Privacy Policy

TYPES OF DATA WE COLLECT.

We collect and use information at Coort Inc. to enhance our services, guarantee safety, and meet our legal responsibilities. Personal information, financial data, technical and usage data, and cookies/tracking information are among the types of data we collect. With these groups, people can access, use, and appreciate all the useful features the Platform offers. • Personal Identifiable Information (PII): When users register for an account or engage with the Platform, we collect certain personally identifiable information to authenticate them and facilitate interactions between landlords and tenants. This information includes a user’s full name, email address, and residential address. It is essential for account creation, verification, and maintaining a secure and transparent rental process. • Financial and Transactional Data: We collect limited financial data to support secure payments and monetary transactions within the Platform. This includes the last four digits of the user’s Social Security Number for identity verification and banking information for payment processing. We do not store full credit card numbers or sensitive banking details; all payment transactions are handled through our third-party payment processor, Stripe, which adheres to strict industry security standards. • Technical and Usage Data: Besides personal and financial information, we collect technical and usage data to improve Platform functionality, enhance security, and provide a seamless user experience. This data may include IP addresses, device type, operating system, browser type, and interaction logs that track how users engage with different features of the Platform. This information helps us diagnose technical issues, optimize performance, and ensure compliance with security protocols. • Cookies and Tracking Information: We use cookies and other tracking technologies to monitor user interactions and improve the overall experience on our Platform. Cookies help us understand user preferences, track login sessions, and collect analytical data for performance enhancements. Users are given the option to accept or decline cookies through a consent pop-up when accessing the Platform. The data we collect is handled with the utmost care, following industry best practices for privacy, security, and transparency. Users can access, modify, or request the deletion of their data through their account settings or by contacting our support team.

HOW WE COLLECT DATA.

Collecting data through different paths at Coort Inc. supports our Platform’s proper functioning, allows us to provide necessary services, and boosts our users’ feelings. Our users, automatic systems, and third-party service providers provide the information we gather. The development of each method is guided by checking the accuracy, security, and legal compliance of the data collected. Creating an account or making transactions on the Platform requires users to provide their personal and financial details. As part of the registration, they must add their name, email address, where they live, and banking information. Besides, if users handle security deposit tracking, payment processing, or communication tools, some extra information might be required to run them properly. Whenever users visit the Platform through web, mobile, or tablet, technical and usage data are automatically collected for system monitoring, security, and user experience. The information gathered includes IP addresses, specific device identifiers, the type of operating system, the type of browser, and logs showing how users have interacted with the Platform. We additionally use cookies and tracking methods to gather data on what users do during their visits, their session details, and what they choose on our site. These make it possible for us to greet returning users, keep their sessions active, and better understand usage to fix or improve the service. People are given the opportunity to agree or disagree with cookies when they start using the Platform. We partner with trusted third-party service providers to facilitate secure payments, identity verification, and account security. For example: • Stripe collects and processes banking details for secure payment transactions. • Twilio provides multi-factor authentication (MFA) and security verification to protect user accounts. These third-party providers adhere to strict privacy and security protocols, ensuring that collected data is processed responsibly and used only for the intended purpose. We do not sell or share user data with third parties beyond what is necessary to provide essential Platform services.

HOW WE USE DATA.

Collecting and processing user data is to provide, keep running, and enhance the Platform. User data is not sold or used for anything without permission. Data collected helps enhance the service’s usability, ensures user safety, supports all transactions, and follows the requirements of the law. User data is essential for the core functionalities of the Platform. We use personal information, financial details, and technical data to: • Create and manage user accounts, ensuring landlords and tenants can securely access their profiles. • Facilitate transactions, including the secure processing of security deposits and rent payments. • Store and manage rental-related documents, such as lease agreements, inspection records, and communication history. • Enable communication between landlords and tenants through our integrated messaging system. We use collected data to maintain the security and integrity of our Platform, including: • Identity verification through secure authentication processes. • Fraud detection and prevention, ensuring that only legitimate users can access and engage in financial transactions. • Monitoring suspicious activity, including unauthorized login attempts or unusual payment behavior. To support these security measures, we partner with trusted third-party providers such as Twilio for two-factor authentication and Stripe for secure payment processing. We process user data as required by applicable laws and regulations. This includes: • Fulfilling legal obligations related to financial transactions and tax reporting. • Responding to valid legal requests from government agencies or law enforcement. • Ensuring compliance with rental and financial regulations applicable to landlords and tenants. We continuously improve our Platform by analyzing technical and usage data to: • Optimize Platform performance and ensure seamless navigation. • Identify and fix system errors, improving the stability and reliability of our services. • Personalize user experience by sending relevant notifications or reminders for lease renewals and payments. • Enhance customer support, ensuring quick and effective responses to inquiries. We strictly limit the use of personal and financial data to operational and security-related purposes only. Users maintain control over their data, with options to access, update, or delete their information, as our User Rights section outlines.

NO SALE OF DATA.

We ensure that all our users’ personal information is safe and secure at all times. Because of this commitment, we do not sell any customer data. We follow this view to protect our users’ privacy and ensure that they continue to have confidence in us. It is essential to clarify that the term sale of data in this Privacy Policy refers to giving away personal information to others (such as companies) for a price or some other valuable thing. We know how important it is and promise our users that their data will not be seen as a business asset in our dealings. We will not be considered to have “sold” data if we share it according to allowed factors besides those included in the definition of a “sale,” even if that goes beyond this Privacy Policy. We provide information to companies that help us deliver and improve our Platform, run our business, and look after our users, provided that they agree to keep the data confidential and only use it for the intended purposes. We may also need to share your data if it is required by law, if there is a subpoena, during bankruptcy proceedings or with a similar legal process or if we believe that disclosure is needed to protect our rights or your safety or the safety of others, investigate fraud or in response to a government request. We value transparency in our data processes and ensure that our users have control over their data. To this end, we describe the different kinds of data we collect, the reasons we collect it, and the specific scenarios when it could be given to others, as outlined in other parts of this Privacy Policy. This policy will be reviewed periodically and might be revised to account for new developments or laws. Should any changes be made, we will post these updates in our Privacy Policy, and we suggest users look at this policy regularly to stay aware.

LAWFUL BASIS FOR COLLECTION.

At Coort, we collect and process your data in accordance with applicable privacy laws and regulations. The lawful basis for our data collection and processing activities depends on the nature of the information and the specific context in which it is collected. We rely on the following lawful bases: • Consent: Your consent is the foundation for many data collection practices. For instance, when you voluntarily provide your information during account registration or enable location tracking, you explicitly agree to collecting and using this data for the purposes outlined in this Privacy Policy. You can withdraw your consent at any time by adjusting your settings or contacting us, although this may limit your access to certain features of the Platform. • Contractual Necessity: The processing of your data is essential for the contract between you and Coort. For example, we require your data to create your account, provide access to the app, and enable its core features. Without this information, we could not fulfill our contractual obligations to you. • Legitimate Interests: We process specific data to pursue our legitimate business interests in providing a secure, high-quality, personalized user experience. These interests include app optimization, fraud prevention, and system security. When processing your data based on legitimate interests, we ensure our operational needs do not override your privacy rights. • Legal Obligations: Sometimes, we must collect, retain, or disclose personal data to comply with applicable laws, regulations, or legal processes. For example, we may process your data to respond to a court order or government request. • User Protection: We may process your data when necessary to protect your vital interests or the interests of others, such as ensuring the safety and security of the Platform or addressing unauthorized access. By relying on these lawful bases, we ensure that our data collection and processing activities are conducted responsibly, transparently, and in compliance with all applicable legal requirements. If you have questions about the lawful basis for a specific data processing activity, please get in touch with us using the details provided in the Contact Us section of this Privacy Policy.

HOW WE SHARE DATA.

We never allow anyone to purchase user data from us. However, to offer our services, process transactions, and keep the platform secure, we may give some user information to trusted service providers and regulatory bodies when required by law. These contract agreements require every third-party provider to secure data, keep it secret, and restrict its use to set functions. To help with smooth operations and safe transactions, we rely on third-party providers for some operational jobs. All financial operations for rent and deposits are handled by Stripe, which ensures that financial security guidelines are met. Two-factor authentication from Twilio is designed to improve account protection and stop unauthorized logins. All user information is held on AWS, including encryption and strong infrastructure security. Only the needed information is processed by these vendors, and they must keep our data protection policies very strict. At times, we are legally bound to provide user details to government offices, law enforcement, or regulatory groups. The company may respond this way because of court orders, subpoenas, required financial reports, or any investigation into fraud or security issues. We will inform users if they are allowed by law to disclose their information each time we disclose it. If a merger, acquisition, sale of assets, or corporate restructuring occurs, user data may be part of the business change. When this happens, the new company must follow the terms of this Privacy Policy. The system will inform them if there are essential changes to someone’s data. Our internal studies, analytics, and ways we improve business often rely on aggregated information that does not identify you. None of the personal information you provide is seen or used in this data, which only helps the platform perform, secure, and support the user experience. The settings in an account allow users to manage, change, or remove their personal information. Users can also stop their data from being shared by using the settings to delete their data or change their account privacy settings.

DATA SECURITY.

The protection of personal and financial data is our number one priority, and we take industry-standard actions to prevent unauthorized access, abuse, changes, and loss of this information. Our security system ensures that users’ sensitive data is kept confidential while it is both in use and at rest, guarding it against cyber threats. Amazon Web Services (AWS) securely holds all the user data, and it is recognized worldwide for its strong approach to protecting data. Ensuring your privacy, all data sent and stored on the servers is encrypted using modern techniques. Any financial transaction through Stripe gets PCI DSS compliance to handle payment information securely. We put strong authentication in place to prevent unauthorized users from entering your account. An extra layer of security is needed due to Twilio-powered two-factor authentication (2FA), which helps prevent unauthorized access. We also use role-based access controls (RBAC), ensuring that employees with the right roles can only access sensitive data for operational reasons. The platform is continuously scanned for risks, suspicious actions, and attempts to gain unapproved access. The security team relies on IDS and automated security audits to notice and treat security issues in advance. We set up firewalls, secure the gateways for our APIs, and install malware detectors to prevent cyber attacks. If a data breach is suspected, we follow the steps in our incident response plan for fast containment, investigation, and damage mitigation. If there is a breach, authorities and those whose data was accessed will be promptly informed, as required by privacy laws, and steps will be taken to manage and correct the situation. While we implement strong security measures, users play an essential role in protecting their accounts. We recommend: • Using strong, unique passwords and changing them periodically. • Enabling two-factor authentication (2FA) for added security. • Avoid sharing login credentials with others. • Reporting suspicious activity immediately to our support team. Cybersecurity is an evolving field, and we continuously update our security framework to address emerging threats and regulatory requirements. Our commitment to regular security audits, penetration testing, and compliance assessments ensures that we maintain the highest level of data protection.

LIMITATION OF LIABILITY

Coort Inc. cannot be held liable for indirect, incidental, special, consequential, or punitive damages caused by or resulting from the use or inability to use the Platform, unless Washington State and applicable Federal laws allow it.

INDEMNIFICATION

Users agree not to hold Coort Inc. or any of its affiliates, officers, directors, employees, or agents liable for any claims, liabilities, damages, or costs (including attorney fees) that occur because they have violated this Privacy Policy or misused the Platform.

Force Majeure

Coort Inc. will not be responsible for delays or lack of performance caused by unavoidable reasons such as natural disasters, pandemics, actions taken by authorities, or telecommunication outages.

DATA RETENTION.

