Playa Privacy Policy for California Residents

DO NOT SELL MY PERSONAL INFORMATION
PLAY’A Privacy Policy for California Residents
Last Updated on August 28th, 2024

This Privacy Policy for California Residents supplements the information contained in InReality, Inc’s Playa Video Player Application Privacy Policy and applies solely to all visitors,users, and others who reside in the State of California (“consumers” or “you”). We adopt thisnotice to comply with the California Consumer Privacy Act of 2018 (CCPA), and any termsdefined in the CCPA have the same meaning when used in this Policy.

Information We Collect

Our App collects information that identifies, relates to, describes, references, is reasonablycapable of being associated with, or could reasonably be linked, directly or indirectly, with aparticular consumer, household, or device (“personal information”). Personal information doesnot include:

• Publicly available information from government records.

• Deidentified or aggregated consumer information.

• Information excluded from the CCPA’s scope, like: health or medical information covered by the Health Insurance Portability andAccountability Act of 1996 (HIPAA) and the California Confidentiality of MedicalInformation Act (CMIA), clinical trial data, or other qualifying research data; and personal information covered by certain sector-specific privacy laws, includingthe Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) orCalifornia Financial Information Privacy Act (FIPA), and the Driver’s PrivacyProtection Act of 1994.

In particular, our App has collected the following categories of personal information fromconsumers within the last 12 months:

Category: A. Identifiers. A real name, alias, postal address, unique personal
Examples: A real name, alias, postal address, unique personalidentifier, online identifier, Internet Protocol address,email address, account name, Social Security number,driver’s license number, passport number, or othersimilar identifiers.
Collected: YES

Category: B. Personalinformationcategories listedin the CaliforniaCustomerRecords statute(Cal. Civ. Code §1798.80(e)).
Examples: A name, signature, Social Security number, physicalcharacteristics or description, address, telephonenumber, passport number, driver’s license or stateidentification card number, insurance policy number,education, employment, employment history, bankaccount number, credit card number, debit cardnumber, or any other financial information, medicalinformation, or health insurance information.Some personal information included in this categorymay overlap with other categories.
Collected: NO

Category: C. Protectedclassificationcharacteristicsunder Californiaor federal law.
Examples: Age (40 years or older), race, color, ancestry, nationalorigin, citizenship, religion or creed, marital status,medical condition, physical or mental disability, sex(including gender, gender identity, gender expression,pregnancy or childbirth and related medical conditions),sexual orientation, veteran or military status, geneticinformation (including familial genetic information).
Collected: NOCategory: D. Commercialinformation.
Examples: Records of personal property, products or servicespurchased, obtained, or considered, or otherpurchasing or consuming histories or tendencies.
Collected: NO

Category: E. Biometricinformation.
Examples: Genetic, physiological, behavioral, and biologicalcharacteristics, or activity patterns used to extract atemplate or other identifier or identifying information,such as, fingerprints, faceprints, and voiceprints, iris orretina scans, keystroke, gait, or other physical patterns,and sleep, health, or exercise data.
Collected: NO

Category: F. Internet orother similarnetwork activity.
Examples: Browsing history, search history, information on aconsumer’s interaction with a website, application, oradvertisement.
Collected: YES

Category: G. Geolocationdata.
Examples: Physical location or movements.
Collected: YES

Category: H. Sensory data.
Examples: Audio, electronic, visual, thermal, olfactory, or similarinformation.
Collected: NO

Category: I. Professional oremployment-related information.
Examples: Current or past job history or performance evaluations.
Collected: NO

Category: J. Non-publiceducationinformation (perthe FamilyEducationalRights andPrivacy Act (20U.S.C. Section1232g, 34 C.F.R.Part 99)).
Examples: Education records directly related to a studentmaintained by an educational institution or party actingon its behalf, such as grades, transcripts, class lists,student schedules, student identification codes, studentfinancial information, or student disciplinary records.
Collected: NO

Our App obtains the categories of personal information listed above from the followingcategories of sources:

• Directly from you. For example, from forms you complete or products andservices you purchase.

• Indirectly from you. For example, from observing your actions on our App.

• From third parties. For example, from our business partners.

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the followingpurposes:

To fulfill or meet the reason you provided the information. For example, if youshare your name and contact information to ask a question about our products orservices, we will use that personal information to respond to your inquiry. If you provideyour personal information to purchase a product or service, we will use that informationto process your payment. We may also save your information to facilitate new orders.

