Mav Farm Inc.

Privacy Policy

Last Revised On: December 14, 2023

This is the Privacy Policy (“Privacy Policy”) of Mav Farm Inc. (“Mav Farm”, “we” or “us”). This Privacy Policy explains how we collect, use and store the information we obtain from or about you when you use our websites www.mav.farm and www.lost.show (the “Websites”), our related web app Mav Farm Enterprise and our web and mobile device application .show (the 'App' or “Apps”), and any other related content, features, content, materials, applications, and/or services (collectively the “Services”) offered by Mav Farm Inc. This Privacy Policy is not a contract and does not create any legal rights or obligations. By using the Services, you accept the Privacy Policy and you expressly consent to our collection, storage, use and disclosure of your information as described in this Privacy Policy. Capitalized terms used but not defined herein have the meanings given to them in our Terms of Use.

INFORMATION WE COLLECT

Through the Services, we collect “Non-Personal Information”and “Personal Information.” Non-Personal Information includes information that cannot be used to personally identify you, such as your IP address, information about your device, anonymous usage data, general demographic information we may collect, preferences you submit and preferences that are generated based on the data you submit. Personal Information includes information that can be linked to a specific individual, such as a name, address, phone number, payment information, email address, login information for third party sites and other information which you submit to us through the Service.

INFORMATION YOU PROVIDE US

When you create an Account using the Services, we will ask you to provide us with your phone number. When using the Services you can elect to provide us with your email address, first name, last name, address, and photos of yourself. In addition, if you want to be able to purchase products via the Services, we will also collect your email address, first name, last name and shipping address and our third party payment processor will collect your credit card information and billing address.

INFORMATION COLLECTED AUTOMATICALLY FROM YOUR USE OF THE SERVICE

In connection with your use of the Service, we will obtain information about the device you use to access the Service, including without limitation the hardware model, operating system and version, browser type, mobile network information and IP address. If the App crashes or experiences other errors, we will receive diagnostic information from your device that will help us to identify and fix errors in our software. We may also collect information about the location of your device depending on the permissions you have set on your device.

We use “cookies” to store and sometimes track user Non-Personal Information. A cookie is a small amount of data that is sent to your browser from a web server and stored on your device. A website or service can use cookies to recognize repeat users or track web usage behavior. You should be aware that Non-Personal Information and data may be automatically collected by virtue of the standard operation of our servers or through the use of cookies. You should be aware that we cannot control the use of cookies (or the resulting information) by third parties. The use of third party cookies is not covered by our Privacy Policy. We do not have access or control over these cookies. We do not track users across third party websites, and therefore do not use or respond to “do not track” signals in your web browser.

We also use “pixel tags” (also referred to as clear gifs or web beacons). Pixel Tags are tiny graphic images with a unique identifier, similar in function to cookies, that are used to track online movements of web users. In contrast to cookies, which are stored on a user’s device, pixel tags are embedded invisibly in web pages. Pixel tags also allow us to tell whether e-mails we send to users have been opened to ensure that we are sending only messages that are of interest to our users.

INFORMATION HOSTED BY THIRD-PARTIES

We may also use services hosted by third parties.

We may use Amazon Web Services, a cloud-computing platform provided by Amazon Web Services, Inc. ('AWS'), to provide a variety of basic abstract technical infrastructure and distributed computing building blocks and tools for the Services. AWS may process personal data in user's content and acts as a data processor or sub-processor to process personal data. When AWS collects personal data of our users and determines the purposes and means of processing that personal data, it acts as a data controller. AWS is responsible for securing the underlying infrastructure that supports our Services, while we and our users are responsible for anything placed or connected into AWS. By using the Services, you consent to the processing of data about you by AWS in the manner and for the purposes set out above. With AWS, we support individuals’ right to access and right to portability of their personal data through individual export requests. We will be able to request an export of one’s own personal data. With AWS, we support individuals’ right to erasure through a permanent deletion of personal data upon request. You may control what data is sent to AWS, and may decide to halt the sending of personal data at any time. To assist with supporting individuals’ right to object to the collection of one’s personal data, you may also opt out of data processing with AWS.