We retain user data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Our retention practices are designed to balance user privacy, security, and compliance requirements, ensuring that data is not stored longer than needed. Our retention periods for different types of data are as follows: • Personal Identifiable Information (PII): User profile data, including name, email, and address, is retained as long as the user maintains an active account. If an account is deleted, this data is securely removed within 30 days, unless required for legal or compliance purposes. • Financial Data: Banking information and transaction records processed through Stripe are retained as financial regulations and tax laws require. Financial compliance requirements store Payment-related data for up to seven (7) years. • Technical and Usage Data: Log files, IP addresses, and device identifiers are retained for security monitoring and fraud prevention. These records are typically stored for 12 months before being anonymized or deleted. • Cookies and Tracking Data: Cookies and tracking information are stored based on user preferences. Users can manage or delete cookies at any time through their browser settings. Users can request deletion of their data at any time through account settings. Upon request, we will remove or anonymize data unless retention is required by law, regulatory compliance, or for fraud prevention. Users should note that: • Account deletion requests may result in permanent data loss associated with their profile. • Some transactional and legal records cannot be deleted immediately due to regulatory obligations. • Aggregated, non-personally identifiable data may be retained for analytics and service improvements, but will not be linked to individual users. When data is no longer needed, we use secure deletion methods to ensure it cannot be recovered. This includes data encryption, anonymization, and secure overwriting protocols. We follow industry best practices for data destruction and disposal for physical storage media.

COOKIE POLICY.

We use cookies and similar tracking technologies to enhance user experience, improve Platform performance, and analyze usage trends. This Cookie Policy explains how we use cookies, what cookies are in place, and how users can manage their preferences. Cookies are small text files stored on users’ devices when they visit or interact with the Platform. These files help websites and applications remember user preferences, enable seamless navigation, and provide insights into user behavior. Cookies can be session-based (deleted after browsing) or persistent (stored for a specified period). We use the following categories of cookies: • Essential Cookies: These are necessary for the Platform to function properly. They enable user authentication, security features, and session management. Users cannot turn off essential cookies, as they are required for core functionality. • Functional Cookies: These enhance the user experience by remembering preferences, settings, and previously entered information. For example, they may store preferred language settings or login credentials for easier access. • Analytics and Performance Cookies: These cookies track user interactions with the Platform, providing insights into website traffic, feature usage, and performance optimization. We use these cookies to improve Platform stability and user experience. • Advertising and Tracking Cookies: We do not use cookies to advertise or track users for targeted ads. Third-party service providers set some cookies on our Platform. These include: • Google Analytics: To track user engagement and Platform performance. • Stripe: For secure payment processing and fraud prevention. • Twilio: For multi-factor authentication and security verification. These third-party services may also collect and process user data under their privacy policies. Users should review the privacy policies of these providers to understand how they manage cookies. Users can control, disable, or delete cookies through their browser settings. Most web browsers allow users to: • Block cookies from specific websites. • Clear stored cookies at any time. • Enable settings to notify them before a cookie is stored. Turning off certain cookies, particularly essential or functional cookies, may limit access to critical features of the Platform, such as login functionality and secure transactions. We may update this Cookie Policy occasionally to reflect changes in our use of cookies, legal requirements, or user preferences. Updates will be communicated through Platform notifications and a revised Cookie Policy. Users are encouraged to review this policy periodically.

CHILDREN’S PRIVACY.

