PRIVACY POLICY Last Updated: May 2025 Tillster, Inc. (“Tillster”, “we”, “our”, or “us”) is committed to respecting and protecting your privacy. Please read through this Privacy Policy to understand how we collect, use, store and share the information you provide or that we may automatically receive when using the Beacon mobile application (“Application”), including your personal information, and the rights and choices you have with respect to your information. For purposes of this Privacy Policy, "Personal Information", in general, is data that identifies or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household. It may also include information or data that can be used to identify, locate, track or contact you. Examples include but are not limited to information such as your name, email address, telephone number, postal address, IP address, and geo-location information. Information that is de-identified, aggregated or anonymized is non-Personal Information and is not subject to this Privacy Policy. By accessing and using this Application or otherwise providing information to Tillster, you have consented to the terms of this Privacy Policy, and consent to our privacy practices described herein, including our use and disclosure of your Personal Information. If you do not agree to the terms and conditions of this Privacy Policy, then please do not provide us with your information. Information we Collect We may collect the following categories of Personal Information from and about you: • We may collect contact and other information that can be used to identify you such as your name, phone number, email address, postal address, username and password, day and month of your birthday, and demographic information such as gender. • We may collect information about your device and Internet usage. • We may collect information about the parts of our Application that you use or third-party apps or websites you visit when you leave our Application. • We may work with third parties who collect information about you when you use our Application. • We may collect information about your location using GPS, cellular network location, Wi-Fi networks, browser services, or information you provide voluntarily when you communicate with us. • We might look at how often you use the Application. We may also collect the following data transmitted from the kiosks that are monitored through the Application: • Real-time status and uptime of kiosks, such as online/offline status, performance metrics, etc. • Error logs and diagnostic reports • Usage statistics • Location data (if enabled) How we Collect your Personal Information We collect Personal Information in the following ways: • We collect this information directly from you. For example, we collect your name, phone number, email address, and demographic information when you register. • We may collect Personal Information from you passively: For example, we may collect information from your phone, like your UDID. Our vendors might also use scripts or other tools to track your activities on our Application. They may do this to make sure our Application functions properly. • We may get information about you from third parties. For example, our affiliates or partners may give us information about you. • We may gather information from tracking technologies. For example, when you visit or log in to our Application, cookies and similar technologies may be used by our data partners or vendors to associate these activities with other Personal Information they or others have about you, including by association with your email. • We (or service providers on our behalf) may then send communications and marketing to these emails. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. • We combine information. For example, we may combine information about you that we have collected offline with information about you we collect online. Or we may combine information about you we collect online with information about you we collected separately. We may also combine information we collect from you with information about you we receive from third parties. How we Use your Personal Information We use your Personal Information to communicate with you, provide our services, protect our business, for marketing and promotional purposes, and as otherwise required by law. • We use your information to provide the services and respond to your requests or questions. For example, we might use your information to respond to your customer feedback, and to communicate with you about your account or our relationship. We may contact you about your account or feedback. We might also contact you about this Privacy Policy or our Terms of Use. • We use Personal Information to improve our products and services: We may use your information to make our Applications and products better. We might use your information to customize your experience with us. • We use Personal Information for security and fraud prevention purposes: We may use your information to protect our company, our customers, and our Application by securing our systems and identifying suspicious activity or fraud. • We use Personal Information for marketing purposes: For example, we might provide you with information about new products and special offers from us. We might also use your information to serve you ads about products and offers. We might tell you about new features or updates. These might be third party offers or products we think you might find interesting. To manage this, read the choices section below. • We use Personal Information as otherwise permitted by law: We may share your information with third parties, especially if you are seeking the services of third parties. We will share your information with our vendors. These are third parties who perform services on our behalf. For example, we may share your information with vendors who send emails for us. We will not rent or sell your mobile telephone number to other companies or individuals (except in connection with providing you with information or services as requested) unless we have your consent. • We may use or disclose your information in any of the following limited circumstances: o With your consent. o To enforce our Terms of Use. o To a company controlled by, or under common control with, Tillster for any purpose permitted by this Privacy Policy. o If we think we have to in order to comply with the law or to protect ourselves or for business purposes. For example, in response to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims. We may also share your information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Use, or as otherwise required by law. o If Tillster is, or its assets are, acquired by or merged with another