PEZSCALES PRIVACY NOTICE
Effective date: August 2, 2024
Last updated: August 6, 2026

‍This Privacy Notice explains how, PezScales LLC ("PezScales," "we," "us," or "our"), collects, uses, discloses, and protects Personal Information. It also explains the privacy choices and rights that may be available to you.This Notice applies when you:visit pezscales.com or any PezScales webpage, portal, application, or subdomain that links to this Notice (collectively, the "Sites");request an audit, report, valuation, playbook, consultation, proposal, demonstration, or other content;communicate with us by email, telephone, text message, social media, form, meeting, event, or other channel;receive or use our consulting, advisory, AI, engineering, automation, implementation, analytics, or related services (collectively, the "Services");act as a client, prospective client, client representative, vendor, business partner, event participant, or job applicant; orotherwise interact with us in a context in which we determine why and how your Personal Information is processed."Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. It does not include information that is lawfully public, aggregated, or deidentified so that it cannot reasonably be linked to an individual.By interacting with us, you acknowledge the practices described in this Notice. This Notice does not replace any contract, data processing addendum, consent, or more specific privacy notice that applies to a particular Service or engagement. If a contract or specific notice conflicts with this Notice, that document controls for the applicable processing.

1. WHEN PEZSCALES ACTS FOR A CLIENTPezScales may configure or operate systems for clients that handle information about the client's customers, prospects, employees, contractors, or other individuals ("Client Data"). These systems may include AI reception, call handling, text messaging, lead qualification, appointment booking, follow-up, customer relationship management, quoting, dispatch, reviews, referrals, analytics, and similar workflows.When a client determines why and how Client Data is processed, the client is the controller or business and PezScales acts as its processor, service provider, or contractor. In that role:we process Client Data on the client's documented instructions and as permitted by the client agreement and any data processing addendum;the client's privacy notice, not this Notice, primarily governs the client's collection and use of that Client Data;the client is responsible for providing legally required notices, obtaining legally required consents, establishing a lawful basis for processing, and responding to privacy requests; andindividuals should direct requests concerning Client Data to the relevant client. If we receive such a request, we may refer it to the client or assist the client as required by law or contract.We may separately act as a controller or business for account, billing, security, service-usage, relationship-management, and support information that we collect for our own legitimate business purposes. If PezScales and a client jointly determine a processing purpose, the parties' agreement will allocate their respective responsibilities.Clients may not provide PezScales with regulated health information, Social Security numbers, government identification numbers, payment-card data, financial-account credentials, biometric identifiers, children's data, or other highly sensitive or regulated information unless PezScales has expressly agreed in writing to receive it and appropriate legal and contractual safeguards are in place.

2. PERSONAL INFORMATION WE COLLECTThe information we collect depends on your relationship with us and how you interact with the Sites or Services. During the preceding 12 months, we may have collected the following categories of Personal Information:A. Identifiers and contact informationExamples include name, business email address, telephone number, mailing address, account identifier, username, online identifier, IP address, and social media handle.B. Professional, business, and organization informationExamples include employer or business name, title, role, industry, service area, company website, business size, annual revenue range, locations, years in business, professional profile, and relationship to PezScales or a client.C. Commercial, engagement, and transaction informationExamples include Services requested, considered, or purchased; proposals; contracts; account and subscription information; invoices; payment status; transaction history; communications preferences; and records of the business relationship. Payment processors may collect payment-card or bank information directly from you. PezScales generally receives transaction confirmations and limited billing information rather than complete payment credentials.D. Business, operational, and financial informationWhen you request or receive Services, we may collect information about business goals, operations, organizational structure, staffing, leads, sales, customers, pricing, marketing, dispatch, reviews, referrals, costs, revenue, profitability, ownership, growth plans, technology systems, potential transactions, and exit-readiness considerations. Some of this information may be confidential business information rather than Personal Information; we protect it as required by contract and applicable law. E. Communications, content, and sensory informationExamples include form submissions, emails, text messages, chat content, survey responses, meeting notes, support requests, feedback, documents, files, photographs, video, voice recordings, call recordings, transcripts, and AI-generated summaries. We provide notice and obtain consent to record or transcribe communications when required by law.F. Internet, device, and usage information. Examples include browser type, device type, operating system, cookie or advertising identifiers, pages viewed, links clicked, referral URL, access time, session activity, form interactions, email engagement, approximate location derived from IP address, log data, error data, and information about interactions with the Sites, Services, or advertisements. G. Property, service-location, and local-market informationExamples include service address, property characteristics, approximate or precise location when provided or authorized, service needs, route information, local weather or storm information, publicly available property information, and related details used for quoting, dispatch, routing, market analysis, or client-requested workflows.H. Inferences and analyticsWe may derive business insights, lead classifications, service interests, likely priorities, benchmarks, recommendations, forecasts, scores, segments, or other inferences from the information described in this Notice. These inferences are used for the purposes described below and are subject to applicable law and contract.I. Job-applicant and workforce informationIf you seek work with us, we may collect contact information, work history, education, qualifications, portfolio materials, professional profiles, interview notes, compensation expectations, availability, references, work authorization, and other information you choose to provide. We may conduct lawful verification or background checks after providing any required notice and obtaining any required authorization.J. Sensitive Personal InformationWe do not seek sensitive Personal Information through our public Sites unless it is reasonably necessary for a disclosed purpose. Depending on the interaction, sensitive information may include account credentials, precise geolocation, financial information, contents of certain communications, or information contained in Client Data. We use sensitive Personal Information only for permitted purposes, such as providing requested Services, maintaining security, processing authorized transactions, complying with law, or as otherwise disclosed with any consent required by law. We do not use sensitive Personal Information to infer characteristics about an individual except as authorized by law and expressly required for the applicable Service.

3. SOURCES OF PERSONAL INFORMATION. We may collect Personal Information from:you, including through forms, accounts, communications, meetings, events, surveys, transactions, and materials you provide;your organization or another person acting for you, including an employer, client, colleague, authorized representative, referral source, or business partner;PezScales clients, when they provide or authorize access to Client Data;connected systems and integrations, such as customer relationship management, scheduling, dispatch, telephony, messaging, email, advertising, analytics, accounting, payment, review, or other business systems that you or a client authorizes us to access;public and commercial sources, including business websites, government and property records, business directories, professional networks, social media, search engines, online reviews, advertising libraries, weather sources, and third-party business-data providers;service providers and business partners, including hosting, security, communications, analytics, advertising, payment, events, recruiting, and professional-service providers; andautomated technologies, including cookies, pixels, tags, software development kits, logs, and similar technologies used on the Sites, in emails, or in advertisements.If you provide Personal Information about another individual, you represent that you are authorized to provide it and that you have given any notice and obtained any consent required by law. You should provide that individual with access to this Notice or, for Client Data, the applicable client's privacy notice.

4. HOW WE USE PERSONAL INFORMATION. We may use Personal Information to:Provide and administer the Sites and Servicesrespond to inquiries and deliver requested audits, reports, valuations, playbooks, content, consultations, proposals, demonstrations, and Services;create and administer accounts, authenticate users, manage permissions, and provide support;perform consulting, diagnostics, benchmarking, strategy, implementation, engineering, automation, analytics, training, and advisory work;configure, connect, operate, monitor, troubleshoot, maintain, and improve systems and integrations;process transactions, billing, invoices, renewals, and related records; andmanage client, prospective-client, vendor, and partner relationships.Operate AI-assisted systemspower conversational, voice, messaging, lead-response, scheduling, routing, quoting, summarization, analytics, and recommendation features;transcribe, summarize, classify, extract, or analyze permitted content;generate reports, estimates, forecasts, recommendations, and workflow outputs; andtest, evaluate, secure, and improve the reliability and performance of Services.Communicate and marketsend service, account, security, appointment, support, and transaction communications;provide requested content and follow up about an inquiry;send newsletters, educational content, invitations, surveys, and information about Services that may be relevant, as permitted by law;personalize communications and measure campaign effectiveness; andmanage communication choices, opt-outs, and suppression lists.Analyze and improve our businessunderstand Site and Service use, diagnose technical issues, and develop or improve offerings;produce internal reporting, business intelligence, market research, benchmarks, and aggregated or deidentified insights;evaluate demand, performance, marketing, and service quality; andplan and administer our business, finances, workforce, and operations.Protect PezScales and otherssecure the Sites, Services, accounts, systems, and data;detect, investigate, prevent, and respond to fraud, abuse, spam, security incidents, unlawful activity, and violations of contract;protect the rights, safety, property, and operations of PezScales, our clients, users, personnel, and others;establish, exercise, or defend legal claims; andcomply with contracts, legal obligations, lawful requests, court orders, and regulatory requirements.We may use Personal Information for another compatible purpose or for a purpose disclosed at collection. If required by law, we will provide additional notice or obtain consent before using Personal Information for a materially different purpose.

5. AI, AUTOMATION, AND AUTOMATED PROCESSING. PezScales uses artificial intelligence and automation as tools within its Services. Depending on the workflow, AI systems may receive and generate text, audio, transcripts, images, documents, business records, or structured data. AI systems may help answer calls, respond to messages, qualify or route leads, schedule appointments, prepare preliminary quote ranges, summarize interactions, analyze business information, detect patterns, prioritize tasks, or recommend actions.We may use third-party AI and infrastructure providers to process information for these purposes. Those providers may process information as our or our client's service providers or subprocessors, subject to contract and applicable law.PezScales does not use Client Data to train generalized AI models for PezScales' own benefit, and does not authorize third-party AI providers to train their generalized models on Client Data, unless the client expressly authorizes that use in a written agreement or a separate notice and consent process applies. We may use aggregated or deidentified information, service telemetry, feedback, test data, and non-client-confidential information to evaluate or improve our Services, subject to applicable law and contract.AI outputs may be reviewed by authorized personnel when reasonably necessary to provide support, evaluate quality, investigate misuse, maintain security, or perform the Services. Access is limited according to role, contract, and operational need.Unless a separate written agreement, legally required notice, consent, and safeguards expressly provide otherwise, PezScales does not use Personal Information collected through its public Sites or direct business interactions to make solely automated decisions that produce legal or similarly significant effects concerning an individual. PezScales Services are not intended to make final eligibility decisions concerning employment, housing, credit, insurance, healthcare, education, legal services, or access to essential goods or services. A client that configures or uses an automated workflow is responsible for appropriate human oversight, testing, notices, consents, and compliance with laws applicable to its decisions.We do not use voice recordings to create biometric identifiers or voiceprints for identification unless we first provide a separate legally compliant notice and obtain any required consent.

6. COOKIES AND SIMILAR TECHNOLOGIES. We and our providers may use cookies, pixels, tags, local storage, logs, and similar technologies to collect Internet, device, and usage information. These technologies may be used for:strictly necessary functions, such as security, network management, authentication, load balancing, fraud prevention, and remembering privacy choices;functionality, such as saving preferences and improving the user experience;analytics and performance, such as understanding traffic, interactions, errors, and use of the Sites or emails; andadvertising and measurement, such as measuring campaigns, attributing conversions, limiting repeated ads, building audiences, and delivering or measuring advertising on other services.Some advertising or analytics providers may combine information collected through the Sites with information from other websites, apps, or services. Under some U.S. state laws, allowing these technologies may be considered a "sale," "sharing," or processing for "targeted advertising," even when no money changes hands.You may manage cookies through your browser and, where available, through the cookie banner or Cookie Settings link on the Sites. Blocking cookies may affect Site functionality. Where required by applicable law, we obtain consent before activating non-essential cookies and recognize legally valid opt-out preference signals as described in Section 13.