Our Platform is committed to protecting children’s privacy. Consistent with the Children’s Online Privacy Protection Act (COPPA) and other applicable laws and regulations, we do not knowingly collect, use, or disclose personal information from children under 18. • Age Restriction: Our services are not directed to children under the specified age. We do not knowingly engage in transactions or communications with children under this age, and our Terms and Conditions prohibit users under this age from accessing our Platform and services. • Parental Consent and Involvement: If we learn that we have collected personal information from a child under the specified age without parental consent, we will delete the information as soon as possible. We strongly encourage parents and guardians to take an active role in their children’s online activities and to inform us if they believe their child has provided personal information to us without their consent. • Information Collection Practices Regarding Children: In the rare event that we collect personal information from children under the specified age with parental consent, such information will be used solely for the purpose for which it was collected, and by this Privacy Policy. • Access and Deletion Requests by Parents or Guardians: Parents or guardians who believe their child under the specified age has submitted personal information to our Platform can contact us to request access to, correct, or delete their child’s personal data. • Commitment to Data Security: We understand the importance of safeguarding children’s privacy and security online. We implement stringent security measures to protect children’s personal information and comply with relevant legal data protection and privacy requirements. • Updates to our Children’s Privacy Policy: This policy may be updated periodically to reflect changes in our practices or legal requirements. We encourage parents and guardians to review this policy regularly. • Reporting Concerns: We take children’s privacy concerns seriously. If you have any questions or concerns about our Children’s Privacy Policy or our practices regarding children’s personal data, please use the information provided in the “Contact Us” section. Children’s Online Privacy Protection Act (COPPA) Coort Inc. follows COPPA by not gathering or handling the personal information of children under 18 unless their parents give permission.

USER RIGHTS.

We respect and uphold users’ rights regarding their data. Users have complete control over their information and may access, modify, restrict, or delete their data as applicable privacy laws permit. This section outlines the rights available to users and how they can exercise them. • Right to Access Personal Data Users have the right to request a copy of the personal data we hold about them. This includes their account details, transaction history, and preferences stored on the Platform. Access requests can be made through account settings or by contacting our support team. • Right to Correct or Update Data. Users can correct or update their data if personal information is inaccurate, outdated, or incomplete. Profile information, including name, email, and address, can be updated directly through the Platform. If further corrections are needed, users may request customer support. • Right to Data Portability Users may request that their data be provided in a structured, commonly used, and machine-readable format so that they can transfer it to another service provider. This applies to data that users have actively provided to the Platform. • Right to Delete or Request Data Removal Users have the right to request the deletion of their data when: 1. They no longer wish to use the Platform. 2. The data is no longer necessary for the purposes it was collected. 3. They withdraw consent for processing (where applicable). • Right to Restrict or Object to Data Processing Users can request that we limit or restrict the processing of their data under certain circumstances, such as when they dispute the accuracy of the information or object to specific uses of their data. If processing restrictions are applied, users may experience limited access to certain features of the Platform. • Right to Withdraw Consent Where data processing is based on user consent (e.g., marketing communications or certain cookies), users may withdraw consent at any time by adjusting their privacy settings or contacting support. Withdrawal of consent does not affect the legality of data processing conducted before consent was withdrawn.

Arbitration and Class Action Waiver

Resolution of any disputes between us and our users will be made through binding arbitration guided by the American Arbitration Association (AAA) and its rules for Commercial Arbitration. All users voluntarily waive their ability to join a class action or collective suit against Coort Inc.

THIRD-PARTY LINKS.

The Platform may feature links leading to websites or services operated by others. We do not control or operate these sites. We offer these links to help you gather information and details quickly and easily. The practices, policies, and content displayed on these sites are not covered by our own. When you click these links to third-party websites/services, you accept that we are not responsible for their privacy policies or content. This Privacy Policy covers only the information gathered by our Platform. Reading the policies of outside websites will allow you to find out what personal data they collect and how they manage it. Our Platform regularly includes links to trusted third-party sources, although we cannot promise that the details or content found there will always be proper, complete, or accurate. A third-party link on our website does not mean we are endorsing, sponsoring, or recommending the website or its content. Be aware that after you leave this site and use a different website, how you connect and what information you give will be under their guidance. Be careful when online and always look at the website’s privacy policy.

THIRD PARTY SERVICES.