company. o With any successor to all or part of our business. For example, if part of our business is sold, we may share your information as part of that transaction. You have Choices Account profile: • To update your information or discontinue your account, please contact us as specified in the Contact Us section below. You may also be able to update your information by logging into your account. You have certain choices about sharing and marketing practices: • You can opt out of receiving our marketing emails. To stop receiving our promotional emails, click on the "unsubscribe" link in any promotional message you get from us. Even if you opt out of marketing messages, we will still send you transactional messages. These include responses to your questions. You can control cookies and tracking tools: • We and third-party providers acting on our behalf may use a variety of online tools and tracking devices, such as cookies, web beacons and other storage technologies, to collect or receive information and track activity when you visit or use our Application and elsewhere on the internet. • We may use this information to provide measurement services and to serve you targeted ads. You may opt-out of the collection and use of information for ad targeting. To understand your options and how to exercise them, you can go to: http://www.aboutads.info/choices and http://www.youronlinechoices.eu/ • Your browser may give you the ability to control cookies or other tracking tools by adjusting the appropriate settings in your browser. How you do so depends on the type of tool. Certain browsers can be set to reject browser cookies. • To control flash cookies, which we may use on certain websites from time to time, you can go to https://optout.aboutads.info/ Our Do Not Track Policy: • Some browsers have Do Not Track features that allow you to tell a website not to track you. These features are not all uniform. As such, we do not currently respond to those signals. If you block cookies, certain features on our Application may not work. If you block or reject cookies, not all of the tracking described here will stop. Our Application is Meant for Adults • This Application is not intended for children. We do not knowingly collect, sell, or share Personal Information of children under 13 years of age without permission from a parent or guardian. • If you are a parent or legal guardian and think your child under age 13 has given us information, you can email us at privacy@tillster.com. You can also write to us at the address listed at the end of this Privacy Policy. Please mark your inquiries COPPA Information Request. Parents, you can learn more about how to protect children's privacy online at https://www.consumer.ftc.gov/articles/0031-protecting-your-childs-privacy-online Retention: We Store Information in the United States • ‍We may retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. • Information we maintain may be stored both within and outside of the United States. If you live outside of the United States, you understand and agree that we may transfer your information to the United States. This site is subject to U.S. laws, which may not afford the same level of protection as those in your country. We use Standard Security Measures to Protect your Information • ‍We take the security of your Personal Information seriously and have implemented appropriate technical, physical and organizational measures to protect it from unauthorized access, disclosure, or destruction. However, the Internet is not 100% secure. We cannot promise that your use of our Application will be completely safe. We encourage you to use caution when using the Internet. This includes not sharing your passwords. To learn more about how to protect yourself online, visit www.ftc.gov. We keep Personal Information as long as it is necessary or relevant for the practices described in this Privacy Policy. We also keep your information as otherwise required by law. Link to Other Sites or Third Party Services • This Application may have links to websites we do not control. It may also have plugins or host other third-party services that we do not control. This Privacy Policy does not apply to the privacy practices of those websites or third parties. When you interact with those websites or third parties, they may collect information from you. Read the privacy policy of other websites carefully. We are not responsible for these third party practices. Contact Us If you have any questions or concerns about your privacy or this Privacy Policy, please feel free to contact us in one of the following ways: • Email us at privacy@tillster.com • You can write to us at: Tillster, Inc. 5959 Cornerstone Ct W #100 San Diego, CA 92121 Email: privacy@tillster.com • If you want to correct or update your information, please email us at privacy@tillster.com Updates to this Privacy Policy • This Privacy Policy may be updated from time to time. We will notify you of any material changes to our Privacy Policy as required by law. Any changes will be effective immediately upon posting but will not apply retroactively. Your continued use of this Application constitutes your acceptance of and consent to the Privacy Policy then posted. Please check periodically for any revisions or updates. PRIVACY POLICY FOR CALIFORNIA RESIDENTS ONLY This Privacy Policy is solely for California residents and supplements the information contained in our general Privacy Policy posted above. California residents have certain additional rights set out below with respect to their "Personal Information" as defined under the California Consumer Privacy Act of 2018 (“CCPA”), as modified by the California Privacy Rights Act of 2020 (“CPRA”), the California Online Privacy Protection Act (“CalOPPA”) and the "Shine the Light" law. If you are a California resident and use our Application, the CCPA as modified gives you the right to receive certain disclosures from us regarding our collection, use, disclosure and sale of Personal Information about you, as well as your rights to access, delete, and opt-out of the sale (if any) of certain Personal Information we collect about you. In addition, you will not receive discriminatory treatment from us for exercising these rights. Your rights and choices, and how you can exercise them, are described below. Please note that defined terms as used in this Privacy Policy for California residents shall have the same meaning as defined terms in the CCPA. Collection and Use of Personal Information This section of this Privacy Policy describes the categories of Personal Information we collect, how we collect it, and how we use it. Personal Information in general is data that identifies or is reasonably capable of being