GreenLists Privacy Policy

Last updated: August 1st, 2023

Thank you for trusting GreenLists. Your business, Personal Information, and data are very important to us. GreenLists values your privacy; we only collect the minimum amount of business data required to provide the Services and we do not sell or share your Business Data or API Key with unaffiliated third parties. We only share your Business Data as set forth in this Policy.

This Privacy Policy of GreenLists, Inc. ("GreenLists", "we", "us", "our") applies to the operations of GreenLists that we offer through our web application (the "Service"). This Privacy Policy applies to any Service offered or provided by GreenLists, regardless of how you access or use it. It provides the policies and procedures for collecting, using, and disclosing the information of each user of the Service ("you", "your", or the "User"). Throughout this Privacy Policy, we make reference to your Personal Information that we collect. “Personal Information” means information that (either alone or when in combination with other information) may be used to readily identify, contact, or locate you. For example, your name, telephone number, payment information, and email address are Personal Information.

This Privacy Policy is incorporated into, and is subject to, the Terms and Conditions of Use (“Terms of Use”) (available at: https://apply.greenlists.com/terms-and-conditions). By using the Service, you accept the practices set forth in this Privacy Policy and the Terms of Use. Please read this Privacy Policy and the Terms of Use carefully before using the Service. If you do not agree with any of terms of this Privacy Policy or the Terms of Use, you may not access or otherwise use the Service.

Please Note: This Policy does not address the privacy or information collection, use, disclosure and/or retention practices of any third party entities outside of our Services such as Third Party Resources (see Section 5 below), except for Service Providers, which are addressed in Section 3 below. Moreover, the privacy and information practices of such third party entities do not apply to GreenLists. Please review the applicable third party’s privacy policy for more information regarding such third party entity’s own privacy or information practices. GreenLists has no liability with respect to the use or misuse of Personal Information by such third party entities or any failure to comply with such third party entities’ privacy policies.

We may update this Privacy Policy from time to time – you can find our latest policy on our website at https://apply.greenlists.com/privacy-policy or by asking us for a copy. Your continued use of the Service after we make changes is deemed to be acceptance of those changes, so please check the Privacy Policy periodically for updates.

1. Information We Collect

A. Business Data

In general, we collect and share the minimum amount of Business Data necessary for us and our Service Providers to provide the Services you request. We do not share your Business Data with any unaffiliated third parties.

By using the Service, you agree to give us access to your state traceability system via your API Key, with which we will securely pull data about your company’s inventory, transaction information, and product information, including but not limited to your business’s login to any required state or other government traceability system (collectively “Business Data”). For more information on how we secure and encrypt your Business Data, see Section 3(D) below.

When you provide us with your Business Data, you grant us and our affiliates and service providers the right to use, reproduce, modify, perform, display, distribute and otherwise disclose to Service Providers any such Business Data for the sole purpose of providing the Services you request. For example, we share your pickup or delivery address and manifest information with Transport Service Providers.

GreenLists also uses Business Data internally to help us and our affiliates develop and offer new products and services, improve our existing products and services, conduct due diligence, and to comply with recordkeeping requirements relating to the sale of products. You represent that you have access to your Business Data lawfully and can give us and our affiliates permission to access and share it as set forth in this Privacy Policy. You further agree to comply with the terms, conditions, guidelines and policies of the applicable state traceability system.

When you provide us with your state system login information, you are giving us access to your business name and contact information along with your Business Data. If, in connection with your Account within the Service (an “Account”), you choose to set up individual “sub” Accounts from the same login credentials for your employees, partners, or others, you must also provide usernames, passwords and set any relevant permissions for that Account. When you set up sub Accounts and choose to share your Business Data with other individuals or entities, we are not responsible for loss of confidentiality or any other consequences stemming from those actions. You remain responsible for the use of the Account.

B. Personal Information

We receive and store information you give us when you use the Service. For example, we collect information when you: provide information to sign up for an Account; provide information in your Account Profile; login and operate your Account; or communicate with us by email for any purpose. You can choose not to provide certain information, but you may not be able to use all of the Service features as a result.

C. Information Automatically Collected

We also collect general, statistical information about your online activity that, by itself, may not directly identify you including, but not limited to, cookies, the Internet Protocol (IP) address of your computer, the IP address of your Internet Service Provider, the date and time you access the Service, the Internet address of the website from which you linked directly to the Service, the operating system you are using, the sections of the Service you visit (pages accessed and information viewed), and the materials you post or download from the Service. We may use this information, for example, to determine how many Users have visited certain pages, or to prevent fraud. We may link this data to your profile. Our partners also may collect and combine information collected through our Service with other information about your online activities over time, on other devices, and on other websites or apps, if those websites and apps also use the same partners.

D. How Information Is Collected

The information we collect on or through our Service may include information that you provide by filling in forms or registering or subscribing to the Service. We may also ask you for information when you contact us or when you report a problem with our Service, including but not limited to records and copies of your correspondence (including email addresses), if you contact us. You also may provide information to be published or displayed (hereinafter, "posted") on public areas of the Service, or transmitted to other Users or third parties (collectively, "User Submissions"). Your User Submissions are posted on and transmitted to others at your own risk.

Although we limit access to certain pages and information, including Business Data, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other Users with whom you may choose to share your User Submissions viewed by unauthorized persons. The amount of Non-Personal Information sent by your web browser depends on the browser and settings you use. Please refer to the instructions provided by your browser if you want to learn more about what information it sends to websites you visit, or how you may change or restrict this. Your browser also gives you the option to reject cookies. However, setting your browser to reject cookies generally hinders the browser's performance and may adversely affect your experience while using the Service.

