UK International Data Transfer Addendum where applicable.
• Adequacy decisions by the European Commission or UK authorities.
• Other lawful transfer mechanisms as permitted by applicable law.

By using our Services, you acknowledge that your information may be transferred internationally as described above.

For more information about our data transfer practices, please contact us at privacy@carderock.vc.

9. U.S. STATE-SPECIFIC PRIVACY RIGHTS

If you are a resident of a U.S. state with a comprehensive consumer privacy law — including but not limited to California, Virginia, Colorado, Connecticut, Texas, and Oregon — you may have additional privacy rights under your state's law. We endeavor to honor the privacy rights provided by all applicable state privacy laws, regardless of whether your specific state is named here.

Your State Privacy Rights

State residents may have rights including:

• Right to know what personal information we collect, use, and disclose.
• Right to access your personal information.
• Right to delete personal information we have collected.
• Right to correct inaccurate personal information.
• Right to opt out of the 'sale' or 'sharing' of personal information.
• Right to opt out of targeted advertising.
• Right to opt out of automated decision-making/profiling (in applicable states).
• Right to limit use of sensitive personal information.
• Right to non-discrimination for exercising your privacy rights.

Sale and Sharing of Personal Information

Lead Generation Services: When you submit a Lead Request, we share your contact information (name, email, phone number, inquiry details) with up to 5 Lead Partners. Under California and other state privacy laws, this constitutes a "sale" of personal information.

Advertising Activities: We may share data with third-party advertising partners through cookies and similar technologies, which may be considered a "sale" or "share" under some state laws.

How to Opt Out of Sale/Sharing

To opt out of the sale or sharing of your personal information:

For Lead Generation Services:

• Do not submit Lead Request forms if you don't want your information shared with Lead Partners
• Email privacy@carderock.vc with "Do Not Sell My Personal Information" BEFORE submitting a Lead Request

For Advertising Activities:

• Adjust your browser settings to block third-party cookies
• Use industry opt-out tools: http://optout.aboutads.info (US) or https://www.youronlinechoices.eu/ (EU)

Categories of Third Parties

We may disclose personal information to:

• Lead Partners (for lead generation Services)
• Service providers (hosting, payment, communications, analytics, security)
• AI and technology providers
• Advertising partners
• Professional advisors (legal, accounting, auditing)
• Business transaction parties (in mergers, acquisitions, or asset sales)
• Government authorities and law enforcement (as required by law).

Appeal Rights

If we deny your privacy request, you may appeal our decision by emailing us at privacy@carderock.vc with "Appeal Privacy Request" in the subject line within 30 days. Include your original request details and reason for appeal. We will respond to your appeal within the time required by applicable law. If your appeal is denied, you may have the right to contact your state attorney general.

California-Specific Disclosures

For our lead generation Services, we share contact information with Lead Partners who may contact you about services you've requested. This is disclosed in our "sale/sharing" section above. We do not otherwise disclose personal information to third parties for their unrelated direct marketing purposes. California residents may contact the California Department of Consumer Affairs for privacy-related complaints: (800) 952-5210 or dca.ca.gov.

Notice of Financial Incentive (California Residents)

From time to time, we may offer financial incentives — such as gift cards, cash payments, account credits, or discounts — in exchange for your participation in surveys, user research interviews, feedback sessions, or similar research activities. These incentive programs involve the collection of personal information, including your name, email address, demographic information, opinions, preferences, and responses to survey or interview questions.

Participation in any incentive program is voluntary. You may opt in by agreeing to participate in the applicable research activity, and you may withdraw at any time by emailing support@carderock.vc. Withdrawing will not affect your ability to use our Services.

The value of the incentive offered is our good-faith estimate of the value of the personal information you provide in connection with the applicable research activity. We calculate this value based on the expense we incur in administering the research program, including the cost of recruiting participants, administering surveys and interviews, processing incentive payments, and the business value we derive from the aggregated research insights used to improve our Services. The incentive amount offered for each activity reflects this calculation and is disclosed to you before you agree to participate.

We will not discriminate against you for choosing not to participate in any incentive program. The terms of each specific incentive program, including eligibility, incentive amount, and any limitations, will be disclosed to you at the time of the offer.

For aggregate incentive payments of $600 or more in a calendar year, we are required to collect tax reporting information as described in Section 1 of this Privacy Policy.

10. EUROPEAN PRIVACY RIGHTS (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR).

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our Services and fulfill our contractual obligations.
• Legitimate Interests: Processing for our legitimate business interests (service improvement, fraud prevention, marketing to existing customers) where not overridden by your rights.
• Consent: Processing based on your explicit consent (which you may withdraw at any time).
• Legal Obligations: Processing necessary to comply with applicable laws and regulations.

Your GDPR Rights

Under GDPR, you have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete personal data.
• Erase your personal data in certain circumstances.
• Restrict processing of your personal data.
• Object to processing based on legitimate interests.
• Data portability (receive your data in a machine-readable format).
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with your local data protection authority.

To exercise these rights or find your data protection authority, contact us at privacy@carderock.vc or visit https://edpb.europa.eu/about-edpb/about-edpb/members_en.

11. AI AND AUTOMATED DECISION-MAKING

How We Use AI Technologies

We may use artificial intelligence and machine learning technologies to provide, improve, and secure our Services, including:

• Content generation and assistance - Using AI models (such as OpenAI, Anthropic Claude, and others) to generate, edit, summarize, and transform content based on user inputs
• Personalization - Recommending content, matching users with service providers, and optimizing user experiences
• Analytics and improvement - Analyzing usage patterns, troubleshooting issues, and optimizing features
• Security and moderation - Detecting fraud, spam, abuse, and security threats.

AI Training and Your Data

We may use data derived from user interactions — including aggregated, de-identified, or pseudonymous data, and where permitted by your account type and applicable law, content you submit to the Services — to improve our AI models and Services. If you do not want your data used this way, you may be able to opt out.

For paid or business accounts: You may opt out of having your content used for AI training by adjusting your account settings or emailing privacy@carderock.vc with "AI Training Opt-Out."

For free services: Use of content for AI training helps support free Services and cannot be opted out of without upgrading.

Automated Decision-Making

In some cases, we may use automated decision-making for lead processing, service delivery, account security, and content moderation. When we do so, you have the right to request human review, express your point of view, or contest automated decisions. You can exercise this right by contacting privacy@carderock.vc.

AI Accuracy and Limitations

AI systems may occasionally produce inaccurate, incomplete, inappropriate, or biased outputs. We encourage users to:

• Review AI-generated content before relying on it for important decisions.
• Report inaccuracies or quality issues to our support team.
• Understand that AI cannot replace professional advice and may reflect biases from training data.

To report issues with AI outputs, contact support@carderock.vc.

12. CHILDREN'S PRIVACY

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@carderock.vc and we will delete it.

13. DATA BREACH NOTIFICATION

In the event of a data breach affecting your personal information, we will notify affected individuals and applicable regulatory authorities as required by applicable law. Our notification will include:

• A description of the nature of the breach.
• The categories and approximate number of individuals affected.
• The likely consequences of the breach.
• Measures taken or proposed to address the breach and mitigate harm.
• Contact information for further inquiries.

14. THIRD-PARTY LINKS AND SERVICES

Our Services may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Services.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will:

• Update the 'Last Updated' date at the top of this policy.
• For material changes, provide at least 30 days' notice through email, prominent notice on our Services, or other appropriate means.
• Obtain your consent where required by applicable law.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

16. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

By email: privacy@carderock.vc

By mail: