EACH4OTHER PRIVACY POLICY

Effective Date: July 26, 2026. VIP billing records updated: August 16, 2026.

This Privacy Policy is originally drafted in English. Translations may be provided for convenience. To the extent permitted by applicable law, the English version controls if a translation conflicts with or differs from the English version. Mandatory rights under applicable law are not limited by this language provision.

Privacy Summary: Each4Other™ uses a private Shipping Form to collect a user's legal name and address when needed for Dream Auction™™ eligibility or confirmation, delivery or pickup, and service-area or delivery-radius matching. The form is not public. Each4Other™ does not intend to store full SSNs, full tax identification numbers, or full payment-card details on the Platform.

Contents

1. Who We Are and Scope
2. Information We Collect
3. Private Shipping and Eligibility Form
4. How We Use Information
5. Location and Service-Area Matching
6. How Information Is Shared
7. Stripe, Shippo, and Other Providers
8. Public Profiles and User Content
9. Cookies and Similar Technologies
10. Data Retention
11. Security
12. Your Choices and Privacy Rights
13. Canada and Québec
14. United States Privacy Rights
15. International Processing
16. Age Requirement
17. Business Responsibilities
18. Changes to This Policy
19. Contact Information

1. Who We Are and Scope

This Privacy Policy explains how Each4Other™ Inc. ("Each4Other™," "E4O™," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information when you access or use each4other.space, related applications, accounts, profiles, Marketplace, Business Suite, Campaign Builder, Task Board, ShareSpread, TryMe, Dream Auction™™, Coins, VIP, social features, shipping and tracking tools, and related services (collectively, the "Platform").

This Policy applies to Users, Creators, representatives of Businesses, buyers, selected Dream Auction™™ participants, and visitors to the Platform. Additional notices may appear when information is collected for a particular feature. Those notices supplement this Policy.

Each4Other™ Inc. is the organization responsible for the personal information described in this Policy, except where a Business or Third-Party Provider independently determines how it processes information under its own terms and privacy notice.

2. Information We Collect

2.1 Account and Registration Information

Depending on the registration method and account type, we may process information such as your email address or telephone number, username, password hash or authentication token, date of birth or age-confirmation status, account role, interests, preferred language, and account settings.

2.2 Private Shipping and Eligibility Information

When a Platform function requires geographic eligibility, delivery, pickup, or fulfillment, we may collect your legal first and last name, street address, apartment or unit information, city, state, province or territory, ZIP or postal code, and related delivery instructions through a private Shipping Form. A telephone number may be collected only when it is included in the form and reasonably needed for delivery or fulfillment.

2.3 Marketplace, Campaign, and Platform Activity

We may maintain records of purchases, orders, participation requests, valid entries, eligibility checks, campaign activity, TryMe obligations, tasks, rewards, Coins activity, referrals, subscription status, shipping status, support requests, account restrictions, and other interactions with Platform features.

2.4 Public Profile and Content

If you choose to create a profile, publish content, submit a review, send a message, upload media, create a listing, or participate in a campaign, we process the information and content you choose to provide. Public profile information and public content may be visible to other users and Businesses.

2.5 Technical, Security, and Usage Information

Like most online services, the Platform may process limited technical and security information necessary to operate accounts and protect the Platform, such as IP address, browser and device type, operating system, timestamps, login events, session identifiers, cookie choices, error logs, security events, and suspected fraud or abuse signals.

For account-integrity and TryMe protections, we may derive keyed, non-reversible identifiers from a validated IP address, an approximate IPv4 /24 or IPv6 /64 network, browser and language headers, a random first-party security cookie, a normalized telephone number, a shipping address, registration signals, or a payment-provider instrument fingerprint. We use these derived identifiers to compare events without placing the underlying value in a risk alert. We do not store full payment-card numbers, and we do not use canvas, audio, installed-font, or similar invasive browser fingerprinting for this control.

A technical match may be caused by a household, workplace, school, mobile carrier, VPN, proxy, shared device, common browser configuration, or another legitimate circumstance. We therefore evaluate signal strength, independent signal families, contradictory evidence, account history, activity velocity, and campaign impact instead of treating one weak technical match as proof of a linked account.

2.6 Information from Third-Party Providers

We may receive limited status or reference information from providers such as Stripe, Shippo, identity-verification providers, authentication providers, cloud and security vendors, and social or communications services. This may include payment status, connected-account status, verification status, shipment identifiers, carrier and tracking events, or risk indicators. We generally do not need the full underlying sensitive identifier to receive such status information.

3. Private Shipping and Eligibility Form

The Shipping Form is a private account form. It is not displayed in a public profile and is not visible to ordinary Platform users.

We use the Shipping Form only as reasonably necessary to:

• determine whether a User satisfies country, state, province, territory, delivery-area, pickup-area, or service-radius requirements;
• notify a User when a product, service, campaign, or Dream Auction™™ lot is unavailable at the User's location;
• confirm the legal name, residence, eligibility, and fulfillment information of a selected Dream Auction™™ participant;
• arrange delivery, pickup, installation, title transfer, or performance of a requested service;
• provide the minimum necessary fulfillment information to the applicable Seller, Lot Provider, Fulfillment Party, carrier, or service provider;
• prevent false-address use, duplicate participation, fraud, or circumvention of geographic restrictions; and
• comply with applicable law, valid legal process, and Dream Auction™™ Official Rules.

Each4Other™ does not use the private Shipping Form for public profiling or general advertising. We do not sell private Shipping Form information for monetary consideration.

A shipping address may be used as part of the confirmation process, but it may not by itself be sufficient to verify identity. Where additional verification is required, we may use an approved verification provider and receive a verification result or status rather than storing the full identity document or sensitive identifier.

4. How We Use Information

We use personal information for purposes that include:

• creating, authenticating, maintaining, and securing accounts;
• providing Marketplace, social, Creator, Business, campaign, subscription, Coins, TryMe, Task Board, ShareSpread, referral, and Dream Auction™™ functions;
• checking age, residence, geographic eligibility, delivery availability, pickup availability, and service-area eligibility;
• processing or facilitating purchases, subscriptions, refunds, payouts, rewards, fulfillment, and tracking;
• confirming a selected participant and coordinating lot fulfillment;
• providing customer support and responding to requests, disputes, or appeals;
• moderating content, detecting fraud, enforcing rules, and protecting users, Businesses, and the Platform;
• maintaining audit, transaction, security, compliance, and legal records;
• improving reliability, accessibility, and user experience; and
• complying with legal obligations and protecting legal rights.

We do not use personal information for a materially different purpose without providing an appropriate notice and obtaining consent where required by law.

5. Location and Service-Area Matching

A Business may define a delivery territory, pickup area, or service radius for a product or service. We may compare a User's ZIP or postal code, address, or derived approximate location with that disclosed area.

The Platform may display a notice that an offer is unavailable at the User's location or prevent an ineligible action. Where reasonably possible, this matching is performed without disclosing the User's full address to the Business before fulfillment is required.

We do not describe this feature as continuous GPS tracking. Unless a separate notice clearly states otherwise, service-area matching is based on information supplied in the private Shipping Form or other location information the User chooses to provide.

6. How Information Is Shared

We may disclose personal information only as reasonably necessary for the purposes described in this Policy, including to:

• a Seller, Lot Provider, Fulfillment Party, or service provider when necessary to complete a purchase, confirm eligibility, arrange delivery or pickup, or perform a requested service;
• Stripe or another approved payment, connected-account, onboarding, or business tax-document provider;
• Shippo, carriers, and logistics providers for labels, shipment creation, address use, tracking, delivery, returns, or fulfillment evidence;
• cloud hosting, security, authentication, communications, analytics, support, and infrastructure providers acting for us;
• professional advisers, auditors, insurers, financing parties, or transaction counterparties subject to appropriate confidentiality obligations;
• law enforcement, courts, regulators, or other parties when required by law, valid legal process, or necessary to protect rights, safety, or Platform integrity; and
• a successor or relevant party in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar corporate transaction, subject to applicable law.

We seek to disclose only the information reasonably necessary for the applicable purpose. A Business that receives information for fulfillment may use it only for the authorized transaction, service, eligibility, tax, safety, or legal purpose and must protect it under applicable law and its agreement with Each4Other™.

7. Stripe, Shippo, and Other Providers

7.1 Stripe and Financial Information

Stripe or another approved provider may process payment-card information, connected-account onboarding, business verification, payout information, or business tax documents directly under its own terms and privacy notice. Each4Other™ does not intend to store full payment-card numbers, full SSNs, or full tax identification numbers on the Platform.

We may receive limited information such as a Stripe customer or account identifier, payment or payout status, onboarding completion status, dispute status, or risk signal.

