Privacy & Cookie Policy

Article 1. Introduction and Overview

1.1 Policy Introduction

1.1.1 LetMeBeFrAInk, LLC, a Delaware limited liability company ("Company,""we,""us," or "our"), is committed to protecting the privacy and security of personal information. This Privacy Policy and Cookie Policy (collectively, this "Policy") describes how the Company collects, uses, discloses, retains, and protects personal information in connection with the website located at www.letmebefraink.com (the "Website"), the frAInk interactive AI chat feature, and the SAM AI-agent infrastructure suite (collectively, the "Platform" or "Services").

1.1.2 This Policy is designed to provide transparency to users of the Platform, including business customers and their authorized personnel, and to satisfy applicable legal obligations of the Company. Please read this Policy carefully. By accessing or using the Platform, you ("User,""Customer," or "you") acknowledge that you have read, understand and accept the practices described herein.

1.2 Effective Date

1.2.1 This Policy is effective as of the date set forth at the end of this Policy. The "Last Updated" date indicates when material changes were most recently made.

1.3 Scope of This Policy

1.3.1 This Policy applies to all personal information collected or processed by the Company through: (a) the public-facing Website at www.letmebefraink.com; (b) the frAInk AI character chat feature available to Users; (c) the SAM subscription suite, including its hosted components and any license verification interactions with Local Components executed on customer-controlled infrastructure; and (d) all related communications, support interactions, and business operations.

1.3.2 This Policy does not apply to information collected by third-party websites, applications, or services to which the Website may link, or to the data processing activities of SAM customers as data controllers with respect to their own end-users. Where customers process their end-users' personal data through the SAM suite, the customer is the data controller and the Company acts solely as a data processor/service provider.

Article 2. Information We Collect

2.1 Information You Provide Directly

2.1.1 The Company collects information you provide when you: (a) register for a SAM suite account, including your name, business email address, company name, and billing contact information; (b) authenticate with Google OAuth to access the frAInk chat feature, at which point Google provides the Company with your name and primary email address associated with your Google account; (c) submit a contact form, support request, or other inquiry via the Website; (d) communicate with the Company by email or through in-Platform messaging; or (e) respond to surveys, participate in promotional activities, or otherwise voluntarily submit information.

2.2 Automatically Collected Data

2.2.1 When you access or use the Website or Services, the Company automatically collects certain technical information, including: (a) IP address and approximate geographic location derived there from; (b) device type, operating system, and version; (c) browser type and version; (d) referring and exit URLs; (e) pages viewed, features accessed, and time and date of access; (f) session duration and interaction patterns; and (g) error logs and diagnostic data. This information is collected through server logs, analytics tools, and similar technologies.

2.3 Cookies and Tracking Technologies

2.3.1 The Company uses cookies and similar technologies on the Website as described in detail in Article 6 of this Policy. Cookies are small text files placed on your device that enable certain Website features and help the Company understand how users interact with the Platform. The specific cookies deployed by the Company are identified in the cookie table in Section 6.2.

2.4 Communications Data

2.4.1 The Company stores the content of chat messages exchanged through the frAInk AI chat interface in order to provide the conversational service, maintain session context, and improve the AI system. The Company also retains records of email correspondence and support communications for the purposes of fulfilling requests and maintaining service records.

2.5 Social Media and OAuth Data

2.5.1 When you sign in to the Website using Google OAuth, the Company receives your name and primary email address from Google as part of the authentication flow. The Company uses this data solely to establish and maintain your session and to associate your chat history with your account. The Company does not receive or store your Google password, payment information, or other Google account data.

2.6 Data from Third Parties

2.6.1 The Company may receive limited information about you from third-party service providers in connection with payment processing, cloud infrastructure operations, and security services. The Company does not purchase personal data from data brokers or obtain personal data from public social media sources.

Article 3. How We Use Your Information

3.1 To Provide and Operate the Services

3.1.1 The Company uses collected information to: (a) create and manage user accounts; (b) authenticate users via Google OAuth; (c) operate and maintain the frAInk chat feature and session history; (d) provision and manage SAM suite tenants, credentials, and configurations; (e) process license verification requests from Local Components; and (f) provide customer support and respond to inquiries.

3.2 To Personalize Your Experience

3.2.1 The Company may use information about your usage patterns and account configuration to tailor the presentation of the Website and Services, surface relevant documentation, and provide contextually appropriate responses through the frAInk AI feature.