7. EMAIL, TEXT MESSAGE, AND TELEPHONE COMMUNICATIONS. Email You may opt out of marketing emails by using the unsubscribe link in the email or contacting us. Even after a marketing opt-out, we may send non-marketing communications concerning an existing relationship, requested Service, transaction, account, security issue, or legal notice.Text messagesIf you provide your mobile number and opt in to text messages from PezScales, we may send the categories of messages described at the point of consent, which may include requested content, inquiry follow-up, appointment reminders, service messages, account notices, or marketing messages. Message frequency varies. Message and data rates may apply. Consent to marketing texts is not a condition of purchase.You may opt out at any time by replying STOP or by communicating a legally sufficient revocation request through another reasonable method. You may reply HELP for assistance. We may send one confirmation of an opt-out and may continue sending messages that you separately request or that applicable law permits.We do not sell or disclose text-messaging originator opt-in data or consent records to third parties for their own marketing. We may provide such information to communications providers and other vendors that help us deliver messages, maintain consent records, prevent fraud, or comply with law. Mobile information obtained for text messaging will not be shared with affiliates or third parties for their own promotional purposes.Calls and meetingsWe may monitor, record, transcribe, or summarize telephone calls, video conferences, demonstrations, or meetings for documentation, training, quality assurance, security, support, or service delivery. We provide notice and obtain consent when required by law. If you do not wish to be recorded, inform us before continuing so that an alternative may be considered.

8. HOW WE DISCLOSE PERSONAL INFORMATION. We may disclose Personal Information to the following categories of recipients for the purposes described in this Notice:Service providers and subprocessorsThese may include providers of cloud hosting, storage, databases, cybersecurity, identity and access management, website operation, analytics, AI models, data processing, telephony, call recording, transcription, email, text messaging, customer relationship management, scheduling, support, collaboration, payment processing, accounting, advertising, marketing, recruiting, and document management. They may process Personal Information only for contracted purposes, subject to applicable contractual and legal obligations.Clients and your organizationIf you interact with PezScales for an organization or through a client-configured system, we may disclose information to that organization or client and its authorized users. Account administrators may access account, usage, and content information associated with their organization.Integrations and third parties you directWe may disclose information to software, platforms, systems, or other third parties when you or a client asks us to connect or send information to them. The recipient's own terms and privacy notice govern its independent processing.Business and delivery partnersWe may disclose information to contractors, implementation partners, referral partners, event partners, or other parties involved in jointly delivering a requested Service, opportunity, or event. Where required, we will obtain consent or contractually limit the recipient's use.Professional advisersWe may disclose information to attorneys, accountants, auditors, insurers, bankers, financing sources, consultants, and other professional advisers subject to appropriate duties of confidentiality.Legal, safety, and compliance recipientsWe may disclose information to courts, regulators, law enforcement, government authorities, counterparties, or other persons when we believe disclosure is required or permitted by law or reasonably necessary to protect rights, safety, property, security, or the integrity of the Sites or Services.Corporate transactionsWe may disclose information in connection with an actual or proposed financing, investment, merger, acquisition, reorganization, joint venture, sale of assets, due diligence process, insolvency, or similar transaction. Where appropriate, recipients will be subject to confidentiality restrictions, and we will provide any notice required by law.With consent or at your directionWe may disclose information for another purpose that we disclose to you and for which you provide consent or direction.We may disclose aggregated or deidentified information that cannot reasonably identify an individual. We maintain deidentified information in deidentified form and do not attempt to reidentify it except as permitted by law to test whether our deidentification processes are effective.

9. SALE, SHARING, AND TARGETED ADVERTISING. PezScales does not sell Personal Information for money. PezScales does not disclose Client Data, text-messaging consent data, or direct client relationship data to third parties for their own independent marketing. As described in Section 6, however, we may permit advertising, analytics, or social-media providers to collect identifiers and Internet or network activity from the public Sites for advertising measurement, audience creation, or targeted advertising. Some state laws may define this activity as a "sale" or "sharing" of Personal Information or as targeted advertising, even when no money is exchanged.Where applicable law provides an opt-out right, you may exercise it through the cookie controls made available on the Sites, a legally recognized opt-out preference signal, or by contacting us as described in Section 13. We do not knowingly sell or share the Personal Information of individuals under 16 years of age.We do not offer financial incentives or differences in price or service in exchange for the collection, sale, or sharing of Personal Information unless we first provide any notice and obtain any consent required by law.

