CURBWASTE PRIVACY POLICY

Last Updated: July 1, 2026

This Privacy Policydescribes how Curbside Technologies Inc., a Delaware corporation doing businessas CurbWaste (“CurbWaste,” “Company,” “We,” “Us,” or “Our”), with its principalplace of business at 30 Irving Place, New York, NY 10003, collects, uses, anddiscloses personal information in connection with the CurbWaste Driverapplication and related services (the “Service”). It also describes the privacyrights available to you and how the law protects you.

By using the Service, you agree to the collection and use of informationin accordance with this Privacy Policy.

1.  Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meaningsdefined under the following conditions. The following definitions shall havethe same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for you to access theService or parts of the Service.

Affiliate means an entity that controls, is controlled by, or isunder common control with a party, where “control” means ownership of 50% ormore of the shares, equity interest, or other securities entitled to vote forelection of directors or other managing authority.

Application means the software program provided by the Companythat you download or access on any electronic device, named CurbWaste Driver.

Company refers to Curbside Technologies Inc., a Delawarecorporation doing business as CurbWaste, with its principal place of businessat 30 Irving Place, New York, NY 10003.

Consumer means a natural person who is a resident of a U.S. statethat provides such persons with privacy rights, including, for the purpose ofthe California Consumer Privacy Act as amended by the California Privacy RightsAct (together, the “CCPA”), a California resident.

Device means any device that can access the Service, such as acomputer, a cellphone, or a digital tablet.

Personal Data (or “Personal Information”) means any informationthat identifies, relates to, describes, is capable of being associated with, orcould reasonably be linked, directly or indirectly, with a particularindividual or household.

Sensitive Personal Information means Personal Information thatreveals certain categories of information as defined under applicable law,including precise geolocation, and, where applicable, government identifiers,account log-in credentials, and similar categories.

Sale / Sell means, for the purpose of applicable state privacylaws, disclosing or making available a Consumer’s Personal Information to athird party in exchange for monetary or other valuable consideration.

Sharing means, for the purpose of the CCPA, disclosing or makingavailable a Consumer’s Personal Information to a third party for cross-contextbehavioral advertising, whether or not for consideration.

Service refers to the Application and related services provided bythe Company.

Service Provider means any natural or legal person who processesPersonal Data on behalf of the Company to facilitate the Service, provide theService on behalf of the Company, perform services related to the Service, orassist the Company in analyzing how the Service is used. Depending onapplicable law, a Service Provider may also be referred to as a “processor” or“contractor.”

Usage Data refers to data collected automatically, eithergenerated by the use of the Service or from the Service infrastructure itself(for example, the duration of a session).

You means the individual accessing or using the Service, or thecompany or other legal entity on behalf of which such individual is accessingor using the Service, as applicable.

2.  Collecting and Using YourPersonal Data

Types of Data Collected

Personal Data. While using the Service, we may ask you to provide us withcertain personally identifiable information that can be used to contact oridentify you. This may include, but is not limited to: your email address;first and last name; phone number; and mailing address, state, province,ZIP/postal code, and city.

Usage Data. Usage Data is collected automatically when using the Service.It may include your Device’s Internet Protocol (IP) address, browser type andversion, the pages of the Service you visit, the time and date of your visit,the time spent on those pages, unique device identifiers, and other diagnosticdata. When you access the Service through a mobile device, we may automaticallycollect the type of mobile device you use, your mobile device unique ID, the IPaddress of your mobile device, your mobile operating system, the type of mobileInternet browser you use, and similar data.

Information Collected While Using the Application. In order to providefeatures of the Application, and with your prior permission, we may collect:

•      Precise geolocation informationfrom your Device, used to provide routing, dispatch, service verification, andrelated features of the Service. Precise geolocation is treated as SensitivePersonal Information under applicable law.

•      Pictures and related informationfrom your Device’s camera and photo library, used to document service events,containers, or locations as part of the Service.

This information may be uploaded to the Company’s servers and/or aService Provider’s server, or it may be stored on your Device. You can enableor disable access to this information at any time through your Device settings;disabling certain permissions may limit the functionality of the Service.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

•      To provide and maintain theService, including to monitor usage of the Service.

•      To manage your Account and yourregistration as a user of the Service.

•      To perform a contract, includingthe performance of any agreement between the Company and the organizationthrough which you access the Service.

