wave-rf.com

WaveRF, Corp. ("WaveRF") respects your privacy and is committed to protecting the information you provide when you visit or interact with the Website. This Privacy Policy describes how WaveRF collects, uses, shares, retains, and protects information obtained through the Website. This Privacy Policy also describes the choices available to you regarding your information and how you may contact WaveRF regarding its privacy practices. By accessing or using the Website, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with this Privacy Policy, you should discontinue using the Website. This Privacy Policy applies only to information collected through the Website. It does not apply to information collected through products or services that are subject to Separate Agreements or information collected through third-party websites or services that are not owned or controlled by WaveRF. Capitalized terms used but not defined in this Privacy Policy have the meanings given to them in WaveRF's Website Terms of Use.

For purposes of this Privacy Policy: (a) "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable individual, and does not include information that has been deidentified, anonymized, or aggregated so that it cannot reasonably be used to identify an individual; and (b) "Sensitive Personal Information" means certain categories of Personal Information subject to heightened protection under applicable law, such as government identification numbers, precise geolocation, racial or ethnic origin, religious beliefs, health information, and account log-in credentials combined with the information needed to access the account.

WaveRF may collect Personal Information from the following sources:

Information You Provide

WaveRF may collect Personal Information that you voluntarily provide when you contact WaveRF, request information regarding WaveRF or its products or services, subscribe to communications, submit employment inquiries, or otherwise communicate with WaveRF through the Website. Depending on how you interact with the Website, this Personal Information may include your name, company name, job title, email address, telephone number, mailing address, and the contents of your communications.

Information Collected Automatically

When you access or use the Website, WaveRF may automatically collect certain Personal Information, including your Internet Protocol (IP) address, browser type and version, operating system, device identifiers, pages visited, referring website, dates and times of access, and other information regarding your interaction with the Website. WaveRF may collect this information through cookies, web beacons, pixels, analytics technologies, and similar technologies.

Information Received from Third Parties

WaveRF may receive Personal Information from service providers, analytics providers, marketing partners, publicly available sources, or other third parties in connection with the operation of the Website or WaveRF's business.

Platform and Account Information

If you create an account or otherwise use WaveHouse or WaveRF's other management platforms, WaveRF may collect additional Personal Information, including your username and authentication credentials (or single sign-on identifiers, if you authenticate through a third-party identity provider), billing and payment information (processed through WaveRF's payment processor), organization and team membership details, device and fleet identifiers you register, and records of your configuration, usage, and administrative activity within the platform. Any payment card details are collected and processed by WaveRF's third-party payment processor and are not stored by WaveRF.

Location and Telemetry Information

WaveRF's products, including devices and software running the WaveHouse SDK, may collect and transmit telemetry data, signal-strength measurements, and location information (including GPS coordinates where available, or estimated location derived from signal-strength trilateration among nearby devices). This information may relate to the device itself or, where a device is associated with or carried by an individual (for example, in asset-tracking or personnel-tracking deployments), to that individual. Where WaveRF's customer, rather than the individual, controls the deployment of such devices, that customer is responsible for providing appropriate notice to and, where required by applicable law, obtaining consent from individuals whose location or telemetry data is collected through the customer's use of WaveRF's products.

WaveRF's products may use automated processes, such as network routing and device positioning, to operate. See the Section entitled "Your Privacy Rights" below for information about rights that may apply to automated decision-making.

Sensitive Personal Information

WaveRF does not intentionally collect Sensitive Personal Information through the Website except where voluntarily provided by you, where it is necessary to provide a product or service that you have requested (including the location and telemetry information described above), or where it is required in connection with an employment inquiry you submit. Unless specifically requested by WaveRF, you should not submit Sensitive Personal Information through the Website beyond what is necessary for these purposes.

WaveRF may use Personal Information for the following purposes:

• (a) to operate, maintain, and improve the Website;
• (b) to create and administer your account, authenticate your access, and provide the products and services you request, including billing and subscription management;
• (c) to provide network routing, fleet management, telemetry, and location or positioning features that you or your organization has enabled through WaveHouse or the WaveHouse SDK;
• (d) to respond to your inquiries, requests, and communications;
• (e) to provide information regarding WaveRF and its technologies, products, and services;
• (f) to administer communications, subscriptions, newsletters, events, or other programs that you elect to receive;
• (g) to monitor, analyze, and improve the performance, functionality, security, and usability of the Website;
• (h) to detect, investigate, prevent, or respond to fraud, unauthorized access, security incidents, or other unlawful or prohibited activities;
• (i) to comply with applicable law, rule, regulation, legal process, court order, subpoena, governmental request, or a contractual obligation;
• (j) to establish, exercise, or defend legal claims;
• (k) for any other purpose disclosed at the time Personal Information is collected; and
• (l) with your consent or at your direction.

WaveRF may use cookies, web beacons, pixels, analytics technologies, and similar technologies to operate the Website, improve functionality, analyze Website traffic, understand how visitors use the Website, and enhance the user experience. Most web browsers permit you to control or disable cookies through your browser settings. If you disable cookies, certain features or functionality of the Website may not operate properly. The Website may use third-party analytics providers or similar service providers that use cookies or similar technologies to collect information regarding your use of the Website. Any information collected by those third parties is governed by their applicable privacy policies.

Some browsers offer a "Do Not Track" signal. Because there is no common industry standard for interpreting this signal, the Website does not currently respond to it. WaveRF does honor the Global Privacy Control and other opt-out preference signals as described in the "Your Privacy Rights" Section, to the extent required by applicable law.