10. DATA RETENTION. We retain Personal Information only for as long as reasonably necessary for the purposes described in this Notice, including to provide Services, maintain the business relationship, meet contractual commitments, protect security, preserve business and transaction records, comply with legal, tax, accounting, and regulatory obligations, enforce agreements, and resolve disputes.Retention depends on factors including:the nature, amount, and sensitivity of the information;the purpose for which it was collected and whether that purpose can be achieved through other means;the duration of an account, inquiry, client engagement, vendor relationship, or recruiting process;client instructions and contractual retention or deletion requirements;applicable limitation periods and legal, tax, accounting, employment, regulatory, and recordkeeping requirements;security, fraud-prevention, dispute, litigation-hold, and business-continuity needs; andthe time required to remove information from active systems and backup cycles.When retention is no longer reasonably necessary, we delete, anonymize, aggregate, or otherwise dispose of Personal Information in accordance with applicable law and our operational processes. We may retain a limited suppression record to honor communication opt-outs and may retain information in backups until it is overwritten in the ordinary course.

11. DATA SECURITY. We use administrative, technical, and organizational safeguards designed to protect Personal Information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Depending on the system and data involved, safeguards may include access controls, authentication, encryption in transit, vendor review, logging, monitoring, backups, personnel confidentiality obligations, incident-response procedures, and data-minimization practices.No method of transmission, storage, or security is completely reliable, and we cannot guarantee absolute security. You are responsible for using appropriate security practices, protecting account credentials, limiting the information you provide to what is necessary, and notifying us promptly if you suspect unauthorized access or misuse.

12. INTERNATIONAL PROCESSING. PezScales is based in the United States. We and our providers may process Personal Information in the United States and other countries whose privacy laws may differ from those where you live. When applicable law requires safeguards for an international transfer, we use an authorized transfer mechanism or contractual and organizational protections appropriate to the transfer. We do not claim participation in or certification under any cross-border privacy framework unless we expressly state otherwise in a separate notice.If privacy laws in the European Economic Area, United Kingdom, Switzerland, or another jurisdiction apply to our processing as a controller, our legal bases may include performance of a contract or steps requested before entering a contract, compliance with legal obligations, our legitimate interests or those of another person where not overridden by your rights, protection of vital interests, and consent. Legitimate interests may include providing and improving Services, managing business relationships, communicating with business contacts, securing systems, preventing fraud, and administering our business. You may withdraw consent at any time where consent is the legal basis, without affecting processing already completed.

13. YOUR PRIVACY RIGHTS AND CHOICES. Depending on where you live and subject to legal exceptions and applicability thresholds, you may have the right to:confirm whether we process your Personal Information;access or obtain a copy of Personal Information;correct inaccurate Personal Information;delete Personal Information;obtain certain information in a portable format;opt out of the sale or sharing of Personal Information, targeted advertising, or certain profiling or automated decision-making;limit certain uses or disclosures of sensitive Personal Information;object to or restrict certain processing;withdraw consent where processing is based on consent;appeal a denial of a privacy request; andreceive equal service and not be discriminated against for exercising a privacy right.To submit a request, email legal@pezscales.com with the subject line Privacy Request and describe the right you wish to exercise. To appeal a denial, use the subject line Privacy Request Appeal and explain why you believe the decision should be reconsidered.We may ask for information reasonably necessary to verify your identity, authority, and relationship with PezScales. We will use verification information only to process the request. We may deny or limit a request where permitted by law, including when we cannot verify the request, the request concerns information we process only for a client, an exception applies, or fulfilling the request would adversely affect another person's rights.An authorized agent may submit a request where permitted by law. We may require evidence of the agent's authority and may ask you to verify your identity or confirm the authorization directly, unless applicable law provides otherwise.If your request concerns information collected by a PezScales client through a client-branded call, form, website, text message, AI agent, or other workflow, contact that client first. We will assist the client as required by contract and law.Marketing choicesYou may unsubscribe from marketing email or text messages as described in Section 7. Opting out of marketing does not require us to delete Personal Information or prevent non-marketing communications permitted by law.Browser privacy signalsTraditional "Do Not Track" signals are not governed by a uniform industry standard, and the Sites do not respond to them. Where required by applicable law, we treat a recognized opt-out preference signal, such as Global Privacy Control, as a request to opt out of sale, sharing, or targeted advertising for the browser or device from which the signal is sent. Because these signals are browser- and device-specific, you may need to enable them on each browser and device.