3.3 To Communicate with You

3.3.1 The Company uses your email address to send transactional communications, including account confirmations, password or authentication notifications, billing statements, service status updates, security alerts, and responses to support requests. These communications are necessary for the operation of the Services and are not subject to marketing opt-out.

3.4 Marketing and Promotional Communications

3.4.1 With your consent or where otherwise permitted by applicable law, the Company may send you promotional content about new features, product updates, case studies, or industry insights. You may opt out of marketing communications at any time by following the unsubscribe instructions in any marketing email or by contacting [email protected]. Opting out of marketing does not affect receipt of transactional communications.

3.5 Analytics and Performance Improvement

3.5.1 The Company uses aggregated and, where appropriate, individually collected usage data to understand how users interact with the Platform, identify technical issues, measure feature adoption, and prioritize product improvements. Analytics data is used internally and is not shared with advertising networks.

3.6 Security and Fraud Prevention

3.6.1 The Company uses technical data to detect, investigate, and prevent unauthorized access, abuse, fraud, and other harmful activity affecting the Platform, its users, or third parties. This may include analyzing IP addresses, login patterns, and API activity.

3.7 Legal Compliance and Obligations

3.7.1 The Company may use and disclose personal information to the extent necessary to comply with applicable laws and regulations, respond to lawful requests from governmental authorities, enforce these Terms, and protect the rights, property, or safety of the Company, its users, or the public.

3.8 Research and Development

3.8.1 The Company may use de-identified or aggregated data derived from Platform usage to conduct internal research, develop and test new features, and improve the AI systems underlying the Platform. The Company does not use identifiable personal data to train external AI models without your explicit consent.

3.9 Payment Processing

3.9.1 The Company uses your billing contact information to generate invoices for SAM subscription services and to communicate with you regarding payment status. Payment card data is handled exclusively by the applicable secure third-party payment processor and is never received or stored by the Company.

Article 4. How We Share Your Information

4.1 Service Providers and Vendors

4.1.1 The Company shares personal information with third-party service providers that perform services on its behalf, acting as data processors. These include: (a) cloud infrastructure and hosting providers; (b) Google, for OAuth authentication services; (c) Anthropic, Inc., as an LLM sub-processor for the optional PII redaction component of the SAM suite; (d) invoicing and billing platforms for SAM subscription management; (e) security and monitoring service providers; and (f) Resend, Inc., as a transactional email service provider for account, security, and billing notifications. All sub-processors are bound by data processing agreements requiring appropriate technical and organizational security measures.

4.2 Business Partners

4.2.1 The Company does not share personal information with business partners for their independent marketing or commercial purposes without your explicit consent.

4.3 Analytics Partners

4.3.1 The Company may use analytics tools that collect usage data from the Website. Such tools receive only the data necessary to provide analytics services (e.g., page views, session duration, and device type) and are prohibited from using that data for independent purposes. The Company does not partner with advertising networks for behavioral advertising.

4.4 Legal Disclosures

4.4.1 The Company may disclose personal information when required to do so by law, regulation, or valid legal process, including subpoenas, court orders, or government agency requests. Where permitted by law, the Company will attempt to notify you before disclosing your information in response to such a request.

4.5 Business Transfers

4.5.1 In connection with a merger, acquisition, divestiture, restructuring, dissolution, or sale of all or a portion of the Company's assets, personal information may be transferred to the successor entity as part of the transaction. The Company will provide notice of any such transfer and any material changes to this Policy that result there from.

4.6 With Your Consent

4.6.1 The Company may share your information with third parties when you explicitly authorize such sharing, including where you authorize third-party integrations with your SAM suite tenant.

4.7 Aggregated and De-Identified Data

4.7.1 The Company may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you with third parties for research, industry reporting, product benchmarking, or analytics purposes.

4.8 No Sale of Personal Data

4.8.1 Company does not sell User data. User data and content is designed to remain within systems and environments controlled by the User. Except as necessary to provide the Services, troubleshoot technical issues, comply with legal obligations, or as otherwise authorized by the User, we do not access, review, store, or use User data or content.

Article 5. Artificial Intelligence and Data Processing

5.1 AI Features and Data Use

5.1.1 The Platform incorporates AI and LLM functionality in three primary contexts: (a) the frAInk AI character, which processes your chat messages to generate responses about the Company and its products; (b) the SAM suite, whose core purpose is to govern, scope, credential, scrub, and audit the actions of Customer-deployed autonomous AI agents; and (c) an optional SAM component that uses Anthropic's LLM API as a sub-processor to perform context-aware PII redaction on data streams within the Customer's environment or isolated tenant.

