1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Disclose to Us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you:

• Register on our Services;

• Express interest in our products or Services;

• Participate in activities on our Services (e.g., posting messages, filling forms);

• Communicate with us for customer support, sales inquiries, or similar reasons.

Types of Personal Information

The personal information we collect depends on how you interact with us and our Services, the choices you make, and the products and features you use. This may include:

• Names and usernames

• Phone numbers

• Email addresses

• Mailing addresses

• Billing addresses

• Contact preferences

• Payment details (e.g., credit/debit card numbers)

• Contact or authentication data

• Flight preferences (if applicable)

Sensitive Information

When necessary, and with your consent or as otherwise permitted by applicable law, we may process certain sensitive information, such as financial data (e.g., credit card information) to facilitate transactions.

All payment data is stored by our payment processor, Stripe. For details on how Stripe processes your data, please see their Privacy Policy athttps://stripe.com/privacy.

Application Data (Mobile or Web-Based)

If you use our application(s), we may collect additional information (with your permission), such as:

• Geolocation data (GPS or IP-based)

• Device access to your camera, contacts, reminders, etc.

• Push notifications or device alerts

• Mobile device data (device ID, manufacturer, OS version, carrier, IP address, etc.)

This information is primarily needed to maintain and secure our application(s), assist in troubleshooting, and enable internal analytics or reporting.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information Automatically Collected

In short: Some information — such as IP address and browser characteristics — is collected automatically.

We automatically collect certain information when you:

• Visit our website(s);

• Use or navigate our Services;

• Interact with our content or marketing communications.

This may include:

• Log and usage data (IP address, browser type, pages viewed, search queries)

• Device data (hardware model, OS, unique device identifiers)

• Location data (precise or imprecise geolocation based on your IP address or device settings)

We may also collect data via cookies or similar technologies, as explained further below.

2. HOW DO WE PROCESS YOUR INFORMATION?

In short: We process your information to provide, improve, and administer our Services, for security and fraud prevention, and to comply with legal requirements.

Depending on how you interact with our Services, we may process your personal information for the following purposes:

• Account creation and authentication

• Delivering services you request or purchase

• Customer support and troubleshooting

• Sending administrative information, such as updates to our terms and policies

• User-to-user communications (if such features are offered)

• Requesting feedback on our products and Services

• Marketing and promotional communications (in line with your preferences)

• Delivering targeted advertising and personalized content

• Protecting our Services (security, fraud monitoring, and prevention)

• Evaluating and improving our Services (usage trends, marketing campaigns, user experience)

• Legal compliance (responding to requests, exercising our legal rights, etc.)

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In short: We may share information in specific situations described in this section and with certain third parties.

• Business Transfers: In connection with or during negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

• Analytics Providers: We may use services such as Google Analytics or similar tools to track and analyze usage. Google’s privacy policy is here:https://policies.google.com/privacy.

• Marketing Pixels: We implement marketing pixels (e.g., from Google Ads, Facebook, LinkedIn, or other platforms) to track conversions, user actions, and to serve you relevant ads. These platforms may collect or receive certain information about your visits and interactions, which is used to measure effectiveness and/or optimize ad targeting.

• Affiliates and Business Partners: With our affiliates or trusted partners for specific service offerings or promotions, provided they agree to honor this Privacy Notice.

• Publicly Accessible Areas: Any personal information you choose to share in a public forum (e.g., public comments) may be viewed by others.

• Legal Obligations: If required by law, or if necessary to protect our rights, respond to legal process, or protect the safety of others.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In short: Yes, we use cookies and similar technologies (including marketing pixels) for analytics and advertising.

We may use cookies, web beacons, pixels, and other tracking technologies to store or collect information. This helps us understand how you use and navigate our Services, measure the effectiveness of our marketing campaigns, and tailor advertisements to your interests.

For more information about how we use cookies and how you can manage your cookie preferences, please see our Cookie Notice (or relevant section) on our website.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

In short: We keep your information as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless otherwise required by law.

We retain personal information for no longer than is needed to:

• Provide or facilitate your use of the Services;

• Satisfy legal, tax, or accounting requirements;

• Protect our legitimate business interests.

For example, we may keep your personal information for up to six (6) months after you terminate your account, unless longer retention is required or permitted by law. Once we have no continuing legitimate need to process your personal information, we will either delete or anonymize it.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

In short: We aim to protect your personal information through appropriate security measures, but cannot guarantee 100% security.

We implement technical and organizational safeguards designed to protect your personal information. However, no method of transmission over the Internet or electronic storage is entirely secure, so we cannot guarantee absolute security against unauthorized access by hackers, cybercriminals, or other third parties.

7. WHAT ARE YOUR PRIVACY RIGHTS?

In short: Depending on your location, you may have certain rights regarding your personal information.

• Withdrawing consent: You can withdraw previously given consent at any time, though this will not affect processing already carried out before withdrawal.

• Opting out of marketing: You can unsubscribe from marketing or promotional emails by clicking on the unsubscribe link in those messages or contacting us.

• Reviewing/changing account information: You can typically update your account details by logging into your profile or contacting us directly.

• Deleting your account: If you wish to delete your account, you may do so through your account settings or by contacting us. We may retain limited data for legitimate business or legal purposes.

Additional or different rights may apply depending on your jurisdiction. Please refer to the sections below for state-specific or region-specific rights (e.g., California, Colorado, Connecticut, Utah, Virginia).

8. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers and some mobile operating systems include a Do-Not-Track (DNT) feature to signal your preference not to have online browsing tracked. However, no uniform technology standard for DNT has been finalized, so we do not currently respond to DNT browser signals. If a uniform standard is adopted, we will update this Privacy Notice accordingly.

9. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In short: Yes, certain states grant additional privacy rights regarding personal information.

California Residents

You may have specific rights under the California Consumer Privacy Act (CCPA) or other state laws. These include the right to request deletion of your data, to know what personal information we collect, and to opt out of the sale or sharing of personal information. For details, please refer to the relevant subsections in the original text above.

Colorado, Connecticut, Utah, and Virginia Residents

Similar rights apply under CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), and VCDPA (Virginia). Please see the relevant text above for instructions on how to submit requests, verification procedures, and appeals.

10. DO WE MAKE UPDATES TO THIS NOTICE?

In short: Yes, we will update this notice as necessary to remain compliant with relevant laws.

We may update this Privacy Notice at our discretion. The updated version will be indicated by a revised “Last updated” date and will be effective once posted. For material changes, we may notify you via prominent notice on our Services or direct communication.

11. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have any questions or comments about this Privacy Notice, you may email us at support@sandstormapp.com, or by post at 390 NE 191ST ST # 8117, MIAMI, FL 33179, United States

12. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state, you may have the right to request access to, update, or delete the personal information we collect from you. To request a review, update, or deletion of your personal information, please:

• Email: support@sandstormapp.com or

• Send a written request to the address provided above.

We will consider and act upon any request in accordance with applicable data protection laws.

Thank you for reading this Privacy Notice. By using our Services, you acknowledge that you have read, understood, and agree to these practices for processing personal information. If you have further questions, please contact us at email: support@sandstormapp.com