RELAYTO experiences (which encompasses Relayto.com and custom domains hosted by RELAYTO). Some third-party services that we use to provide the RELAYTO Service may place their own cookies in your browser. This Privacy Policy covers use of cookies by RELAYTO only and not the use of cookies by third parties. RELAYTO complies with the “Do Not Track” (“DNT”) standard recommended by the World Wide Web Consortium. For logged-out users browsing with DNT enabled, RELAYTO’s analytics will not receive data about you, but we will do some first-party tracking in order to customize content and provide data to third-party service providers that enable RELAYTO Services to work. When you use RELAYTO while logged-in to your account, we cannot comply with DNT. See our Cookies Policy below . 7. Modifying or Deleting Your Personal Information If you have a RELAYTO account, you can access, modify or export your personal information, or delete your account. Controls for those actions are located in the RELAYTO user settings page. To protect information from accidental or malicious destruction, we may maintain residual copies for a brief time period. But, if you delete your account, your information and content will be unrecoverable after that time (there might be some latency in deleting this information from our servers and back-up storage). 8. Changes If we are involved in a reorganization, merger, acquisition or sale of our assets, your information may be transferred as part of that deal. We will notify you (for example, via a message to the email address associated with your account) of any such deal and outline your choices in that event. We may revise this Privacy Policy from time to time, and will post the most current version on our website. If a revision meaningfully reduces your rights, we will notify you. US State Privacy Addendum (Colorado Privacy Act and California) This addendum is part of the Privacy Policy. It applies when RELAYTO Limited processes personal data of individuals who reside in a US state with a consumer privacy statute. It is written first for the Colorado Privacy Act, C.R.S. §§ 6-1-1301 to 6-1-1313 (the "CPA"). California residents also use the same request channel. Where a state law gives a broader right, RELAYTO Limited will honor that broader right for residents of that state. Roles. For Stored Data that a Customer uploads into RELAYTO AI, RELAYTO Limited acts as a processor under the CPA and as a service provider / contractor under the California Consumer Privacy Act, as amended by the CPRA ("CCPA"). The Customer is the controller (CPA) or business (CCPA). For Account Data and site analytics that RELAYTO Limited collects for its own operations (billing, security, product improvement), RELAYTO Limited is the controller / business. Processor contract. When RELAYTO Limited is the processor, the DPA in this Packet is the CPA processor contract. RELAYTO Limited will process personal data only on documented Customer instructions, keep it confidential, use it only to provide the Services, assist the Customer with consumer requests and security 13 of 53