5.1.2 Chat messages submitted through the frAInk interface are processed by the Company's AI system and stored to maintain conversational context. The Company may use de-identified, aggregated outputs and interaction patterns to improve the frAInk AI system, subject to the restrictions in Section 3.8.

5.1.3 Where the SAM suite's optional PII redaction component is enabled, the relevant data stream is transmitted to Anthropic's API for processing. Anthropic processes such data as a sub-processor pursuant to its API terms and data processing terms. The Company does not direct Anthropic to use such data for model training.

5.2 Disclaimer of AI Accuracy

5.2.1 AI and LLM outputs are probabilistic and may be incomplete, inaccurate, outdated, or contextually inappropriate. The Company makes no warranty regarding the accuracy, completeness, or reliability of any AI-generated content, including outputs produced by frAInk or the SAM suite's LLM components. Users should not rely on AI outputs as a substitute for professional judgment, legal advice, or human decision-making.

5.3 Human Oversight and User Responsibility

5.3.1 You are solely responsible for reviewing and validating AI-generated outputs before acting upon them, and for maintaining appropriate human oversight of your autonomous AI agents configured through the SAM suite. The Company's role is to provide infrastructure governance tooling; final decision-making authority and responsibility for agent actions remain exclusively with you.

5.4 Acceptable Use of AI Features

5.4.1 You shall not use the AI features of the Platform to generate unlawful content, circumvent safety controls, attempt to extract internal prompts or proprietary model configurations, or engage in any activity prohibited by the Acceptable Use Policy in the Terms of Service.

5.5 Data Input Representations

5.5.1 By submitting data or content to the AI features of the Platform, you represent and warrant that you have all necessary rights, consents, and authorizations for such submission and that such submission does not infringe any third-party rights or violate any applicable law.

5.6 AI Output Ownership

5.6.1 As between you and the Company, you retain ownership of outputs generated by the AI features in response to your specific inputs, subject to the Company's underlying ownership of the Platform and infrastructure, applicable third-party LLM provider terms, and any applicable laws governing AI-generated content.

5.7 Model Modification

5.7.1 The Company reserves the right to modify, update, retrain, replace, or discontinue any AI model or LLM component at any time without prior notice. Model changes may affect the character, quality, or style of AI outputs. The Company makes no representation that any specific model will remain available or that output characteristics will remain consistent over time.

5.8 AI Indemnification

5.8.1 You agree to indemnify and hold harmless the Company from any claims arising from your reliance on AI-generated outputs, the configuration or actions of your autonomous AI agents, or your failure to implement adequate human oversight, as further described in the Terms of Service.

Article 6. Cookies and Tracking Technologies

6.1 Types of Cookies Used

6.1.1 The Company uses strictly necessary cookies to operate the Website and provide the Services. At this time, the Company does not deploy advertising cookies, behavioral tracking cookies, or third-party analytics cookies that share data with external advertising networks. The Company may use first-party analytics tools to understand aggregate Website usage.

6.1.2 Strictly Necessary Cookies are essential for the Website to function and cannot be disabled without affecting core functionality. They enable authentication, session management, and security protections, including CSRF prevention.

6.2 Cookie Table

6.2.1 The following cookies are currently deployed on the Website:

6.3 Cookie Consent and Preferences

6.3.1 Because the Company currently deploys only strictly necessary cookies, a cookie consent banner is presented for informational purposes and to comply with applicable law in jurisdictions where notice is required. Strictly necessary cookies cannot be disabled through the consent mechanism without preventing core functionality. If the Company introduces non-essential cookies in the future, this Policy and the consent mechanism will be updated accordingly.

6.4 Third-Party Cookies

6.4.1 Google OAuth sets its own cookies as part of the authentication flow. These cookies are governed by Google's Privacy Policy and are not controlled by the Company. Beyond the authentication flow, the Company does not permit third-party advertising or social media cookies on the Website.

6.5 Do Not Track Signals

6.5.1 The Website does not currently respond to browser-level Do Not Track ("DNT") signals in a manner that alters Website functionality, as no universally accepted standard for DNT compliance has been established. If a standard is adopted, the Company will evaluate its approach to DNT compliance.

6.6 Cookie Duration and Expiry

6.6.1 Session cookies (such as oauth_state) are deleted when your browser session ends or upon completion of the login flow. Persistent session cookies (such as fraink_session) expire after the period specified in the cookie table in Section 6.2.