•      To contact you by email,telephone, SMS, push notification, or other electronic communication regardingupdates, security notices, or information related to the functionality of theService.

•      To manage and respond to yourrequests and inquiries.

•      For business transfers, includingto evaluate or conduct a merger, financing, reorganization, or sale or transferof some or all of our assets, in which Personal Data may be among the assetstransferred.

•      For internal purposes such as dataanalysis, identifying usage trends, and evaluating and improving the Service,subject to the limitations described in this Policy and in our agreements.

•      To detect, prevent, and addresssecurity incidents, fraud, and illegal activity, and to comply with legalobligations.

Sharing of Your Personal Data

We may share Personal Data in the following situations:

•      With Service Providers, tooperate, maintain, secure, and analyze the Service, under contracts thatrequire them to protect Personal Data and use it only to perform services forus.

•      With Affiliates, in which case wewill require those Affiliates to honor this Privacy Policy.

•      For business transfers, inconnection with a merger, sale of Company assets, financing, or acquisition ofall or a portion of our business.

•      To comply with law, respond tolawful requests from public authorities, enforce our agreements, or protect therights, property, or safety of the Company, our users, or others.

•      With your consent, for any otherpurpose disclosed to you at the time.

We Do Not Sell or Share Your Personal Information. We do not sell yourPersonal Information, and we do not share your Personal Information forcross-context behavioral advertising, as those terms are defined under the CCPAand similar state laws. We have not sold or shared Personal Information forsuch purposes in the preceding twelve (12) months.

Retention of Your Personal Data

The Company will retain your Personal Data only for as long as isnecessary for the purposes set out in this Privacy Policy, including to providethe Service, comply with our legal obligations, resolve disputes, and enforceour agreements and policies. Usage Data is generally retained for a shorterperiod, except where used to strengthen security or improve functionality, orwhere we are legally required to retain it longer. Where required by applicablelaw, our retention criteria are based on the type of Personal Data, the purposefor which it was collected, and applicable legal, accounting, and operationalrequirements.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company’soperating offices and in any other places where the parties involved in theprocessing are located. This information may be transferred to, and maintainedon, computers located outside of your state or jurisdiction, where dataprotection laws may differ. The Company will take all steps reasonablynecessary to ensure that your data is treated securely and in accordance withthis Privacy Policy.

Security of Your Personal Data

We maintain a written information security program that includesreasonable administrative, technical, and physical safeguards designed toprotect the security, confidentiality, and integrity of Personal Data,consistent with applicable law, including the New York SHIELD Act. No method oftransmission over the Internet or method of electronic storage is 100% secure,and while we strive to use commercially acceptable means to protect yourPersonal Data, we cannot guarantee its absolute security. In the event of abreach of security affecting your private information, we will provide noticeas required by, and within the timeframes set by, applicable law.

Sensitive Personal Information

We collect precise geolocation, which is treated as Sensitive PersonalInformation under applicable law. We use Sensitive Personal Information only toprovide the Service you request (such as routing, dispatch, and serviceverification), to ensure security and integrity, and for other purposespermitted by law that do not require offering the right to limit. Where theright to limit the use of Sensitive Personal Information applies, you mayexercise it as described in the “Your Privacy Rights” section below.

3.  Your Privacy Rights

California Privacy Rights (CCPA/CPRA)

This section applies to California residents and supplements theinformation above. Note that California no longer exempts most employee orbusiness-to-business personal information, so individuals whose data we processin a workforce or business context may also have the rights described here.

Categories of Personal Information Collected. In the preceding twelve(12) months, we may have collected the following categories of PersonalInformation, as defined by the CCPA:

•      Category A (Identifiers): name,postal address, unique identifiers, online identifiers, IP address, emailaddress, account name — Collected: Yes.

•      Category B (California CustomerRecords § 1798.80(e)): name, address, telephone number — Collected: Yes.

•      Category F (Internet or othernetwork activity): interaction with the Service — Collected: Yes.

•      Category G (Geolocation data):precise physical location (also Sensitive Personal Information) — Collected:Yes.

•      Category H (Sensory data):photographs you submit through the Application — Collected: Yes, with yourpermission.

•      Categories C, D, E, I, J, and K —Collected: No.