WaveRF does not sell Personal Information and does not "share" Personal Information (as that term is defined under applicable law), except as described in this Section. WaveRF may disclose Personal Information in the following circumstances:

• (a) to service providers, contractors, consultants, and other third parties that perform services on WaveRF's behalf and that require access to Personal Information to perform those services;
• (b) to WaveRF's affiliates in connection with the operation of WaveRF's business;
• (c) in connection with a merger, acquisition, financing, corporate reorganization, sale of assets, bankruptcy, or other business transaction involving all or a portion of WaveRF's business or assets;
• (d) to comply with applicable law, rule, regulation, legal process, court order, subpoena, governmental request, or a contractual obligation;
• (e) to establish, exercise, or defend the legal rights of WaveRF or others;
• (f) to detect, investigate, prevent, or respond to fraud, security incidents, or other unlawful activity;
• (g) with your consent or at your direction; or
• (h) to third-party analytics or advertising partners that use cookies or similar technologies described in the Section entitled "Cookies and Similar Technologies," to the extent that such use constitutes a "sale" or "sharing" of Personal Information under applicable law.

WaveRF may also disclose information that has been deidentified, anonymized, or aggregated so that it does not reasonably identify any individual.

WaveRF retains Personal Information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, enforce agreements, or satisfy other legitimate business purposes. The length of time Personal Information is retained depends on the nature of the information, the purpose for which it was collected, and applicable legal, regulatory, contractual, and operational requirements.

Personal Information processed in connection with a Beta Feature may be subject to additional logging and monitoring for testing and debugging purposes and may not follow the same retention or deletion practices described in this Section. WaveRF will use reasonable efforts to delete such information when it is no longer needed for the applicable testing purpose.

WaveRF maintains reasonable administrative, technical, and physical safeguards designed to protect Personal Information from unauthorized access, use, disclosure, alteration, or destruction. No method of transmitting information over the Internet or storing information electronically is completely secure. Accordingly, WaveRF cannot guarantee the security of Personal Information.

If WaveRF becomes aware of a security incident involving unauthorized access to or acquisition of Personal Information that requires notification under applicable law, WaveRF will notify affected individuals and, where required, applicable regulators within the timeframe required by applicable law, and will describe the nature of the incident and the steps WaveRF is taking in response.

Subject to applicable law, and depending on your jurisdiction, you may have certain rights regarding your Personal Information, including the right to:

• (a) request access to the Personal Information WaveRF maintains about you;
• (b) request that inaccurate or incomplete Personal Information be corrected;
• (c) request that WaveRF delete Personal Information, subject to applicable legal exceptions;
• (d) request a copy of the Personal Information you have provided to WaveRF in a structured, commonly used, and machine-readable format, and, where technically feasible, request that WaveRF transmit that information to another entity;
• (e) object to or request restrictions on certain processing of Personal Information where permitted by applicable law;
• (f) withdraw any consent you have previously provided, where WaveRF's processing is based on your consent;
• (g) opt out of the "sale" or "sharing" of Personal Information, to the extent WaveRF engages in either as described in the Section entitled "How WaveRF Shares Personal Information";
• (h) not receive discriminatory treatment for exercising any of the foregoing rights; and
• (i) request human review of, or object to, a decision based solely on automated processing that produces legal or similarly significant effects concerning you, where applicable law provides this right.

To exercise any applicable privacy rights or submit a privacy-related request, please contact WaveRF using the contact information provided at the end of this Privacy Policy. WaveRF may request additional information to verify your identity before responding to your request. WaveRF will respond to verifiable requests within the time period required by applicable law (typically 45 days, subject to a permitted extension). If WaveRF denies your request in whole or in part, you may have the right to appeal that decision using the same contact information. Where required by applicable law, WaveRF will treat an opt-out preference signal (such as the Global Privacy Control) received from your browser as a valid request to opt out of the sale or sharing of Personal Information collected during that browser session. If you are located in the European Economic Area, the United Kingdom, or Switzerland, see the Section entitled "International Users" below for the legal bases for this processing.

The Website is operated from the United States. If you access the Website from outside the United States, you acknowledge that your Personal Information may be transferred to, processed, and stored in the United States, where privacy laws may differ from those of your jurisdiction.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, WaveRF processes your Personal Information on the following legal bases: the performance of a contract with you, WaveRF's legitimate interests in operating, securing, and improving the Website, compliance with legal obligations, and your consent where required. Where WaveRF transfers Personal Information from these regions to the United States or other countries, it does so under appropriate safeguards, including the European Commission's Standard Contractual Clauses or another valid transfer mechanism recognized under applicable law. You have the right to lodge a complaint with your local data protection supervisory authority.

The Website is not directed to children under 13 years of age, and WaveRF does not knowingly collect Personal Information from children under 13 through the Website. If WaveRF becomes aware that it has collected Personal Information from a child under 13 without appropriate parental consent, WaveRF will take reasonable steps to delete such information. If you believe that a child under 13 has provided Personal Information to WaveRF through the Website, please contact WaveRF using the contact information provided at the end of this Privacy Policy.

The Website may contain links to third-party websites or services that are not owned or controlled by WaveRF. This Privacy Policy does not apply to those third-party websites or services. WaveRF encourages you to review the privacy policies of any third-party website or service you visit before providing any Personal Information.

WaveRF may update this Privacy Policy from time to time. If WaveRF makes changes to this Privacy Policy, WaveRF will post the revised Privacy Policy on the Website and update the above "Effective Date". Unless otherwise stated, the revised Privacy Policy will become effective immediately upon posting. Your continued use of the Website after the revised Privacy Policy becomes effective constitutes your acceptance of the revised Privacy Policy.

If you have any questions regarding this Privacy Policy or WaveRF's privacy practices, please contact WaveRF at privacy@wave-rf.com.