14. ADDITIONAL U.S. STATE DISCLOSURES. This section supplements the rest of this Notice for residents of states with applicable comprehensive privacy laws.For the preceding 12 months, the categories of Personal Information we may have collected are listed in Section 2; the sources are listed in Section 3; the business and commercial purposes are listed in Sections 4 and 5; and the categories of recipients are listed in Sections 8 and 9. We may disclose each category described in Section 2 to the recipient categories in Section 8 when relevant to the stated purpose. For advertising or targeted-advertising activities described in Section 9, the categories that may be sold or shared as those terms are defined by law are identifiers and Internet or other electronic network activity, and the recipient categories are advertising networks, analytics providers, and social-media platforms.CaliforniaTo the extent the California Consumer Privacy Act, as amended ("CCPA"), applies to PezScales and the relevant information, California residents may exercise the applicable rights listed in Section 13. PezScales does not use or disclose sensitive Personal Information for purposes that trigger the CCPA right to limit, except as otherwise disclosed through a legally compliant notice.California's "Shine the Light" law may permit certain customers to request information about disclosure of specified Personal Information to third parties for their own direct-marketing purposes. PezScales does not disclose Personal Information to third parties for their own direct marketing in the manner covered by that law. NevadaNevada residents may request to opt out of a future sale of certain covered information as defined by Nevada law by contacting us under Section 13. PezScales does not currently sell covered information as "sale" is defined by Nevada law.Other statesResidents of other states may exercise any applicable rights listed in Section 13. We will respond within the period and provide any appeal process required by the law that applies to the request.

15. CHILDREN'S PRIVACY. The Sites and Services are intended for businesses and adults and are not directed to children. We do not knowingly collect Personal Information through our Sites from children under 13 or knowingly sell or share the Personal Information of individuals under 16. If you believe a child has provided Personal Information to us in violation of applicable law, contact us so we can investigate and take appropriate action.

16. THIRD-PARTY SERVICES, LINKS, AND SOCIAL MEDIA. The Sites or Services may contain links to, integrations with, embedded content from, or features operated by third parties. Those third parties may collect information directly from you and process it under their own privacy notices. PezScales is not responsible for the privacy, security, or content practices of third parties acting independently. Review their notices before providing information.Information you post publicly or submit through a public social-media feature may be visible to PezScales, the platform, other users, and the public. Your use of social-media platforms is governed by the platform's terms and privacy practices.

17. CHANGES TO THIS NOTICE. We may update this Notice to reflect changes in our Services, technology, data practices, or legal obligations. The "Last updated" date identifies the most recent revision. If a change is material, we will provide additional notice when required by law, which may include a prominent Site notice, account notice, or email. Unless otherwise stated, an updated Notice applies when posted.

18. CONTACT US. For privacy questions, requests, or complaints, contact: Legal@pezscales.com

Privacy and Legal
Email: legal@pezscales.com

Location: Utah, United States. If you have an unresolved concern and applicable law gives you the right to complain to a privacy regulator or supervisory authority, you may do so in the jurisdiction where you live or work or where the alleged violation occurred. This Notice is informational and does not create contractual rights beyond those provided by applicable law or an agreement that expressly incorporates it.