Privacy Notice for PostWaffle

1. What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.

Personal Information Provided by You.

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include names and email addresses.

Sensitive Information.

We do not process sensitive information.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

2. How do we process your information?

In short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process the personal information for the purposes listed below and may process your information for other purposes only with your prior explicit consent.

• To facilitate account creation and authentication and otherwise manage user accounts.
• To deliver and facilitate delivery of services to the user.
• To respond to user inquiries and offer support to users.
• To protect our Services, including fraud monitoring and prevention.

3. What legal bases do we rely on to process your personal information?

In short: We only process your personal information when we have a valid legal reason to do so under applicable law.

If you are located in Canada, we may process your information if you have given us specific permission (express consent) to use your personal information for a specific purpose or in situations where your permission can be inferred (implied consent). You can withdraw your consent at any time.

In some cases we may be legally permitted to process your information without your consent, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way.
• For investigations and fraud detection and prevention.
• For business transactions provided certain conditions are met.
• If contained in a witness statement and necessary to assess, process, or settle an insurance claim.
• For identifying injured, ill, or deceased persons and communicating with next of kin.
• If we have reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse.
• Where seeking consent would compromise availability or accuracy of the information and collection is reasonable for investigating a breach of an agreement or law.
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court.
• If produced in the course of employment, business, or profession and consistent with the purposes for which the information was produced.
• If collection is solely for journalistic, artistic, or literary purposes.
• If the information is publicly available and specified by regulation.
• We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments.

4. When and with whom do we share your personal information?

In short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

• Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Information From Third-Party Platforms (Including TikTok)

PostWaffle allows users to connect third-party social media accounts, including TikTok, to enable content publishing and related features. When a user connects a TikTok account, we may receive limited information from TikTok, such as account identifiers and authorization tokens, strictly as permitted by the TikTok API and only for the purpose of providing the Services requested by the user.

We do not sell, rent, or share TikTok user data with third parties, and we do not use TikTok user data for advertising, profiling, or any purpose unrelated to providing PostWaffle’s core functionality. TikTok user data is processed and stored only for as long as necessary to operate the Services or as required by law.

5. Do we use cookies and other tracking technologies?

In short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some technologies help maintain security, prevent crashes, fix bugs, save your preferences, and assist with basic site functions. We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements and tailor ads to your interests.

To the extent these technologies are deemed to be a "sale" or "sharing" under applicable US state laws, you can opt out by submitting a request as described under the US resident rights section below. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

6. Do we offer artificial intelligence-based products?

In short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

Our AI Products are designed for functions such as image generation and automation. We do not use personal data obtained from connected third-party platforms (including TikTok) to train or improve artificial intelligence or machine learning models. Any personal information processed in connection with AI features is used solely to provide the requested functionality and in accordance with this Privacy Notice.

To opt out, you can log in to your account settings and update your user account.

7. How long do we keep your information?

In short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. No purpose in this notice will require us to keep your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize such information, or securely store it and isolate it from further processing until deletion is possible.

8. How do we keep your information safe?

In short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that unauthorized third parties will not be able to defeat our security. Transmission of personal information to and from our Services is at your own risk; you should only access the Services within a secure environment.

9. Do we collect information from minors?

In short: We do not knowingly collect data from or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction.

By using the Services, you represent that you are at least 18 (or the equivalent age as specified by law) or that you are the parent or guardian of such a minor and consent to their use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at [email protected].

10. What are your privacy rights?

In short: Depending on your location, you may have rights that allow you greater access to and control over your personal information.

In some regions (like Canada) you may have rights to request access and obtain a copy of your personal information, request rectification or erasure, restrict processing, data portability, and not be subject to automated decision-making. If a decision that produces legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer a simple way to request human review. In certain circumstances, you may also have the right to object to the processing of your personal information.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us.

Account information

If you would like to review or change the information in your account or terminate your account, you can log in to your account settings and update your user account. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. We may retain some information to prevent fraud, troubleshoot problems, assist with investigations, enforce legal terms, and comply with legal requirements.

Cookies and similar technologies: Most web browsers are set to accept cookies by default. You can usually choose to remove or reject cookies, but this could affect certain features or services. If you have questions or comments about your privacy rights, email us at [email protected].

11. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems include a Do-Not-Track (DNT) setting. Because no uniform technology standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to DNT browser signals or other mechanisms that automatically communicate your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you in a revised version of this Privacy Notice.

12. Do United States residents have specific privacy rights?

In short: If you are a resident of certain US states, you may have rights to request access, correction, copies of, or deletion of your personal information, and to withdraw consent to processing.

We have collected identifiers (such as name, contact details, and IP address) in the past twelve months. We have not disclosed, sold, or shared other categories of personal information in the preceding twelve months and will not sell or share personal information in the future belonging to website visitors, users, and other consumers.

Your rights

Subject to applicable law, you may have rights to know whether we are processing your personal data, access your personal data, correct inaccuracies, request deletion, obtain a copy of personal data you shared with us, and opt out of certain processing such as targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. Depending on your state, you may also have rights to learn which categories or specific third parties received your data and to limit use and disclosure of sensitive personal data.

How to exercise your rights

To exercise these rights, contact us by emailing [email protected]. Under certain US state laws, you can designate an authorized agent to make a request on your behalf. We may need to verify your identity or request additional information for security or fraud-prevention purposes.

Appeals

Under certain US state laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at [email protected]. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" law

California residents may request and obtain information about categories of personal information (if any) disclosed to third parties for direct marketing purposes and the names and addresses of all such third parties in the previous calendar year. To submit a request, contact us using the details below.

13. Do we make updates to this notice?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes, we may notify you by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to remain informed.

14. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at [email protected]

15. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

To request to review, update, or delete your personal information, please email us at [email protected].