Photo Audit Systems, Inc. — State Privacy Notice (CCPA/CPRA And Other State Laws)

Photo Audit Systems, Inc. (“PAS,” “we,” or “us”) complies with specific state law privacy requirements, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”) (as they pertain to us), and considers the underlying principles of such requirements as a core pillar of our business. We provide this state-specific privacy notice to supplement the information and disclosures already contained in our Privacy Policy, into which it is incorporated by reference. This notice applies to individuals residing in states that have data privacy requirements more specific than our Privacy Policy addresses, and from whom we collect Personal Information.

In general, we do not sell your Personal Information.

The chart below outlines the categories of Personal Information (as defined by the CCPA) that we have collected and/or disclosed for a business purpose in the preceding twelve months. The examples of Personal Information provided for each category are taken from the CCPA and are included to help you understand what the categories mean. The examples are not meant to indicate what we actually collect or disclose; more information about our specific practices can be found in our Privacy Policy.

Category	We Collect	We Disclose	We Sell
A. Identifiers — Examples: Name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, or other similar identifiers.	Yes	Yes	No
B. Cal. Civ. Code § 1798.80(e) categories — Examples: Name, signature, address, telephone number, driver’s license or state ID number, employment, employment history, or other financial or personal information.	Yes	Yes	No
C. Protected classification characteristics — Examples: Race, national origin, religion, age, sex/gender, sexual orientation, disability, medical condition, marital status, veteran status.	No	N/A	N/A
D. Commercial information — Examples: Records of products or services purchased, obtained, or considered, or other purchasing histories or tendencies.	Yes	Yes	No
E. Biometric information — Examples: Physiological, biological, or behavioral characteristics, including imagery of the face from which an identifier template (e.g., a faceprint) can be extracted.	No	N/A	N/A
F. Internet or other electronic network activity — Examples: Browsing history, search history, and information regarding interaction with a website, application, or advertisement.	Yes	Yes	No
G. Geolocation data — Example: Precise physical location.	Yes	Yes	No
H. Sensory information — Examples: Audio, electronic, visual, thermal, olfactory, or similar information (including photographs uploaded through the Service).	Yes	Yes	No
I. Professional or employment-related information — Examples: Job history and job performance information.	Yes	Yes	No
J. Non-public education information (20 U.S.C. § 1232g; 34 C.F.R. Part 99) — Examples: Student records maintained by an educational institution.	No	N/A	N/A
K. Inferences drawn from Personal Information — Examples: Profiles reflecting a person’s preferences, characteristics, or behavior.	Yes	Yes	No

Use of Personal Information

Certain state requirements (including the CCPA) define various business and commercial purposes for collecting, using, and disclosing Personal Information. While we collect, use, and disclose Personal Information pursuant to our Privacy Policy as a whole, this includes Personal Information in accordance with the specific business and commercial purposes identified in the CCPA and other state requirements as follows:

Auditing related to a current interaction with you and concurrent transactions, including auditing compliance with applicable standards.
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible.
Debugging to identify and repair errors that impair existing intended functionality.
Short-term, transient use.
Contracting with service providers to perform services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing analytic services, or providing similar services on our behalf.
Undertaking internal research for technological development and demonstration.
Undertaking activities to verify or maintain the quality or safety of our services, and to improve, upgrade, or enhance our services.
Otherwise enabling or effecting, directly or indirectly, a commercial transaction.
For other purposes for which we provide specific notice at the time the information is collected.

Collection and Disclosure of Personal Information

In the preceding twelve months since this notice was last updated, we have collected Personal Information from general sources including you, your use of our services, your devices, our affiliates, our vendors, and our service providers. More specific information is set out in this notice and in our Privacy Policy, which we update from time to time.

As also explained in our Privacy Policy, we share your Personal Information with the following categories of third parties:

Vendors and service providers, including for data hosting, analytics, and operating, securing, and improving our products and services.
Third parties integrated into our services.
Third parties as required by law and similar disclosures.
Third parties in connection with a merger, sale, or asset transfer.
Other third parties for whom we have obtained your permission to disclose your Personal Information.

Your Privacy Rights

If you are a resident of a state that provides privacy rights (including California), you may be entitled to exercise the following rights under your state’s laws:

Right to Know and Access. You may submit a verifiable request for information regarding the: (1) categories of Personal Information collected or disclosed by us; (2) purposes for which categories of Personal Information are collected; (3) categories of sources from which we collect Personal Information; and (4) specific pieces of Personal Information we have collected about you during the past twelve months.
Right to Correct. Subject to certain exceptions, you may correct Personal Information about you that we have collected.
Right to Delete. Subject to certain exceptions, you may delete Personal Information about you that we have collected.
Requests for access to or deletion of Personal Information are subject to our ability to reasonably verify your identity in light of the information requested and pursuant to relevant state requirements.
Right to Equal Service and Price. You have the right not to receive discriminatory treatment for exercising your state’s privacy rights, subject to certain limitations.
Shine the Light. We do not rent, sell, or share your Personal Information with nonaffiliated companies for their direct marketing purposes, except as provided herein and in our Privacy Policy, unless we have your permission.
Right to Limit Use of Sensitive Personal Information. California residents have the right to direct us to limit our use and disclosure of sensitive personal information (including precise geolocation) to purposes necessary to provide the services you have requested or as otherwise permitted by the CCPA. To exercise this right, contact [email protected] with the subject line “Limit Sensitive PI.”

Changes to this Notice

We update this notice every 12 months or as needed. We will notify you of any material changes at least 30 days before they take effect by posting a notice on this page or sending you an email. The date of the last update is noted below.

Contact Information

If you have any questions, or would like more information on our privacy practices, please contact us at [email protected] or by mail at:

Photo Audit Systems, Inc. 455 NE 5th Avenue, Suite 188 Delray Beach, FL 33483

Last Updated: July 22, 2026