• To provide, support, personalize, and develop our App, products, and services.

• To create, maintain, customize, and secure your account with us.

• To process your requests.

• To provide you with support and to respond to your inquiries, including toinvestigate and address your concerns and monitor and improve our responses.

• To personalize your App experience and to deliver content and product andservice offerings relevant to your interests, including targeted offers and ads through ourApp, third-party sites, and via email or text message (with your consent, where requiredby law).

• To help maintain the safety, security, and integrity of our App, products andservices, databases and other technology assets, and business.

• For testing, research, analysis, and product development, including to developand improve our App, products, and services.

• To respond to law enforcement requests and as required by applicable law, courtorder, or governmental regulations.

• As described to you when collecting your personal information or as otherwisestated in the CCPA.

• To evaluate or conduct a merger, divestiture, restructuring, reorganization,dissolution, or other sale or transfer of some or all our assets, whether as a goingconcern or as part of bankruptcy, liquidation, or similar proceeding, in which personalinformation held by us about our App users is among the assets transferred.

We will not collect additional categories of personal information or use the personal informationwe collected for materially different, unrelated, or incompatible purposes without providing younotice.


Sharing Personal Information

We may share your personal information by disclosing it to a third party for a business purpose.We only make these business purpose disclosures under written contracts that describe thepurposes, require the recipient to keep the personal information confidential, and prohibit usingthe disclosed information for any purpose except performing the contract. In the preceding 12months, Company has disclosed personal information for a business purpose to the categoriesof third parties indicated in the chart below.We do not sell personal information. In the preceding 12 months, Company has not soldpersonal information.

Personal Information Category: A: Identifiers.
Business Purpose Disclosures: Service Providers
Sales: None

Personal Information Category: B: California CustomerRecords personalinformation categories.
Business Purpose Disclosures: None
Sales: None

Personal Information Category: C: Protectedclassificationcharacteristics underCalifornia or federal law.
Business Purpose Disclosures: None
Sales: None

Personal Information Category: D: Commercialinformation.
Business Purpose Disclosures: None
Sales: None

Personal Information Category: E: Biometric information.
Business Purpose Disclosures: None
Sales: None

Personal Information Category: F: Internet or othersimilar network activity.
Business Purpose Disclosures: Data analytic providers andInternet cookie data recipients,like Google Analytics
Sales: None

Personal Information Category: G: Geolocation data.
Business Purpose Disclosures: None
Sales: None

Personal Information Category: H: Sensory data.
Business Purpose Disclosures: None
Sales: None

Personal Information Category: I: Professional oremployment-relatedinformation.
Business Purpose Disclosures: None
Sales: None

Personal Information Category: J: Non-public educationinformation.
Business Purpose Disclosures: None
Sales: None

Personal Information Category: K: Inferences drawn fromother personalinformation.
Business Purpose Disclosures: None
Sales: None

Your Rights and Choices

The CCPA provides consumers (California residents) with specific rights regarding theirpersonal information. This section describes your CCPA rights and explains how to exercisethose rights.

Right to Know and Data PortabilityY

You have the right to request that we disclose certain information to you about our collection anduse of your personal information over the past 12 months (“right to know”). Once we receiveyour request and confirm your identity (see Exercising Your Right to Know or Delete), we willdisclose to you:

• The categories of personal information we collected about you.

• The categories of sources for the personal information we collected about you.

• Our business or commercial purpose for collecting or selling that personalinformation.

• The categories of third parties with whom we share that personal information.

• If we sold or disclosed your personal information for a business purpose, twoseparate lists disclosing: sales, identifying the personal information categories that each category ofrecipient purchased; and· disclosures for a business purpose, identifying the personal informationcategories that each category of recipient obtained. The specific pieces of personal information we collected about you (also called adata portability request).


Right to Delete

You have the right to request that we delete any of your personal information that we collectedfrom you and retained, subject to certain exceptions (“right to delete”). Once we receive yourrequest and confirm your identity (see Exercising Your Rights to Know or Delete), we will reviewyour request to see if an exception allowing us to retain the information applies.We may deny your deletion request if retaining the information is necessary for us or our serviceprovider(s) to:

We may deny your deletion request if retaining the information is necessary for us or our serviceprovider(s) to:

1. Complete the transaction for which we collected the personal information, providea good or service that you requested, take actions reasonably anticipated within thecontext of our ongoing business relationship with you, fulfill the terms of a writtenwarranty or product recall conducted in accordance with federal law, or otherwiseperform our contract with you.