associated with, or could reasonably linked, directly or indirectly, with you or your household. It may also include information or data that can be used to identify, locate, track or contact you. Categories of Personal Information Collected Information You Provide: Whether accessing the Application from your home computer, mobile phone, or other device, we and/or our service providers collect information you directly provide. The categories of information we collect, which includes the kinds of information we have collected in the last 12 months, include the following: • "Identifiers" such as name, alias, unique personal identifier (including a device identifier, cookies, pixel tags, mobile ad identifiers), online identifier, Internet Protocol address, email address, telephone number, or other similar identifiers. • "CCRA Personal Information" as defined in the California Customer Records Act (Cal. Civ. Code § 1798.80(e)), including information that identifies, relates to, describes, or is capable of being associated with, a particular individual such as physical characteristics or description, driver’s license or state identification card number, insurance policy number, bank account number. • "Protected Classification Characteristics" under California or Federal Law, such as information involving age, race, marital status, ancestry, etc. • "Commercial Information" such as records of purchasing or consuming histories or tendencies. • "Inferences" drawn from any data collected to create a profile of a consumer, her/his preferences, characteristics, behaviors, etc. Information Collected Automatically: In addition, we automatically collect information about your device and how your device interacts with our Application. We may use service providers to collect this information. The categories of information we automatically collect include the following: • "Service Use Data": We may collect data about the features you use, the pages you visit, the e-mails and advertisements you view, the products and services you view and purchase, the time of day you browse, your referring and exiting pages, and other similar information. • "Device Connectivity and Configuring Data": We may collect data about the type of device or browser you use, your device’s operating software, your internet service provider, your device’s regional and language settings, and other similar information: This data also includes IP address, MAC address, device advertising ID (e.g., IDFA or AAID), and other device identifiers. • "Location Data": We collect data about your device’s location, which can be precise (e.g., latitude/longitude data) or imprecise (e.g., location derived from an IP address or data that indicates a city or postal code level). NOTE: Information once "de-identified" or anonymized is not subject to this Privacy Policy, and we may treat it as non-personal information and use it without obligation to you except as prohibited by applicable law. Categories of Sources of Personal Information In the past 12 months, we have collected Personal Information relating to California residents from the following sources: • Directly from our customers. For example, from information our customers provide to us when registering on or using our Application or engaging our services. • Indirectly from our customers. For example, from information we collect from our customers in the course of providing services to them. • Directly and indirectly from activity on our Application. For example, from information customers provide to us by using our Applications or from information collected automatically when using our Applications. Purposes for Collecting or Selling Personal Information We may use or disclose Personal Information relating to California residents for one or more of the following legitimate business or commercial purposes, which in the past 12 months have included: • To administer, maintain and improve our Platform, products and services. • To fulfill or satisfy the reason for which the Personal Information is provided. • To respond to your requests, questions or feedback. • To communicate with you about your account or our relationship. • To communicate with you about this Privacy Policy or our Terms of Use. • To customize your experience with us. • For security purposes, including protecting the rights, property or safety of our company, our customers, and our Platforms. • For advertising and marketing purposes. • As otherwise disclosed to customers at or before the point of collecting Personal Information. • To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. • To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us is among the assets transferred. • As otherwise permitted under the CCPA or other applicable law. Categories of Third Parties to or with Whom We Share or Sell Personal Information We have shared or sold (as such terms are defined in the CCPA) certain categories of Personal Information to and with the following categories of entities: • Our vendors, suppliers and contributors. • Service providers. • Third parties with whom you or your agents authorize or direct us to share your Personal Information. • Our business partners and affiliates. • Government agencies or investigatory bodies when responding to a court order or subpoena or investigating potential fraud. NOTE: Our Platforms are not intended for children. We do not knowingly collect or sell Personal Information of minors (under 16 years of age) without appropriate authorization as required by law. Categories of Personal Information Shared with Third Parties for a Business or Commercial Purpose We have disclosed or may disclose the following categories of Personal Information to third parties for a business or commercial purpose: • Identifiers • CCRA Personal Information • Commercial information • Service Use Data • Location data Categories of Personal Information Sold to Third Parties for a Business or Commercial Purpose We have sold and may sell the following categories of Personal Information to third parties for a business or commercial purpose: • Identifiers • CCRA Personal Information • Commercial information • Service Use Data • Device Connectivity and Configuring Data • Location data • Privacy Rights and Choices for California Residents Right to Know and Right to Request Deletion of Personal Information If you are a California resident, you have the right to request from us, twice a year, free of charge, the following with respect to Personal Information we have collected from or about you in the past 12 months: • The categories of Personal Information we have collected about you; • The categories of sources from which the Personal Information was collected; • The specific pieces of Personal