We may use Mixpanel, a mobile application and web analytics service provided by Mixpanel, Inc. (“Mixpanel”), to assist in providing the Services. Mixpanel uses cookies and web beacons to help us analyze: how users use the Services, when users use the Services, how users come to use the Services, what devices and operating systems users use the Services with, where users use the Services and how long users use the Services. Mixpanel may also provide us with a user’s age, user name, real name, and location. The information generated by the cookie or web beacon about your use of the Services (including your IP address) will be transmitted to, and stored by, Mixpanel on their servers. Mixpanel will use this information for the purpose of evaluating your use of the Services, compiling reports on activity on the Services for us and providing other services relating to activity on the Services and Internet usage. Mixpanel may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Mixpanel’s behalf. You may refuse the use of cookies by selecting the appropriate settings on your browser or device, however please note that if you do this you may not be able to use the full functionality of the Services. By using the Services, you consent to the processing of data about you by Mixpanel in the manner and for the purposes set out above. Mav Farm is not responsible for the accuracy of any information provided by Mixpanel or any other third parties or third party policies or practices. With Mixpanel, we support individuals’ right to access and right to portability of their personal data through individual export requests. We will be able to request an export of one’s own personal data. With Mixpanel's Deletion API, we support individuals’ right to erasure through a permanent deletion of personal data upon request. You may control what data is sent to Mixpanel, and may decide to halt the sending of personal data at any time. To assist with supporting individuals’ right to object to the collection of one’s personal data, you may also opt out of tracking with Mixpanel.

We may use Branch, a linking and analytics platform for app and website developers provided by Branch Metrics, Inc. ('Branch'), to assist in providing the Services. Branch provides a variety of tools intended to help our Services bridge together the identity users across a wide array of platforms, devices and applications. Branch helps the Services by connecting user interactions across siloed applications (i.e., email, SMS, web browsers, social platforms, native applications, etc.), so that the Services understand the multiple steps that our users took to within our Services. This information is used by the Services to better inform marketing and product decisions as well as to provide improved user experiences. Branch has no direct relationship with users. Branch uses “Branch Mechanisms” (including links, cookies, web-beacons, pixels, direct platform integrations, etc.) that capture user action on behalf of the Services. By associating the information collected from these Branch Mechanisms, Branch creates and stores identifiers unique to the Branch platform, and then uses a variety of techniques to connect these user actions and identifiers together. Some of these common connection techniques include a direct pass-through of identifiers from platform to platform, probabilistic matching using real time and historical parameters observed from each interaction, as well as using historical connections aggregated across the Branch platform. In some cases, these connections are made without the use of cookies. These techniques help the Services match Users with devices they use, including matching the same User across multiple devices. We only share with Branch information that we have lawfully obtained (including, where necessary, by obtaining consent from Users). We do not share with Branch sensitive User information not necessary for the provision of the Services, and we prohibit them from providing us with data relating to children under 13 (or, in certain jurisdictions, under 16). Branch collects the following information from web URLs created by the our Services and pixels placed on our Services. Some of this information is considered personal data under applicable law (in other words, information that itself may identify a unique individual or can be linked back to an individual) (as described in 'Personal Information'). By using the Services, you consent to the processing of data about you by Branch in the manner and for the purposes set out above. Mav Farm is not responsible for the accuracy of any information provided by Branch or any other third parties or third party policies or practices. With Branch, we support individuals’ right to access and right to portability of their personal data through individual export requests. We will be able to request an export of one’s own personal data. With Branch, we support individuals’ right to erasure through a permanent deletion of personal data upon request. You may control what data is sent to Branch, and may decide to halt the sending of personal data at any time. To assist with supporting individuals' right to object to the collection of one's personal data, you may also opt out of tracking with Branch

We may use TrueDepth API provided by Apple Inc. ('Apple') to collect additional information from your device's camera in order to deliver and improve features we provide (such as the in-app camera, video calling, effects, and more). However, this information is processed in real time for delivering and improving these features only. This information is not saved on our servers or shared with any third parties.

OUR POLICIES CONCERNING CHILDREN

We are committed to complying with all aspects of the Children’s Online Privacy Protection Act ('COPPA'). We do not knowingly collect or solicit Personal Information from anyone under the age of 13 or knowingly allow such persons to register an Account on our Services. If you are under 13, you may not attempt to use or register an Account on our Service or otherwise send any Personal Information about yourself to us, including your name, address, telephone number, or email address. In the event that we learn that we have collected Personal Information from a child under the age of 13, we will use commercially reasonable efforts to promptly delete that information. If you believe that we might have any information from or about a child under the age of 13, please send a detailed message to support@mav.farm.