When Stripe supplies a payment-method fingerprint, we may immediately convert it into a provider- and method-specific keyed hash to detect the same payment instrument across accounts. We do not retain the provider's raw fingerprint for this purpose.

7.2 Shippo and Fulfillment

Shippo may process addresses, shipment information, carrier selection, labels, tracking numbers, and tracking events to support delivery and fulfillment. Carriers and fulfillment providers may also process the information necessary to perform their services.

7.3 Provider Independence

Third-Party Providers operate under their own terms and privacy notices. Their independent processing practices are not controlled by this Policy. We select and use providers based on operational, security, and compliance considerations, but no online service can ensure absolute security or uninterrupted availability.

8. Public Profiles and User Content

Public profiles, business pages, listings, storefronts, posts, comments, reviews, ratings, campaign content, and other content intentionally made public may be viewed, copied, shared, or indexed by others. Do not place private Shipping Form information, tax identifiers, payment-card information, passwords, or other highly sensitive information in public fields, ordinary messages, reviews, or posts.

Private Shipping Form information is separate from public profile fields. We do not intentionally display the private Shipping Form to other Users.

9. Cookies and Similar Technologies

The Platform may use cookies, local storage, session identifiers, pixels, or similar technologies for authentication, security, language and preference settings, fraud prevention, checkout, embedded services, analytics, and other functions that are actually enabled.

A separate Cookie Policy and consent interface may provide additional details about cookie categories, providers, purposes, and durations. Where required by law, non-essential technologies will be controlled through available consent choices.

Necessary cookies may be required for account login, security, fraud prevention, language preferences, checkout, or core Platform operation and may not function properly if blocked.

A random first-party security cookie may be retained for up to 180 days. It is Secure, HttpOnly, and SameSite=Lax, contains no directly identifying account information, and is compared on the server only through a keyed hash.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including account operation, transaction completion, delivery, eligibility confirmation, dispute handling, fraud prevention, security, audit, tax, and legal obligations.

Retention periods may differ by data type. For example:

• active account information may be retained while the account remains open;
• Shipping Form information may be retained while needed for eligibility, fulfillment, account use, disputes, fraud prevention, or legal requirements;
• transaction, shipment, selection, audit, dispute, and compliance records may be retained for the period reasonably necessary to document the event and satisfy legal obligations;
• recurring-subscription consent records may include the accepted disclosure, amount, billing cycle, trial terms, timestamp, locale, Stripe Checkout/subscription references, and keyed hashes of limited technical signals; verification of affirmative consent is retained for at least three years or one year after the recurring contract ends, whichever is longer, and longer when reasonably required for disputes or law;
• unalerted TryMe risk-attempt telemetry is normally retained for up to 90 days; technical identifiers attached to an alert or entry are normally anonymized after up to 365 days;
• raw legacy TryMe IP addresses are normally removed after up to 30 days, and login correlation fields are normally anonymized after up to 180 days while the login outcome and audit timestamp remain;
• hashed payment-instrument correlation data is normally anonymized after up to 365 days while the underlying financial transaction record is retained as required;
• public content may remain in cached pages, shares, campaign records, or lawful copies after deletion; and
• backup copies may remain for a limited period before secure deletion or overwrite.

We may anonymize or de-identify information so that it is no longer reasonably linked to an individual and retain that information for analytics, security, or operational purposes.

11. Security

We use administrative, technical, and organizational safeguards designed to protect personal information in light of its nature and the risks involved. Measures may include access controls, authentication, encryption in transit, provider-based handling of certain sensitive data, logging, role-based permissions, monitoring, backups, and incident-response procedures.

Access to private Shipping Form information should be limited to authorized personnel, systems, providers, Sellers, Lot Providers, or Fulfillment Parties with a legitimate operational need.

No method of transmission or storage is completely secure. You are responsible for protecting your password, devices, email account, and authentication methods and for promptly reporting suspected unauthorized access.

11.1 Automated Security Screening and Human Review

TryMe participation requests may receive a risk score and a decision to allow, allow and monitor, request verification, hold for review, or reject the automated request. A common browser signature or one network match does not by itself trigger a restriction. Higher-impact decisions require stronger or independent evidence, and administrators can review matched records, approve a held request, classify an alert as a false positive or insufficient evidence, or confirm abuse. User sanctions are applied separately and require the applicable administrator action unless another disclosed rule requires an automatic restriction.