6.7 How to Opt Out of Cookies

6.7.1 You may configure your browser to block or delete cookies at any time through your browser's settings. Please note that blocking strictly necessary cookies will impair or prevent the use of authentication-dependent features, including the frAInk chat. Most browsers provide instructions for cookie management in their help documentation.

Article 7. Data Retention

7.1 Retention Periods

7.1.1 The Company retains personal information for as long as necessary to fulfill the purposes described in this Policy, including to maintain your account, provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. General retention periods are as follows: (a) the Company will delete or anonymize account registration data 24 months after your account is closed (closed , terminated or expires), except where a longer retention period is required by applicable law, for the resolution of disputes, or for the enforcement of these Terms.; (b) frAInk chat message history is retained for the duration of the account and for 90 days following account closure; (c) technical log data and IP addresses are retained for up to 24 months; (d) billing and invoicing records are retained for 7 years in accordance with applicable financial recordkeeping requirements; and (e) support communications are retained for 4 years.

7.2 Criteria for Determining Retention

7.2.1 In determining appropriate retention periods, the Company considers: (a) the nature and sensitivity of the personal data; (b) the potential risk of harm from unauthorized use or disclosure; (c) the purposes for which the data was collected and whether those purposes can be achieved through other means; (d) applicable legal or regulatory retention requirements; and (e) whether the data is subject to a legal hold or pending litigation.

7.3 Backup and Archival Data

7.3.1 Personal data may persist in encrypted backup copies for a period not to exceed 180 days following deletion from primary systems, after which it will be purged from backup archives. The Company does not restore backup data for operational use after the applicable deletion period has passed.

7.4 Legal Hold Exceptions

7.4.1 Notwithstanding the foregoing retention periods, the Company may retain personal data beyond the periods specified above where required by applicable law, regulation, or governmental order, or where the data is reasonably necessary for the resolution of pending or threatened disputes, investigations, or enforcement proceedings.

Article 8. Data Security

8.1 Security Measures Overview

8.1.1 The Company implements appropriate technical and organizational measures to protect personal information against unauthorized access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to: (a) encryption of data in transit using TLS; (b) encryption of data at rest where applicable; (c) network segmentation and firewall protections; (d) isolated tenant architecture for SAM customer data; (e) regular security assessments and vulnerability monitoring; and (f) secure software development practices.

8.2 Access Controls and Authentication

8.2.1 The Company implements role-based access controls limiting access to personal information to employees and contractors who require such access to perform their job functions. All internal access to production systems is subject to authentication requirements. The Company uses Google OAuth for user authentication, which provides a secure, credential-minimizing sign-in mechanism.

8.3 Data Breach Notification

8.3.1 In the event of a security incident affecting personal information that triggers notification obligations under applicable law, the Company will notify affected users and, where required, applicable regulatory authorities within the timeframes prescribed by law. Notification will describe the nature of the incident, the categories of data affected, likely consequences, and measures taken or proposed to address the incident.

8.4 No Absolute Security Disclaimer

8.4.1 No information security system is completely secure, and the Company cannot guarantee the absolute security of personal information transmitted to or stored on the Platform. You transmit information at your own risk and are responsible for maintaining the security of your account credentials.

Article 9. Your Personal Information Rights and Choices

9.1 Right to Access

9.1.1 You may request a copy of the personal information the Company holds about you by submitting a request to [email protected]. The Company will verify your identity before processing your request.

9.2 Right to Correct or Rectify

9.2.1 If any personal information the Company holds about you is inaccurate or incomplete, you may request correction by contacting [email protected] or by updating your account profile where applicable.

9.3 Right to Delete

9.3.1 You may request deletion of your personal information by contacting [email protected] or by closing your account. The Company will honor deletion requests subject to the retention exceptions described in Article 7 and applicable legal requirements.

9.4 Right to Data Portability

9.4.1 Where technically feasible, you may request that the Company provide your personal data in a structured, commonly used, machine-readable format. To submit a portability request, contact [email protected].

9.5 Right to Restrict Processing

9.5.1 In certain circumstances, you may request that the Company limit the ways in which it uses your personal information, such as where you contest the accuracy of the data or object to its use for a particular purpose.

9.6 Right to Object

9.6.1 Where the Company processes personal data on the basis of legitimate interests, you have the right to object to such processing. The Company will cease processing unless it can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for legal claims.