HOW WE USE AND SHARE INFORMATION

PERSONAL INFORMATION

Personal Information you provide to us is used to help us communicate with you and to provide you with the Service. For example, we use Personal Information to: (i) register and service your Account, (ii) solicit feedback and respond to your questions, (iii) provide technical support, (iv) inform you about products, promotional offers, contests and events, (v) enhance our data security and fraud prevention capabilities, and (vi) create aggregated statistical data. We may also share your Personal Information with our third party service providers (e.g., payment processors, hosting or web service providers, software developers, etc.) in order to allow them to provide services to us with respect to the Service. If you elect to purchase products from Brands or Retailers on the Services, we will transmit Personal Information to such Brands and Retailers as necessary in order to allow them to process your transaction. We have mechanisms in place to ensure that any third parties with whom we share your Personal Information maintain the confidentiality and security of that information. These third parties are prohibited from using your Personal Information for any purpose other than to provide assistance to the Services. We will not sell or rent your Personal Information to third parties.

NON-PERSONAL INFORMATION

MERGERS, ACQUISITIONS AND SIMILAR BUSINESS TRANSACTION

In the event we undergo a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, or in the event of our bankruptcy or insolvency, your Personal Information as well as Non-Personal Information may be among the assets transferred to a third party. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy.

SHARING INFORMATION WITH THE GOVERNMENT OR AS OTHERWISE REQUIRED BY LAW

We cooperate with government and law enforcement officials to enforce and comply with the law. We may therefore disclose information we have about you if we have a good faith belief that it is reasonably necessary to: (a) satisfy any applicable law, regulation, legal process or enforceable governmental request; (b) enforce our Terms of Use, including investigation of potential violations thereof; (c) detect, prevent, or otherwise address fraud, security or technical issues; (d) respond to claims that any of your information violates the rights of third parties; or (e) protect against harm to the rights, property or safety of Mav Farm, our users or the public as required or permitted by law.

DATA RETENTION

We will retain the Personal Information you provide us, or that is generated or collected automatically, for as long as is necessary to provide the Service to you. We will retain the Non-Personal Information in anonymized and aggregated form indefinitely. You may also contact us at support@mav.farm and request deletion of your information at any time or alternatively in app settings, where you may revoke consent to our collection of Personal and Non-Personal Information and request the deletion of this information.

THIRD PARTY LINKS

We may provide links on the Services to third party websites, such as sites operated by Brands, Retailers, service providers or merchants. If you follow links to sites not affiliated or controlled by Mav Farm, you should review the privacy and security policies and other terms and conditions of such sites. Mav Farm does not guarantee and is not responsible for the privacy or security of these sites, including the accuracy, completeness, or reliability of their

YOUR PREFERENCES

You may access, update, or remove any Personal Information we have collected about you through the Services or by contacting us at support@mav.farm. We may require additional information from you to allow us to confirm your identity. We also may not remove your Personal Information if it is published by another user in any video or comment on our Services to the extent your information was publicly posted.

If you'd prefer not to receive information about products, promotional offers, contests and events from us via email, you may opt out by using the “unsubscribe” feature on such emails. However, we still require a working email address to be on file with your account in order to use the Services.

If you do not want information to be collected through the use of cookies, your device may allow you to reject cookies. However, not accepting cookies may result in some features of the Services which require the use of cookies being unavailable to you.

You can choose whether or not to allow the Services to collect and use real-time information about your device’s location through the device’s privacy settings. If you block the use of location information, some parts of the Services may then be inaccessible or not function properly.

If you are a California resident, you may choose to request certain information regarding our disclosure. To make a request or to opt out at any time, please contact us at legal@mav.farm.

DATA SECURITY

Mav Farm and our service providers implement security measures designed to protect your information from unauthorized access, disclosure or accidental loss or destruction of Non-Personal Information and Personal Information. We utilize appropriate physical, technical and administrative safeguards designed to protect the information we collect from or about our users. However, please be aware that no method of transmitting data over the internet and no method of electronic data storage is 100% secure, and we are unable to guarantee the absolute security of the Personal Information we have collected from you. Our databases are located within the United States. If you access our Services from outside the United States, you consent to the transfer, processing, and storage of that data in the United States.