Information we have collected about you; • The categories of Personal Information about you we shared or sold for a business purpose; • The categories of third parties to whom the Personal Information was shared or sold for a business purpose; and • The business or commercial purpose for collecting, sharing or selling your Personal Information. In addition, you have the right to ask us to delete the Personal Information we have collected about you, subject to certain exceptions as permitted by law. Once we receive and confirm your Verifiable Consumer Request (as defined below), we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies, such as to detect and protect against fraudulent and illegal activity, to exercise our rights, for our internal purposes, or to comply with a legal obligation. How to Make Requests: If you are a California resident and would like to exercise the rights described above, please submit your request by: • Accessing our online form here; • Emailing us at privacy@tillster.com If you use any other method to submit a request, you may be directed to the process above to correct your request. For your security and to ensure that unauthorized third parties do not access or ask us to delete your Personal Information, we must be able to verify your identity and may require specific information from you to help us do so before we can act on your request (a “Verifiable Consumer Request”). If you are a current customer or still have access to your Tillster.com account, you will be required to authenticate your identity through your account. Prior to deletion of your Personal Information, we will require that you follow a two-step process in which you clearly submit a verified request to delete Personal Information and then secondly confirm that you wish to have the Personal Information deleted. Failure to complete both steps will prevent your Personal information from being deleted. If you do not have an account with us, you are not required to create one and any Personal Information you provide will only be used to verify your identity and authority to make the request. You will be required to provide certain information to start the verification process, which may include, at a minimum, verifying your name, e-mail address, and physical address. For more sensitive information, such as a request to know specific pieces of Personal Information, you will be also required to submit a signed declaration under penalty of perjury verifying you are the consumer whose Personal Information is the subject of the request. If you have submitted a request to delete but we cannot verify your identity, we will deny your request to delete but will instead treat the request as a request to opt out of the sale of your Personal Information. Agent Requests: The CCPA allows you to authorize an agent to submit certain requests on your behalf if you have provided that agent with signed, written permission to make such requests or a power of attorney, or if designating a business entity as your agent, it is registered with the Secretary of State. You are required to verify your identity with the agent. We may ask your agent to submit proof that they have been authorized to act on your behalf and may deny any request from an agent that does not submit such proof. In some instances, we may decline to honor your request. For example, we may decline to honor your request if we cannot verify your identity or confirm that the Personal Information we maintain relates to you, or if we cannot verify that you have the authority to make a request on behalf of another individual. In other instances, we may decline to honor your request for information where an exception applies, such as where the disclosure of Personal Information would adversely affect the privacy of others or interfere with legal requirements. We may decline to honor your deletion request if your Personal Information is needed to provide you with service, complete a transaction or fulfill a legal obligation, where the Personal Information that we maintain about you is not subject to the CCPA or for any other reason authorized by law. We do not charge a fee to process or respond to your Verifiable Consumer Request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. Right to Opt-Out of Sale of Personal Information Under the CCPA, you have the right to opt-out of the sale or sharing of your Personal Information by us to third parties at any time. You may submit a request to opt-out by: • Clicking here [need to create this] • Emailing us at privacy@tillster.com with the words "Do Not Sell My Information" in the subject line. Right to Non-Discrimination You have the right not to receive discriminatory treatment by us for exercising any of your rights under the CCPA. Additional California Privacy Rights Shine the Light If you reside in California, you have the right to ask us once a year if we have shared Personal Information with third parties for their direct marketing purposes. To make a request, please send us an email at [email] or write to us at the address listed below. Indicate in your letter that you are a California resident making a Shine the Light inquiry. This Application is meant for Adults This Application is not intended for children. We do not knowingly collect, sell, or share Personal Information of children under 13 years of age without permission from a parent or guardian. If you are a parent or legal guardian and think your child under age 13 has given us information, you can email us at privacy@tillster.com. You can also write to us at the address listed at the end of this Privacy Policy. Please mark your inquiries COPPA Information Request. Parents, you can learn more about how to protect children's privacy online at https://www.consumer.ftc.gov/articles/0031-protecting-your-childs-privacy-online Contact Us If you have any questions or concerns about your privacy or this Privacy Policy, please feel free to contact us in one of the following ways: • Email us at privacy@tillster.com • You can write to us at: Tillster, Inc. 5959 Cornerstone Ct W #100 San Diego, CA 92121 Email: privacy@tillster.com If you want to correct or update your information, please email us at privacy@tillster.com Updates to This Policy We may update or change this Privacy Policy from time to time. If we make any material changes to this Privacy Policy, we will post those changes through a prominent notice on our Application or notify you directly. Any changes will be effective immediately upon posting but will not apply retroactively. Your continued use of this Application constitutes your acceptance of and consent to the Privacy Policy then posted. We encourage you to check periodically for any revisions or updates.