PRIVACY POLICY

Last Updated: June 1, 2023

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTAND, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY.

This Privacy Policy describes how Aqueduct ("Aqueduct", "we", "us", or "our") collects, uses, shares, and protects information in connection with Aqueduct's website, services, applications, platforms, and other offerings (collectively, the "Services"). This Privacy Policy applies to all users of the Services, including individuals who register for an account with us, visit our website, or otherwise use our Services ("Users" or "you").

Our Services are designed for businesses that need to track online sales transactions, prepare and file state sales tax returns, and remit payment of state sales taxes. This Privacy Policy should be read in conjunction with our Service Terms and Conditions, which governs your use of the Services.

1. Information We Collect

We collect information about you when you use our Services. The information we collect falls into three categories: (1) information you provide to us; (2) information we collect automatically; and (3) information we receive from other sources.

1.1 Information You Provide to Us

We collect personal information you provide directly to us when you:

• Create an account or register for our Services
• Complete forms on our website
• Submit sales transaction data for tax processing
• Provide business information for tax filing purposes
• Contact our customer support
• Subscribe to our communications
• Respond to surveys or promotions
• Otherwise communicate with us or use our Services

The categories of information we collect may include:

• Account Information: When you register for an account, we collect your name, email address, password, company name, business type, and other information necessary to establish and maintain your account.
• Business Information: Information about your business, such as company name, employer identification number (EIN), physical address, tax registration numbers, business type, and other information needed for tax filing purposes.
• Transaction Data: Sales transaction data, including order information, product details, shipping addresses, tax amounts, and other data necessary for tax calculation and filing.
• Payment Information: Information about your payment methods, including bank account information and credit card details. While we collect this information, we do not store complete credit card numbers; this information is processed by our payment processors.
• Communications: Content of communications you send to us, such as customer support inquiries, feedback, and other messages.

1.2 Information We Collect Automatically

When you access or use our Services, we automatically collect certain information about you and your device, including:

• Device Information: Information about the devices and computers you use to access our Services, including IP address, device type, operating system, browser type, mobile network information, and device identifiers.
• Usage Information: Information about how you use our Services, including the pages you visit, the features you use, your actions within the Service, the time, frequency, and duration of your activities, and other information about your interaction with our Services.
• Log Information: Server logs, which may include information like IP address, browser type, operating system, referring/exit pages, date/time stamps of your visits, and the pages or features of our Services that you use.
• Location Information: General location information inferred from your IP address.

1.3 Cookies and Similar Technologies

We and our third-party service providers use cookies, web beacons, pixel tags, and similar technologies to collect information about your interactions with our Services. These technologies help us to:

• Authenticate users and remember user preferences
• Analyze usage patterns of our Services
• Personalize content and experiences
• Improve the functionality and performance of our Services
• Protect against fraudulent activity
• Measure the effectiveness of our marketing efforts

You can control cookies through your browser settings and other tools. However, if you block certain cookies, you may not be able to use some features of our Services or those features may not function properly.

1.4 Information from Other Sources

We may also obtain information about you from other sources, including:

• Third-party services that you authorize to share your information with us
• Public databases and government agencies
• Business partners, such as joint marketing partners or data providers
• Other users who provide information about you when they use our Services

We may combine this information with other information we collect about you to help us improve our Services, for tax filing and compliance purposes, and for other purposes described in this Privacy Policy.

2. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide our Services: Operate, maintain, and improve our Services; process transactions; and provide customer support.
• Tax Compliance: Prepare and submit tax filings to state tax authorities; calculate and remit tax payments; and comply with legal obligations related to tax reporting.
• Account Management: Create and manage your account; authenticate your identity; process your payments; and communicate with you about your account and our Services.
• Communications: Respond to your inquiries; send administrative messages, including updates about our Services and changes to our terms, conditions, and policies; and, with your consent where required, send marketing communications.
• Improve our Services: Analyze how our Services are used; identify usage trends; determine the effectiveness of our marketing campaigns; and improve and enhance our Services.
• Security and Fraud Prevention: Protect the security and integrity of our Services; detect and prevent fraudulent transactions and other illegal activities; and enforce our terms, conditions, and policies.
• Personalization: Personalize your experience with our Services and tailor content, features, and advertisements to your preferences and interests.
• Legal Compliance: Comply with applicable laws, regulations, legal processes, or governmental requests, including for tax reporting and compliance purposes.