We integrate with third-party service providers to facilitate payments, authentication, data storage, and analytics. These third parties help ensure the functionality, security, and efficiency of our Platform. While we carefully vet all third-party partners, we do not control their independent privacy practices. Users are encouraged to review the privacy policies of these providers to understand how their data is handled. Our Platform relies on the following third-party providers: • Payment Processing: Stripe handles financial transactions, including rent payments and security deposit management. Stripe securely processes banking details and payment information while maintaining compliance with financial security standards. • Authentication and Security: Twilio provides two-factor authentication (2FA) to protect user accounts from unauthorized access. This enhances security by requiring additional identity verification. • Cloud Storage and Infrastructure: All user data is stored securely on Amazon Web Services (AWS), which provides encrypted storage and industry-standard security protocols. • Analytics and Performance Monitoring: We use Google Analytics to track Platform usage, measure engagement, and optimize functionality. This allows us to improve performance without compromising user privacy. The service provider may collect, process, or store specific personal data when interacting with these third-party services. These third parties have privacy policies and security measures governing user data handling. While we require them to maintain strict confidentiality and compliance standards, we are not responsible for any data breaches, policy violations, or service failures on their part. By using our Platform, users acknowledge and agree that: • Their personal and financial data may be shared with third-party service providers for payment processing, authentication, and system security. • These service providers process data only for the purposes necessary to operate the Platform and are prohibited from using it for any unauthorized purposes. • The privacy policies of Stripe, Twilio, AWS, and Google Analytics apply to their respective services, and users are encouraged to review them separately. Users who wish to restrict third-party data processing may do so by: • Adjusting account settings to limit the use of analytics tracking. • Managing cookie preferences to opt out of non-essential tracking. • Requesting account deletion, which removes personal data from our systems but does not affect transaction records maintained by payment processors. While we work exclusively with trusted third-party providers, users should understand that these services are essential to the platform’s operation. Turning off specific third-party integrations may impact access to features such as secure payments, authentication, and performance monitoring.

DATA BREACH RESPONSE.

We value your private data and have strong measures to secure it. In case of a data breach, our plan guides us to address the problem promptly, effectively, and according to all applicable laws. When a breach occurs, we will quickly work to find and fix it. This also requires you to disconnect the affected systems to prevent other unauthorized people from gaining access. We will first control the attack, perform a complete investigation, and determine the reason, size, and effects of the breach. We aim to identify risks people face in the area and implement the correct processes for doing things right. We follow legal requirements to notify any users who are affected. A notification should tell users what took place, what data was at risk, how dangerous it is, and how to protect themselves. A business may need to inform regulators about events when required; Pet will ensure this is done on time and as needed. If a breach occurs, we will improve our security to secure any found vulnerabilities and prevent future breaches. We regularly review and update our response plan as industry standards and good practices progress. When you suspect your information has been affected by a security incident or want other details on how we handle such matters, follow the directions in the Contact Us section of this Privacy Policy to contact us. Data Breach Notification (Washington RCW 19.255.010) Coort Inc. is required by RCW § 19.255.010 to notify affected users and the Washington State Attorney General within 30 days of detecting a breach of sensitive information.

HOW TO EXERCISE YOUR RIGHTS.

We are critical in ensuring users can easily and clearly handle their privacy. Through their account settings, users can access, change, delete, or restrict their personal data, or they may ask our support team to do so. Requesting data is possible in a way that follows privacy laws, and the response is sent within a suitable period. Anyone wanting to manage their account details may log into their account settings and update their name, email address, and account settings. If more changes are necessary than the Platform allows, users can contact customer support and ask for help. If someone wants to delete their data from the Platform, they may do so in their account settings or by speaking to customer support. After getting your legitimate request, we are committed to permanently erasing your data within 30 days, except when the law requires us to keep specific documents. If a record showing specific work transactions or compliance data must be kept for a particular period, users will be notified before they can delete it. Once an account is deleted, you will lose access to the Platform, and all linked personal information will be safely removed. Users may request that we not use or further process their data when they question its accuracy or oppose specific uses, such as analytics. Though we’ll try to honor requests for less processing, limiting certain information may affect how some Platform functions work. Furthermore, users can request a downloadable version of all their personal information stored on or related to their account. Should consent be needed for processing, for example, to send marketing emails or analyse user behaviour, users can withdraw it at any time. You may change your privacy settings in the account area, handle cookie settings, or request help from support to quit participating in certain data collection activities. A user can revoke their consent, but this does not affect prior data processing and may restrict the use of some Platform services. Users can request data via account settings, customer service, or our privacy request portal (if allowed by law). Identity verification may be needed at times to protect against unapproved access or wrongful requests for data.