9.7 Right to Withdraw Consent

9.7.1 Where the Company relies on your consent as the legal basis for processing, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

9.8 Opt Out of Marketing

9.8.1 You may opt out of marketing communications at any time by: (a) clicking the "unsubscribe" link in any marketing email; or (b) sending a written request to [email protected]. Opt-out requests will be processed within ten (10) business days.

9.9 How to Submit a Privacy Request

9.9.1 To exercise any of the rights described in this Article, please submit a written request to [email protected] with the subject line "Privacy Request" and include sufficient information to verify your identity. For account holders, verification will be performed against the email address associated with your account.

9.10 Response Timeframe

9.10.1 The Company will acknowledge receipt of privacy requests within five (5) business days and will respond substantively within thirty (30) days of receipt. Where additional time is required to process a complex request, the Company will notify you of the extension and the reason therefore within the initial thirty (30) day period.

Article 10. Data Roles: Controller and Processor

10.1 Company as Data Controller

10.1.1 With respect to personal information collected from Website visitors, frAInk chat users, and SAM suite account holders (including account registration data, session data, and communications data), the Company acts as the data controller and determines the purposes and means of processing as described in this Policy.

10.2 Company as Data Processor

10.2.1 Where SAM customers' autonomous AI agents process personal data belonging to those customers' own end-users through the SAM suite's hosted components, the customer is the data controller and the Company acts solely as a data processor (or service provider) processing data on the customer's instructions. In this capacity, the Company does not determine the purposes or means of processing the end-users' data and has no independent relationship with those end-users for data protection purposes.

10.2.2 Customers are solely responsible for: (a) establishing and documenting a lawful basis for processing their end-users' personal data; (b) providing all required notices and disclosures to their end-users; (c) obtaining all necessary consents; and (d) ensuring their use of the SAM suite complies with all applicable data protection laws with respect to their end-users' data.

10.3 Local Components

10.3.1 SAM suite components that execute entirely on customer-controlled infrastructure ("Local Components") do not transmit underlying customer data or end-user data to the Company. The Company receives only a license verification signal that contains no personal data beyond a unique installation identifier. The Company has no data processing role with respect to data processed exclusively by Local Components.

10.4 Data Processing Agreement

10.4.1 Where required by applicable law, the Company and the customer may execute a Data Processing Agreement ("DPA") governing the Company's processing activities as data processor. Customers may request the Company's standard form DPA by contacting [email protected].

Article 11. Gdpr and International Compliance

11.1 Territorial Scope and Intended Audience

11.1.1 The Company Services are designed and marketed to businesses located in the United States. The Company does not actively target, market to, or direct the Services to residents of the European Union ("EU"), the European Economic Area ("EEA"), the United Kingdom ("UK"), or Switzerland. If you are an EU, EEA, UK, or Swiss resident and choose to access or use the Website or Services, you do so by your own initiative. By submitting personal information through the Website or Services, EU, EEA, UK, and Swiss residents consent to the transfer of their personal information to the United States and to its processing in the United States, which may have data protection laws that differ from those in your country of residence.

11.1.2 To the extent the Company incidentally processes personal data of EU, EEA, UK, or Swiss data subjects, the Company will comply with the applicable requirements of Regulation (EU) 2016/679 (the "GDPR"), the UK GDPR (as defined in the UK Data Protection Act 2018), and Swiss Law (2018:218) supplementing the GDPR ("Swiss DPA"), as set forth in this Article.

11.2 Legal Basis for Processing

11.2.1 Where the GDPR or UK GDPR applies, the Company processes personal data of EU/UK data subjects on the following lawful bases: (a) performance of a contract (Article 6(1)(b) GDPR) — to provide the Services you have requested; (b) compliance with a legal obligation (Article 6(1)(c) GDPR) — to comply with applicable laws; (c) legitimate interests (Article 6(1)(f) GDPR) — including for security, fraud prevention, analytics, and product improvement, where such interests are not overridden by your rights; and (d) consent (Article 6(1)(a) GDPR) — where you have provided consent for specific processing activities, such as non-essential cookies or marketing communications.

11.3 Data Controller Information

11.3.1 For EU/UK data subjects whose personal data is processed by the Company as controller, the data controller is: LetMeBeFrAInk, LLC 204 Golfview Dr, Ste 130 Monaca, PA 15061, USA Email: [email protected]

11.4 Data Protection Officer

11.4.1 The Company has not appointed a Data Protection Officer, as it does not meet the thresholds for mandatory appointment under Article 37 GDPR, but designates [email protected] for all data protection inquiries.