12. Your Choices and Privacy Rights

Subject to applicable law and reasonable verification, you may have the right to:

• access personal information we hold about you;
• correct inaccurate or incomplete information, including Shipping Form information;
• request deletion of certain information or closure of your account;
• withdraw consent where processing is based on consent, subject to legal or contractual restrictions and reasonable notice;
• object to or limit certain uses or disclosures where applicable;
• receive information about our privacy practices and challenge our compliance; and
• appeal or complain to an applicable privacy regulator.

You may update certain account and Shipping Form information through account settings where available. For other requests, contact the Privacy Officer using the information in Section 19.

We may need to verify your identity before responding. We may deny or limit a request where permitted or required by law, including when information must be retained for security, fraud prevention, completed transactions, disputes, audit, legal obligations, or the rights of another person.

13. Canada and Québec

For Canadian users, we identify the purposes for collection, seek meaningful consent where required, limit collection to information reasonably necessary, limit use, disclosure, and retention to identified purposes or other lawful grounds, maintain safeguards, and provide access and correction rights subject to applicable exceptions.

For Québec users, this Policy is intended to serve as the confidentiality policy published for personal information collected through technological means. Each4Other™ will designate a person responsible for the protection of personal information and publish the title and contact information of that person before launch in Québec.

Québec users may contact the Privacy Officer to request access or correction, withdraw consent where applicable, ask questions about automated or technological processing described in this Policy, or submit a complaint. Mandatory Québec rights are not limited by any language-priority provision.

14. United States Privacy Rights

Privacy rights in the United States vary by state and may depend on statutory thresholds, the type of information, and how the information is used. Where an applicable state law grants a right of access, correction, deletion, portability, appeal, or opt-out, Each4Other™ will process a verified request as required by that law.

As of the Effective Date, Each4Other™ does not sell private Shipping Form information for monetary consideration and does not use private Shipping Form information for targeted advertising. If our practices materially change, we will update this Policy and provide any choices required by law.

We will not unlawfully discriminate against a person for exercising an applicable privacy right.

15. International Processing

Each4Other™ Inc. is based in the United States. Personal information may be processed or stored in the United States or other locations where our providers operate. Privacy and government-access laws in those locations may differ from those in your place of residence.

When required by applicable law, we use contractual, organizational, or other measures designed to protect information transferred across borders. Information may remain subject to lawful access by courts, law enforcement, or regulators in the jurisdiction where it is processed.

16. Age Requirement

The Platform is intended only for persons who are at least 18 years old. We do not knowingly permit children under 18 to create accounts or participate in Platform functions.

If we learn that an ineligible minor provided personal information, we may restrict or close the account and delete or retain information as required for safety, fraud prevention, legal compliance, or protection of rights.

17. Business Responsibilities

Businesses, Sellers, Creators, Lot Providers, and Fulfillment Parties must process personal information received through the Platform only for authorized purposes and in accordance with applicable privacy, security, consumer-protection, tax, professional, and recordkeeping laws.

A Business must not use a User's private address for unrelated marketing, sell it, add it to an external marketing list without valid permission, or disclose it to an unauthorized person.

A Lot Provider must not request that a selected participant transmit an SSN, full tax identification number, full payment-card number, password, or similar sensitive information through ordinary Platform messages or unsecured email. Any required tax or identity information must be collected through an authorized secure process.

18. Changes to This Policy

We may update this Policy to reflect changes in the Platform, data practices, providers, security measures, legal requirements, or business operations. The updated Policy will state a new effective date.

Where required by law or where a change materially affects privacy rights, we will provide reasonable notice through the Platform, email, or another appropriate method and obtain consent where required.

19. Contact Information

Each4Other™ Inc.
Website: https://each4other.space
Privacy Officer / Person Responsible for the Protection of Personal Information: [INSERT NAME OR TITLE BEFORE PUBLICATION]
Privacy requests and complaints: [INSERT PRIVACY EMAIL BEFORE PUBLICATION]
Support inquiries: [INSERT SUPPORT EMAIL BEFORE PUBLICATION]
Mailing address: [INSERT BUSINESS MAILING ADDRESS BEFORE PUBLICATION]

Please do not send SSNs, full tax identification numbers, full payment-card numbers, passwords, copies of identity documents, or other highly sensitive information through ordinary email or Platform messages.

END OF PRIVACY POLICY