DO NOT TRACK SIGNALS.

Currently, the Platform does not consider “Do Not Track” (DNT) signals from web browsers. When you set DNT in your browser, you show that you wish your online activity to be untracked. A number of web browsers support the DNT feature, but there is no one definition of what it means. For this reason, the Platform is not able to see or react to DNT signals. Even when the DNT feature is on in your web browser, third-party services connected to our Platform might still gather and track your online activities under their privacy rules. Please review the privacy policies of these third-party services to learn how they use your data.

MODIFICATION.

We may change or update this Privacy Policy by posting it on the website whenever we decide to. Our alterations are implemented as soon as the revised Privacy Policy is uploaded. You should periodically review this Privacy Policy to see how we collect, use, and safeguard your personal information. Continued use of our Platform after updates to the Privacy Policy means you accept and agree with the changes. Now and then, you should read this Privacy Policy to find out if it has changed. In case you have any concerns about changes, you can decide not to use our Platform and may reach out to us to request that we remove your data. Any requirement placed upon you or permission granted to us in this Privacy Policy will remain valid after you stop using our Platform. Severability Even if a court determines part of this Privacy Policy is invalid or cannot be applied, the rest will still apply.

WEB BEACONS.

A web beacon is a small image or piece of programming that can be embedded in our web pages and messages. Unseen to users, cookies perform basically the same way as these beacons, which are only one pixel in size. Web beacons are used to track web user activity or access cookies. They allow us or our partners to see how users interact with the Platform. Web beacons allow us to monitor user activities on the Platform, such as which pages they look at and whether they open and read our emails. This allows us to determine what users expect and enhance our Platform. Email beacons in our messages let us see if an email has been opened and if someone clicked on the links inside. Using details gathered from the data, we can fill our messages with content that is useful to each user. We use web beacons to see how well our advertising campaigns perform. By watching how people respond to our marketing, we can create strategies that better suit their tastes and requirements. Aggregate data is collected by beacons and used in analytics. This means we study trends, maintain our website, and compile information about the demographics of everyone who visits us. Because web beacons are meant to remain anonymous, you can limit their use with the proper browser settings and third-party tools. When you turn off cookies in your browser, preferences stored by web beacons will be lost.

Governing Law and Jurisdiction

The laws of Washington state and any Federal laws of the U.S. govern and control this Privacy Policy, ignoring rules of conflict of law. Court proceedings over this Privacy Policy must be held in the courts of Washington State under state and federal law.

CONTACT US.

We value open communication with our users and welcome any questions, concerns, or feedback regarding this Privacy Policy or our data handling practices. Our dedicated team is committed to addressing your inquiries and providing timely and clear responses. Please find below the various channels through which you can reach us: • Email Communication: For direct and convenient communication, email us at legal@coortincorporated.com. We aim to respond to all email inquiries within 48 hours during business days. • Contact Form: We also offer a contact form on our Platform. This form is a quick way to contact us with any questions or feedback. The form is accessible through our website’s ‘Contact Us’ section. • Accessibility: We are committed to ensuring that our communication channels are accessible to all our users, including those with disabilities. Please let us know if you require any special accommodations, and we will do our best to assist you. • Language Support: Our customer service team can handle inquiries in multiple languages. If you require assistance in a language other than English, please indicate this in your communication, and we will endeavor to accommodate your needs. We are dedicated to responding promptly to all inquiries. If your issue requires a more in-depth investigation, we will keep you informed about the status of your query and provide a timeframe for resolution.