11.5 EU Representative

11.5.1 As the Company does not systematically process EU personal data on a large scale, the Company has not appointed an EU representative under Article 27 GDPR.

11.6 International Data Transfers

11.6.1 The Company is based in the United States and processes personal data in the United States. Transfers of personal data from the EU, EEA, or UK to the United States are made on the basis of the data subject's consent obtained upon sign-up (as described in Section 11.1.1). Customers who require specific transfer mechanism documentation may contact [email protected].

11.7 Data Subject Rights (EU/UK/Swiss Residents)

11.7.1 EU, EEA, UK, and Swiss data subjects have the following rights with respect to their personal data: (a) right of access (Article 15 GDPR); (b) right to rectification (Article 16 GDPR); (c) right to erasure (Article 17 GDPR); (d) right to restriction of processing (Article 18 GDPR); (e) right to data portability (Article 20 GDPR); (f) right to object to processing (Article 21 GDPR); and (g) rights regarding automated decision-making (Article 22 GDPR). To exercise these rights, please contact [email protected]. The Company will respond within the timeframes required by applicable law.

11.8 Right to Lodge a Complaint

11.8.1 Supervisory Authority. EU, EEA, UK, and Swiss residents who believe that the Company's processing of their personal data infringes applicable data protection law have the right to lodge a complaint with the relevant supervisory authority in their country of residence. The Company encourages individuals to contact the Company at [email protected] to seek to resolve any concerns before filing a complaint with a supervisory authority.

Article 12. Third-party Services and Links

12.1 Third-Party Links Disclaimer

12.1.1 The Website may contain links to third-party websites, applications, or services. The Company is not responsible for the privacy practices or content of any third-party websites. This Policy applies solely to information collected by the Company. We encourage you to review the privacy policies of any third-party services you access.

12.2 Social Media and OAuth Integrations

12.2.1 The Website integrates with Google OAuth for user authentication. When you sign in with Google, Google's Privacy Policy governs the information Google collects and shares in connection with the sign-in process. The Company receives only the profile information described in Section 2.5.

12.3 Payment Processors

12.3.1 Digital Product purchases are processed by Gumroad, Inc. (through the Company's Gumroad storefront at letmebefraink.gumroad.com), which acts as merchant of record and processes payment information independently pursuant to its own privacy policy. SAM subscription billing is handled through a third-party invoicing and payment processing platform. The Company does not receive or store payment card numbers.

12.4 Cloud and Infrastructure Providers

12.4.1 The Company uses third-party cloud infrastructure providers to host the Platform and store data. These providers process personal data on the Company's behalf as sub-processors and are bound by contractual obligations requiring appropriate security measures. The Company will update this Policy if its primary infrastructure providers change.

Article 13. Policy Changes and Updates

13.1 Right to Update This Policy

13.1.1 The Company reserves the right to update or modify this Policy at any time. The "Last Updated" date at the end of this Policy will reflect the date of the most recent revision. The Company encourages you to review this Policy periodically.

13.2 Notification of Material Changes

13.2.1 For material changes to this Policy, the Company will provide notice by: (a) sending an email notification to the address associated with your account; (b) displaying a prominent notice on the Website; or (c) updating the "Last Updated" date. Material changes include changes to the categories of data collected, new sharing practices, or changes to your rights.

13.3 Continued Use as Acceptance

13.3.1 Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must cease using the Platform and may close your account in accordance with the Terms of Service.

Article 14. General Provisions

14.1 Entire Privacy Agreement

14.1.1 This Policy, together with the Cookie table in Article 6 and any supplemental privacy disclosures applicable to specific Services, constitutes the Company's complete statement of its privacy practices and supersedes all prior privacy policies and statements.

14.2 Conflict with Terms of Service

14.2.1 In the event of a conflict between this Policy and the Terms of Service with respect to the collection, use, or processing of personal data, this Policy shall govern.

14.3 Severability

14.3.1 If any provision of this Policy is held to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

14.4 Governing Law

14.4.1 This Policy and any disputes arising hereunder shall be governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict of laws principles.

14.5 Contact and Complaints Process

14.5.1 If you have questions about this Policy, wish to exercise any of your rights, or have a complaint about the Company's data practices, please contact:

LetMeBeFrAInk, LLC

204 Golfview Dr, Ste 130

Monaca, PA 15061

Phone: 724.513.2141

Email: [email protected]

14.5.2 The Company will acknowledge privacy complaints within five (5) business days and will endeavor to resolve them within thirty (30) days.