DATA PROTECTION

Definitions. For the purposes of this 'Data Protection' section, the following expressions bear the following meanings unless the context otherwise requires:

1. “Applicable Data Protection Laws” means the e-Privacy Directive 2002/58/EC, the General Data Protection Regulation 2016/679 (“GDPR”) and the e-Privacy Regulation 2017/003 (once it takes effect) and any law, statute, declaration, decree, directive, legislative enactment, order, ordinance, regulation, rule or other binding instrument which implements any one of them (in each case as amended, consolidated, re-enacted or replaced from time to time);

2. “Data Subject”, “Personal Data”, “Process”, “Processed” or “Processing” shall each have the meaning as set out in the GDPR;

3. “Regulator” means the data protection supervisory authority which has jurisdiction over the Processing of Personal Data; and

4. “Third Countries” means all countries outside of the scope of the data protection laws of the European Economic Area (“EEA”), excluding countries approved as providing adequate protection for Personal Data by the European Commission from time to time, which at the date of this Agreement include Andorra, Argentina, Canada, Faroe Islands, Guernsey, Isle of Man, Israel, Japan, Jersey, New Zealand, Switzerland and Uruguay.

Data Processor's Obligations. In relation to any Processing of any Personal Information by Mav Farm on your behalf, you are the “Data Controller” and we are the “Data Processor” and we shall:

Process the Personal Data only on documented instructions from you, including with regard to transfers of Personal Data to Third Countries or an international organization, unless required to Process such Personal Data by Union or Member State law to which Mav Farm is subject; in such a case, Mav Farm shall inform you of that legal requirement before Processing, unless that law prohibits such information on important grounds of public interest; ensure that its personnel authorized to Process the Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality; implement appropriate technical and organizational security measures, including, as appropriate, (i) the pseudonymization of Personal Data; (ii) ensuring the ongoing confidentiality, integrity, availability and resilience of Processing systems and services; (iii) restoring the availability and access to Personal Data in a timely manner in the event of a physical or technical incident; and (iv) regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures for ensuring the security of the Processing; taking into account the nature of the Processing, assist you by appropriate technical and organizational measures, insofar as this is possible, for the fulfillment of your obligation to respond to requests for exercising the Data Subject's rights laid down in the Applicable Data Protection Laws; promptly notify you (including further information about the breach provided in phases promptly as more details become available) in writing upon becoming aware of any improper, unauthorized, or unlawful access to, use of, or disclosure of, or any other event which affects the availability, integrity or confidentiality of Personal Data which is Processed by Mav Farm under or in connection with this Agreement; assist you in ensuring compliance with the obligations to (i) implement appropriate technical and organizational security measures; (ii) notify (if required) Personal Data breaches to Regulators and/or individuals; and (iii) conduct data protection impact assessments and, if required, prior consultation with Regulators; at the choice of Publisher, delete or return all the Personal Data to Publisher after the end of the provision of services relating to Processing, and delete existing copies of the Personal Data unless Union or Member State law requires storage of the Personal Data; and make available to Publisher all information necessary to demonstrate compliance with the obligations laid down in this Privacy Policy, our Terms of Use and Applicable Data Protection Laws, and allow for and contribute to audits, including inspections, conducted by you or another auditor mandated by you.

Sub-Processing. You hereby grant to Mav Farm general written authorization to engage the sub-processors set out in 'Information Hosted By Third Parties' to this Agreement subject to the requirements of this 'Data Protection' section, and on the condition that the Mav Farm shall inform you in writing of any intended changes concerning the addition or replacement of the sub-processors. You will have fourteen (14) days from the date of receipt of the notice to approve or reject the change. In the event of no response from you, the sub-processor will be deemed accepted. If you reject the replacement sub-processor, Mav Farm may terminate your use of the Services with immediate effect on written notice to you.

CHANGES TO OUR PRIVACY POLICY

We may occasionally update this Privacy Policy. When we do update this Privacy Policy, we will also revise the “Last Updated” date at the top of the Privacy Policy. If we make changes to this Privacy Policy that, in our discretion, we consider significant, we will post the updated Privacy Policy on the Service and we may also send e-mails to our users who have created an account containing a link to the revised Privacy Policy. Please review this Privacy Policy periodically to stay informed about how we are protecting the Personal Information we collect. If you continue to use the Service after we post an update to this Privacy Policy, you indicate your acceptance of the updated Privacy Policy.

CONTACT US

If you wish to access, delete or correct your information, or if you have any questions regarding this Privacy Policy or the practices of the Service, please send us an email to support@mav.farm or by letter at 8605 Santa Monica Blvd PMB 97559, West Hollywood, CA 90069