Privacy Policy

This Privacy Policy is effective as of November 2nd, 2025:In GeneralZipstory, Inc. ("we" or "us") values our customers and respect their privacy. This privacy policy ("Privacy Policy") governs our collection and use of data in connection our website (the "Site"), our applications, and any services we offer (collectively, the "Services"). Terms capitalized but not defined in this Privacy Policy shall have the meaning ascribed to them in our Terms of Use. This Privacy Policy sets forth the nature, purpose, use and sharing of any information that identifies or can be used to identify you, the visitors to the Site, and users of our Services ("Personal Information"). This Privacy Policy does not govern privacy practices associated with offline activities, websites other than ours, or practices of third parties that we do not own or control, such as our partners, third party service providers featured on the Site or in the Services or advertisers. If you have objections to the Privacy Policy, you should immediately discontinue use of the Services and follow the procedure described in the section entitled "Opting-Out or Updating Your Personal Information and Privacy Preferences". The Site and the Services are intended for adult audiences only, and we do not knowingly collect any Personal Information from anyone under 12 years of age. If you are under age 12, please do not provide any Personal Information about yourself to us. If we learn that we have collected Personal Information from a child under age 12, we will delete that information as quickly as possible. If you believe that we might have any Personal Information from a child under the age of 12, please contact us immediately.Changes in Privacy PolicyAny Personal Information that we collect and maintain will be subject to this Privacy Policy, as amended from time to time. We may change the Privacy Policy at our sole discretion. However, if at any time we make material changes to the Privacy Policy, we will notify you of those changes on the Site and through the publishing of an updated Privacy Policy. If as the result of such changes you want to alter the ways in which we are allowed to use your Personal Information, you can do so by following the procedure described in the section entitled "Opting-Out or Updating Your Personal Information and Privacy Preferences".Collection of Information

• We collect the Personal Information you give us when you register with the Site or use the Services, including name, address, email, phone number, and other Personal Information requested as part of your use of the Site or the Services, or the information you choose to give us when you use the Services.
• We automatically collect certain kinds of non-personal information from you when you use the Site or the Services, including device, browser type, operating system, CPU speed, referring or exit webpages, click patterns, Session ID, and your computer's IP address.
• We may on occasion supplement or correct the Personal Information you submit to us and your IP address with information in our other databases or information from third-party sources in order to reduce errors in our database, authenticate our users, prevent fraud and prevent abuse of our Site, as well as to provide more consistent, relevant experiences to our users.
• We may collect general information about use of the Site and the Services, such as what pages visitors access, the number of visits, average time spent on the Site and other similar factors. This information is generally collected in aggregate form, without identifying any user individually, although IP addresses and Session ID in relation to downloads may be tracked as part of our fraud prevention efforts.

Financial Information and Third-Party Services

• Bank Account Information: If you choose to participate in our cashback rewards program, you will be required to link a bank account through Plaid, a secure third-party financial services platform. Plaid will collect and transmit your bank account information to us solely for the purpose of verifying purchases and depositing cashback rewards into your account. We do not store your bank account login credentials. Your linked bank account will only be used to deposit cashback rewards and verify transactions - we will never charge or withdraw funds from your linked bank account.
• Payment Processing: For certain paid services, we use Stripe, a third-party payment processor, to process payments. When you provide payment information for subscription services, Stripe collects and processes this information according to their own privacy policy. We do not store complete credit card or debit card information on our servers.
• Transaction Verification: When you use our cashback rewards program, we use Plaid to access read-only transaction data from your linked bank account to verify qualifying purchases. This data is used solely for purchase verification and fraud prevention purposes.

Location-Based ServicesSome Services may contain functionality that can enable us to access your location and tailor your experience based on your location ("Location-based Services"). To use Location-based Services, you must enable certain features of your mobile device (e.g., GPS, WiFi, or Bluetooth) to allow us to identify your location. To the extent your location is collected through Wi-Fi or Bluetooth sensors, such sensors, and the associated data services, may be provided by a third party that may access such information for the purpose of providing such data services to us. You agree to such access by such third parties. You may enable or disable such Location-based Services at any time via a menu within the Apps. If you choose to disable any Location-based Services on your device and/or opt out of any Location-based Services through the menu, you will not be able to utilize certain features of the Services. By enabling Location-based Services on your device, you agree and acknowledge that (i) device data we collect from you is directly relevant to your use of the Services, (ii) we may provide Location-based Services related to and based on your then-current location, and (iii) we may use any such information collected in connection with the provision of Location-based Services in providing the Services. PLEASE NOTE THAT LOCATION DATA MAY NOT ALWAYS BE ACCURATE, AND WE DISCLAIM ANY AND ALL WARRANTIES RELATED TO LOCATION-BASED SERVICES.We may use your location to provide you with advertisements, cashback offers from local businesses, and other promotional content as part of the Services.How Your Information is UsedExcept as provided herein, we collect and use your personal and non-personal information for internal purposes only or to gather aggregate and anonymized data. We may use your information in the following ways:

• To conduct routine business operations such as billing, identification, authentication, contact purposes and general research. As part of our routine business operations, we may transfer your Personal Information to certain third parties with whom we contract for the limited purpose of providing services such as web hosting, email, payment processing (Stripe), and financial services (Plaid). These service providers are obligated to protect your information, and they do not use your Personal Information for their own commercial purposes except as permitted by their own privacy policies.
• To employ internal marketing techniques such as tracking customer preferences to provide a customized Site experience and communicating with you about Services, special offers, cashback rewards opportunities, and other services.
• To provide you with and enhance the Services, including matching you with relevant local business cashback offers based on your location and posting activity.
• To verify purchases and process cashback rewards through our third-party service providers.
• To prevent fraud and ensure the security of our platform.
• To comply with court and governmental orders.

Tracking, Use of Cookies, Web Beacons, and Similar DevicesIn order to improve our Services and the App and provide more convenient, relevant experiences to our customers, we and our agents may use "cookies", "web beacons", and similar devices to track your activities. A cookie is a small amount of data that is transferred to your browser by a web server and can only be read by the server that gave it to you. It functions as your identification card and enables us to record your passwords and preferences. It cannot be executed as code or deliver viruses. A web beacon is a small transparent .gif image that is embedded in an HTML page or email used to track when the page or email has been viewed. Most browsers are initially set to accept cookies, and most services that include similar devices are typically initially activated to collect data. You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether or not to accept it. We do not support browsers' Do Not Track features. You can enable or disable Do Not Track by visiting the preferences or settings page of your browser.Protecting Your InformationWe use a variety of security measures, including SSL, encryption, and authentication tools, to help protect your information. Our third-party service providers (including Plaid and Stripe) maintain their own security measures to protect financial information. It is your responsibility, however, to maintain security of your account credentials and any information you receive when using the Services.Disclosure to Third PartiesWe will not share your Personal Information with third parties without your express consent, except in the limited circumstances described below:

• We may share your Personal Information with third party service providers (including Plaid for bank account verification and transaction monitoring, and Stripe for payment processing) for the limited purposes described in the section entitled "How Your Information is Used".
• We may share anonymized or aggregated data about user behavior with participating local businesses to help them understand the effectiveness of our platform, but such data will not identify individual users.
• We will share your Personal Information when required by law, regulation, or litigation, and as necessary for purposes of national security, law enforcement, or other issues of public importance.
• If we sell assets or are acquired by or merged with another entity, we may provide such entity customer information without obtaining your further consent. We may provide notice of such asset sales, acquisitions, or mergers on the Site.

Your Choices

• If at any time you are uncomfortable with our use of your Personal Information for internal marketing purposes and for the purpose of creating aggregate reports, you may opt-out by email as described in "Opting-Out or Updating Your Personal Information and Privacy Preferences". Note that if you opt not to provide us with certain mandatory information, then our Services may be unavailable to you.
• You may opt out of receiving marketing communications from us, although we may find it necessary to continue to communicate with you regarding your use of the Services, including account-related and transactional notifications.
• You may disconnect your linked bank account at any time through your account settings, though this will prevent you from participating in the cashback rewards program.
• For our websites, you may set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this Site may then be inaccessible or not function properly.

Data RetentionWe retain your Personal Information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When you close your account, we will deactivate it and remove your profile information from active view, but we may retain certain information for legal and business purposes, including fraud prevention and financial record-keeping requirements.Governing LawThe terms of this Privacy Policy are governed by and in accordance with the laws of the state of California. You should not provide us with any Personal Information unless you consent to the application of United States law and, where applicable, California law, and to the use and disclosure of your information in accordance with the terms of this Privacy Policy.Opting-Out or Updating Your Personal Information and Privacy PreferencesYou have the right to access, correct and delete inaccuracies in your Personal Information and privacy preferences on the Services at any time by signing into your account and editing your Personal Information in your account profile. You may also do so by contacting us via telephone, postal mail, or email. If at any time you wish to opt-out of our use of your information for internal marketing purposes or for compiling aggregate reports, you may do so by sending a written notice to: ATTN: Zipstory, Inc., 1590 Rosecrans Suite D 171 Manhattan Beach, CA 90266.Privacy ComplaintsWe take our users' privacy concerns seriously. If you believe that we have not complied with this Privacy Policy with respect to your Personal Information, you may write to us at the address noted above or email us at info@zipstory.com. Also, please note that we are not responsible for the content or privacy practices of third-party websites, services (including Plaid and Stripe), or integrated products to which the Site or the Services may link. You should review the privacy policies of such sites and services before using them. The Services are intended for users in the United States and those not governed by privacy policies of other countries. Users outside the United States are advised not to disclose Personal Information to us.Last Updated on November 2nd, 2025