2. Detect security incidents, protect against malicious, deceptive, fraudulent, orillegal activity, or prosecute those responsible for such activities.

3. Debug products to identify and repair errors that impair existing intendedfunctionality.

4. Exercise free speech, ensure the right of another consumer to exercise their freespeech rights, or exercise another right provided for by law.

5. Comply with the California Electronic Communications Privacy Act (Cal. PenalCode § 1546 et. seq.).

6. Engage in public or peer-reviewed scientific, historical, or statistical research inthe public interest that adheres to all other applicable ethics and privacy laws, when theinformation’s deletion may likely render impossible or seriously impair the research’sachievement, if you previously provided informed consent.

7. Enable solely internal uses that are reasonably aligned with consumerexpectations based on your relationship with us.

8. Comply with a legal obligation.9. Make other internal and lawful uses of that information that are compatible withthe context in which you provided it.We will delete or deidentify personal information not subject to one of these exceptions from ourrecords and will direct our service providers to take similar action.

Exercising Your Rights to Know or DeleteTo exercise your rights to know or delete described above, please submit a request by either:

Emailing us at https://www.playavr.com/contact.

Only you, or someone legally authorized to act on your behalf, may make a request to know ordelete related to your personal information.You may only submit a request to know twice within a 12-month period. Your request to know ordelete must:

• Provide sufficient information that allows us to reasonably verify you are theperson about whom we collected personal information or an authorized representative.

• Describe your request with sufficient detail that allows us to properly understand,evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verifyyour identity or authority to make the request and confirm the personal information relates toyou.You do not need to create an account with us to submit a request to know or delete. However,we do consider requests made through your password protected account sufficiently verifiedwhen the request relates to personal information associated with that specific account.We will only use personal information provided in the request to verify the requestor’s identity orauthority to make it.

Response Timing and FormatWe will confirm receipt of your request within 10-business days. If you do not receiveconfirmation within the 10-day timeframe, please contact us.We endeavor to substantively respond to a verifiable consumer request within 45 days of itsreceipt. If we require more time (up to another 45 days), we will inform you of the reason andextension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do nothave an account with us, we will deliver our written response by mail or electronically, at youroption.Any disclosures we provide will only cover the 12-month period preceding our receipt of yourrequest. The response we provide will also explain the reasons we cannot comply with arequest, if applicable. For data portability requests, we will select a format to provide yourpersonal information that is readily useable and should allow you to transmit the informationfrom one entity to another entity without hindrance.We do not charge a fee to process or respond to your verifiable consumer request unless it isexcessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee,we will tell you why we made that decision and provide you with a cost estimate beforecompleting your request.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted bythe CCPA, we will not:

• Deny you goods or services.

• Charge you different prices or rates for goods or services, including throughgranting discounts or other benefits, or imposing penalties.

• Provide you a different level or quality of goods or services.

• Suggest that you may receive a different price or rate for goods or services or adifferent level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result indifferent prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer willreasonably relate to your personal information’s value and contain written terms that describethe program’s material aspects. Participation in a financial incentive program requires your prioropt-in consent, which you may revoke at any time.

Other California Privacy Rights
California’s “Shine the Light” law (Civil Code § 1798.83) allows users of our App that areCalifornia residents to request certain information regarding our disclosure of personalinformation to third parties for their direct marketing purposes. To make that request, pleasecontact us at https://www.playavr.com/contact.

Changes to Our Privacy Policy
We reserve the right to amend this privacy policy at our discretion and at any time. When wemake changes to this privacy policy, we will post the updated notice on the App and update thenotice’s effective date. Your continued use of our App after the posting of changesconstitutes your acceptance of those changes.

Contact Information

If you have any questions or comments about this notice, the ways in which In Reality, Inccollects and uses your information described here and in the Privacy Policy[A3] , your choicesand rights regarding that use, or wish to exercise your rights under California law, please do nothesitate to contact us at:

Website: https://www.playavr.com/contact

Email: support@playavr.com

If you need to access this Policy in an alternative format due to having a disability, pleasecontact us at support@playavr.com.