California Civil Code Section 1798.83, also known as the "Shine The Light" law, allows our users who are California residents to request and obtain from us, once a year and free of charge, information about the categories of personal information ( if any) that we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with whom we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please send it to us in writing using the contact information below.

If you are under the age of 18, reside in California, and have a registered account with the Website, you have the right to request removal of any unwanted data you post on the Website. To request deletion of such data, please contact us using the contact information provided below, including the email address associated with your account and a statement that you reside in California. We will ensure that the data is not publicly displayed, but please note that the data may not be completely or comprehensively removed from all of our systems (eg backups, etc.).

CCPA Privacy Notice

The California Code of Regulations defines "resident" as:

1. any individual who is in the State of California for a purpose other than temporary or transitory and
2. any natural person domiciled in the State of California who is temporarily or transiently outside the State of California

All other individuals are defined as "nonresidents."

If this definition of "resident" applies to you, we must respect certain rights and obligations in relation to your personal information.

What categories of personal information do we collect?

In the last twelve (12) months we have collected the following categories of personal information:

• Identifiers: contact data such as name, alias, address, telephone, email address, account name, unique personal identifier, online identifier, IP address.
• Categories of personal information listed in the California customer records statute: name, contact information, education, employment, employment history, and financial information
• Commercial information: information about transactions, purchase history, financial details and payment information.
• Activity on the Internet or other similar networks: browsing history, search history, online behavior, interest data and interactions with or and other websites, applications, systems and advertisements.
• Geolocation data: device location.

We may also collect personal information outside of these categories when you interact with us in person, online, or by phone or mail in the context of:

• Receive help through our customer service channels;
• Participation in customer surveys or contests; Y
• Facilitate the provision of our Services and respond to your inquiries.

How do we use and share your personal information?

WAMessages collects and shares your personal information through:

• Personalization cookies/marketing cookies
• Beacons/Pixels/Tags

You can find more information about our data collection and sharing practices in this privacy notice

You can contact us by email via [email protected], or by consulting the contact details at the end of this document.

If you use an authorized agent to exercise your right to opt out, we may deny a request if the authorized agent fails to provide proof that it has been validly authorized to act on your behalf.

Will your information be shared with someone else?

We may disclose your personal information to our service providers pursuant to a written contract between us and each service provider. Each service provider is a for-profit entity that processes information on our behalf.

We may use your personal data for our own business purposes, such as conducting internal research for technological development and demonstration. This is not considered a "sale" of your personal data.

WAMessages has disclosed the following categories of personal information to third parties for business or commercial purposes in the last twelve (12) months:

• Category A. Identifiers, such as contact data, such as your real name, alias, postal address, contact telephone or cell phone number, unique personal identifier, online identifier, Internet protocol address, email address and name of the bill.
• Category B. Personal information, as defined by the California customer records law, such as your name, contact information, education, employment, employment history, and financial information.
• Category D. Commercial information, such as transaction information, purchase history, financial details, and payment information.
• Category F. Information about Internet or other electronic network activity, such as browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements.
• Category G. Geolocation data, such as device location.

The categories of third parties to whom we disclose personal information for business or commercial purposes are listed under "WHO WILL YOUR INFORMATION BE SHARED WITH?"

WAMessages has not sold any personal information to third parties for business or commercial purposes in the last twelve (12) months. WAMessages will not sell personal information belonging to website visitors, users and other consumers in the future.

Your rights regarding your personal data

Right to request data deletion - Deletion request

You can request the deletion of your personal information. If you ask us to delete your personal information, we will honor your request and delete your personal information, subject to certain exceptions provided by law, such as (but not limited to) another consumer's exercise of their right to freedom of expression , our compliance requirements resulting from a legal obligation, or any processing that may be necessary to protect against illegal activity.

Right to be informed - Request for information

Depending on the circumstances, you have the right to know:

• if we collect and use your personal information;
• the categories of personal information we collect;
• the purposes for which the personal information collected is used; if we sell your personal information to third parties;
• the categories of personal information we sold or disclosed for business purposes;
• the categories of third parties to whom the personal information was sold or disclosed for business purposes; Y
• the business or commercial purpose of collecting or selling personal information.

Under applicable law, we are not required to provide or delete consumer information that is anonymous in response to a consumer request or to re-identify individual data to verify a consumer request.

Right to non-discrimination for the exercise of consumer privacy rights

We will not discriminate against you if you exercise your privacy rights.

Verification process

Upon receipt of your request, we will need to verify your identity to determine that you are the same person for whom we have the information in our system. These verification tasks require us to ask you for information so that we can check it against information you have previously provided to us. For example, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with information we already have on file, or we may contact you through a method of communication (for example, telephone or email) that you have previously provided to us. We may also use other verification methods depending on the circumstances.

We will only use the personal information provided in your request to verify your identity or your authority to make the request. To the extent possible, we will avoid requesting additional information from you for verification purposes. However, if we are unable to verify your identity from the information we have, we may ask you to provide us with additional information in order to verify your identity, and for security or fraud prevention purposes. We will delete such additional information as soon as we finish verifying it.

Other privacy rights

• You can object to the processing of your personal data
• you can request the rectification of your personal data if it is incorrect or no longer relevant, or request that the processing of the data be restricted
• You may designate an authorized agent to make a request on your behalf under the CCPA. We may deny a request from an authorized agent who fails to provide proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
• You can request to opt-out of the future sale of your personal information to third parties. When we receive an opt-out request, we will respond to it as soon as possible, but no later than 15 days from the date the request is submitted.

To exercise these rights, you can contact us by email through [email protected] , or by consulting the contact details that appear at the end of this document. If you have a complaint about the processing of your data, we would like you to let us know.