At this time, we do not track our Users' Personal Information over time and across third-party websites. We therefore do not respond to browser Do Not Track signals. However, we maintain the right to modify and amend this policy from time to time.

2. Setting Up An Account

Should you request an Account, GreenLists requires that you submit the following information:

You must also create a password when signing up for our Service. GreenLists requires the non- optional information listed above in order to create and maintain your Account. When you create an Account you will also need to provide information for your Company, retailer or producer and products associated with your company, including but not limited to Business Data. The information gathered for company representation includes without limitation:

D. Information Protection

GreenLists will take reasonable physical, organizational, and technological precautions to help protect your privacy and the information we collect. Personal Information or Business Data may be accessed by persons within our organization, or our Service Providers, who require such access to carry out the purposes indicated above, or such other purposes as may be permitted or required by the applicable law. Information we collect is maintained in our secure hosting facility. We encrypt your Business Data and Personal Information in transit and at rest.

Unfortunately, notwithstanding any steps taken by us, it is not possible to guarantee the security and integrity of data transmitted over the Internet. Consequently, while we take reasonable steps to protect your Personal Information, we cannot and do not warrant the security or integrity of any information you transmit to us when registering for our Service or otherwise. All such transmission of information is at your own risk. Even though we are committed to having our Service comply with this Privacy Policy, you are also responsible for maintaining the confidentiality of your password, Personal Information and private business information.

4. Legally Required Disclosure of Your Information

We reserve the right to release Account information, Business Data and other Personal Information: when we believe release is appropriate to comply with the law, including, but not limited to at the request of any judicial, administrative or similar proceeding such as a subpoena; to investigate suspected fraud, harassment, physical threats, or other violations of any state or federal law, rule or regulation; to protect the rights, property, or safety of the Service, our Users, of GreenLists, our agents, or others; or to enforce or apply our Terms of Use, agreements, and policies. We may also share Personal Information in an emergency, such as to protect the safety of our employees and agents, our customers, or any person.

5. Links to Third Party Resources

The Service may provide links that direct you away from the Service to outside websites, and may offer you the option to use integrated state traceability software to sync to your Account (“Third Party Resources”). To the extent that occurs, those Third Party Resources are not operated by us and are beyond our control. These Third Party Resources may independently collect data, or solicit Personal Information. When visiting or using these Third Party Resources, you are subject to their privacy policies, and we encourage you to read them as well as any terms of use or service. We are not responsible for the privacy practices of Third Party Resources and we cannot guarantee the security of any of your Personal Information collected there. We have no control over the contents of Third Party Resources, and accept no responsibility for them or for any loss or damage that may arise from your use of them.

If you decide to access any of the Third Party Resources linked to or integrated with the Service, you do so entirely at your own risk and subject to the terms and conditions of use for such Third Party Resources. You acknowledge and agree that GreenLists shall have no liability to you for any losses suffered resulting from or arising in connection with accuracy, compatibility or interoperability problems.

6. Business Practices and Transfers

As our business evolves and our practices change, we will continue to update this Privacy Policy. We may periodically notify Users of changes in our policies and you should check our Service frequently for any changes. Your continued use of the Service is considered assent to any such changes. Additionally, as our business continues to grow, we may merge with, acquire or sell, or be acquired by or sold to a business. We reserve the right to transfer customer information in connection with such a transaction, but your Personal Information and Business Data remain subject to the provisions of any pre-existing Privacy Policy. If GreenLists or substantially all of its assets are acquired, your information may be one of the transferred assets.

7. Minors

This Site is offered and available to Users who are 21 years of age or older and reside in the GreenLists’ markets. By using this Site, you represent and warrant that you are of legal age to form a binding contract with GreenLists and meet all of the foregoing eligibility requirements. If you do not meet all of these requirements, you must not access or use the Site. We do not intentionally seek to sell anything to, influence, collect information from or otherwise address individuals 21 years of age and younger, nor do we knowingly collect Personal Information from persons under 21 through the Service. If we learn or have reason to suspect that a User is under age 21, we will promptly delete any Personal Information in that User’s Account.

8. Changing Personal Information

If you would like to review, correct, update, delete, or port Personal information that you have previously provided through the Service or otherwise, you may do so by contacting us as indicated below. Please note that GreenLists may retain certain information for record keeping purposes, and residual information may remain within our databases and other records, which will not be removed therefrom. GreenLists also reserves the right, from time to time, to contact former Users. Finally, GreenLists is not responsible for removing information from the databases of third party entities or from third parties with whom GreenLists has already shared or which have been provided Personal Information about you.

9. California Privacy Rights

Pursuant to California Civil Code Section 1798.83(c)(2), GreenLists does not sell or share customers’ Personal Information with third-parties for their direct marketing use under any circumstances. We will never sell your Personal Information without your permission and we collect and use only the information we need to transact business with you and to comply with state and local regulations regarding businesses.

If you are a California resident, you have the following rights with respect to your Personal Information: 1) to update or amend Personal Information that we have collected about you if it is inaccurate or incomplete; (2) to request a copy of the Personal Information that we hold about you; (3) to request the categories of sources from which your Personal Information is collected; (4) to request the categories of third parties with whom we share Personal Information; (5) to know the commercial purpose for collecting your Personal Information; (6) to request that we erase or restrict the processing of certain sensitive Personal Information; (7) to object to the processing of your Personal Information with respect to direct marketing purposes; and (8) the right not to receive discriminatory treatment for the exercise of your privacy rights. You have the right to designate an

authorized agent to make a request on your behalf subject to our verification that such authorized agent has permission to act on your behalf.