Sources of Personal Information. We obtain Personal Information directlyfrom you, indirectly from you (for example, by observing your activity on theService), automatically from your Device, and from Service Providers.

Business and Commercial Purposes. We use and disclose PersonalInformation for the business and commercial purposes described in the “Use ofYour Personal Data” and “Sharing of Your Personal Data” sections above.

No Sale or Sharing. As stated above, we do not sell Personal Informationand do not share Personal Information for cross-context behavioral advertising.

Your California Rights. Subject to certain exceptions, you have the rightto: (i) know and access the categories and specific pieces of PersonalInformation we collect, use, and disclose; (ii) correct inaccurate PersonalInformation; (iii) delete your Personal Information; (iv) opt out of the saleor sharing of your Personal Information; (v) limit the use and disclosure ofSensitive Personal Information; and (vi) not receive discriminatory treatmentfor exercising your rights.

Exercising Your Rights. To exercise these rights, you (or your authorizedagent) may contact us at hello@curbwaste.com or through help.curbwaste.com. Wewill verify your request as required by law, and only you, or a personauthorized to act on your behalf, may make a verifiable request. We willrespond within the timeframes required by the CCPA (generally 45 days,extendable once by an additional 45 days with notice). Disclosures willgenerally cover the 12-month period preceding a verifiable request. For dataportability, we will provide the information in a readily usable format wherefeasible.

Shine the Light. Under California Civil Code Section 1798.83, Californiaresidents with an established business relationship with us may requestinformation once per year about our disclosure of Personal Information to thirdparties for those third parties’ direct marketing purposes. You may submit sucha request using the contact information below.

California Minors. California residents under 18 who are registered usersmay request removal of content or information they have publicly posted on theService by contacting us; removal may not be complete or comprehensive and maynot be required in all circumstances.

Other U.S. State Privacy Rights

Depending on your state of residence, you may have rights under acomprehensive state privacy law. These laws currently include, among others,those of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon,Montana, and additional states whose laws are in effect or taking effect, suchas Kentucky and Maryland. The specific rights and thresholds vary by state, butgenerally include the right to: confirm whether we process your Personal Dataand access it; correct inaccuracies; delete Personal Data; obtain a portablecopy; and opt out of targeted advertising, the sale of Personal Data, andcertain profiling.

How to Exercise These Rights. You (or an authorized agent) may submit arequest by contacting us at hello@curbwaste.com or through help.curbwaste.com.We will verify your request as required by applicable law and respond withinthe required timeframe.

Appeals. If we decline to take action on your request, you may appeal ourdecision by contacting us at hello@curbwaste.com within a reasonable period. Ifyour appeal is denied, you may be able to contact your state attorney generalto submit a complaint.

“Do Not Track” and Opt-Out Preference Signals

Our Service does not currently respond to “Do Not Track” (DNT) signals,as no uniform standard has been adopted. Where required by applicable law, wewill honor recognized opt-out preference signals, such as Global PrivacyControl (GPC), to the extent they apply to any sale or sharing of PersonalInformation. Because we do not sell or share Personal Information, such signalsgenerally have no effect on our current practices.

4.  Children’s Privacy

The Service is intended for use by adults in a workforce or businesscontext and is not directed to children. We do not knowingly collect PersonalData from anyone under the age of 18. If you are a parent or guardian andbelieve your child has provided us with Personal Data, please contact us, andif we become aware that we have collected Personal Data from a minor withoutappropriate consent, we will take steps to delete that information. We alsocomply with applicable laws governing the data of minors, including the NewYork Child Data Protection Act where applicable.

5.  Links to Other Websites

The Service may contain links to other websites that are not operated byus. If you click a third-party link, you will be directed to that third party’ssite. We strongly advise you to review the privacy policy of every site youvisit. We have no control over, and assume no responsibility for, the content,privacy policies, or practices of any third-party sites or services.

6.  Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify youof any changes by posting the new Privacy Policy on this page and updating the“Last Updated” date above. Where required, we will provide notice by emailand/or a prominent notice on the Service prior to the change becomingeffective. You are advised to review this Privacy Policy periodically for anychanges.

7.  Contact Us

If you have any questions about this Privacy Policy, or to exercise yourprivacy rights, you can contact us:

•      By email: hello@curbwaste.com

•      By mail: Curbside TechnologiesInc., 30 Irving Place, New York, NY 10003

‍