We may also use your information for other purposes with your consent or as permitted by applicable law.

3. How We Share Your Information

We may share your information in the following circumstances:

• Tax Authorities and Government Agencies: We share your information with state tax authorities and other government agencies as necessary for tax filing, payment, and compliance purposes. This may include your business information, transaction data, and other information required for tax reporting.
• Service Providers: We share your information with third-party service providers that perform services on our behalf, such as hosting, data analysis, payment processing, customer service, email delivery, and marketing assistance. These service providers have access to your information only to perform these tasks on our behalf and are contractually obligated to protect your information.
• Business Partners: We may share your information with business partners with whom we jointly offer products or services, or whose products or services we believe may be of interest to you. These partners may use your information for their own marketing purposes.

• Business Transfers: If we are involved in a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar event, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Protection of Rights: We may disclose your information to protect the rights, property, or safety of Aqueduct, our users, or others, including to enforce our terms, conditions, and policies and to prevent fraud or other illegal activities.
• With Your Consent: We may share your information with third parties when you have given us your consent to do so.

We may also share aggregated or de-identified information, which cannot reasonably be used to identify you, with third parties for any purpose.

4. Your Privacy Rights and Choices

Depending on your location, you may have certain rights and choices regarding your personal information. These may include the right to:

• Access: Access and obtain a copy of your personal information.
• Correction: Request that we correct inaccurate or incomplete personal information about you.
• Deletion: Request that we delete your personal information in certain circumstances.
• Restriction: Request that we restrict the processing of your personal information in certain circumstances.
• Data Portability: Request a copy of the personal information you have provided to us in a structured, commonly used, and machine-readable format and to transmit this information to another service provider in certain circumstances.
• Objection: Object to the processing of your personal information in certain circumstances.
• Withdrawal of Consent: Withdraw consent you have previously given for the processing of your personal information at any time.

To exercise these rights, please contact us. We may need to verify your identity before responding to your request.

Please note that these rights may be limited in some circumstances by applicable law. For example, we may not be able to delete certain information that is necessary for tax compliance purposes or that we have a legitimate interest in retaining.

4.1 Marketing Communications

You can opt out of receiving marketing communications from us at any time by following the unsubscribe instructions in the communication. Please note that you may continue to receive administrative and transactional messages from us even if you opt out of marketing communications.

5. Data Security

We implement reasonable security measures designed to protect your information from unauthorized access, use, disclosure, alteration, or destruction. However, no data transmission or storage system is completely secure, and we cannot guarantee the security of your information. Your use of our Services is at your own risk.

You are responsible for maintaining the confidentiality of any passwords or other login credentials that you use to access our Services. You should notify us immediately if you become aware of any unauthorized use of your account or any other breach of security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including to provide you with the Services, comply with our legal obligations (including tax reporting and compliance requirements), resolve disputes, and enforce our agreements. The criteria used to determine our retention periods include:

• The length of time you use our Services
• Whether there are legal or contractual obligations that require us to retain the information for a certain period
• Whether retention is necessary to resolve disputes, protect our legal rights, or comply with tax and other regulatory requirements

When we no longer need your personal information, we will securely delete or anonymize it.

7. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from an individual under 18, we will take steps to delete the information as soon as possible.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes to this Privacy Policy, we will notify you by email or by posting a notice on our website before the changes become effective. Your continued use of our Services after the revised Privacy Policy has become effective indicates that you have read, understood, and agreed to the current version of this Privacy Policy.