Legal

Last Updated October 27, 2025

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”) may provide you with specific rights regarding your Personal Information. This section of our Privacy Policy contains certain required information and informs California residents of certain rights arising under the CCPA.

We may have collected the following categories of Personal Information from you within the last twelve (12) months:

• Identifiers — such as name, postal address, email address, or account name.
• Unique and online identifiers – such as internet protocol address or device IDs.
• Commercial information — such as records of products or services purchased.
• Demographic information — such as gender, age, and language preferences.
• Internet or other electronic network activity information — such as browsing history, search history and information regarding an individual’s interaction with an internet website, application, or advertisement.
• Geolocation information.
• Inferences — such as preferences and behaviors.

We collect the above categories of Personal Information from the following sources:

• Directly from you.
• If you are an End-User of the Services, we receive information from your Authorized Provider or Monitoring Agent.
• Automatically generated information — such as technical, equipment and usage information from your interactions with User Interfaces.
• From other companies, such as integration partners.
• From our affiliates.

We collect the above categories of Personal Information for the following business and commercial purposes:

• Performing our Services.
• Auditing customer transactions.
• Fraud prevention and authentication or identification verification.
• Debugging errors in systems.
• Marketing and advertising.
• Internal research, analytics and development.
• Developing, maintaining, provisioning or upgrading networks, services or devices.

Categories of Personal Information “Sold” or “Shared” to Third Parties and the Business and Commercial Purpose

The categories of Personal Information that we have “sold” or “shared” to third parties in the last twelve (12) months and the business and commercial purposes for “selling” or “sharing” suchPersonal Information are set forth below in the “Notice of Right to Opt-out of Sale and Sharing Personal Information and Targeted Advertising” Section of the Noonlight’s Privacy Policy. We do not knowingly “sell” or “share” thePersonal Information of individuals under sixteen (16) years of age.

Disclosures of Personal Information

We may have disclosed each of the above categories of Personal Information with the following categories of third parties who perform services on our behalf:

• Product and services delivery companies.
• Marketing services companies.
• Cloud storage companies.
• Credit reporting agencies.
• Billing and payment processing companies.
• Fraud prevention and authentication/identity verification entities.
• Analytics companies.
• Our affiliates.

Retention of Personal Information

We retain the Personal Information that we collect to achieve the purposes for which the Personal Information was collected. In certain cases, we may need to retain Personal Information for purposes required under applicable law, for tax, accounting, or audit purposes, or for other purposes permitted or required under law.

Use and Disclosure of Sensitive Personal Information

You should not provide any sensitive information in the Noonlight Application, including health information, which is not required to use the Website or the Noonlight Application. As such, the right to limit our use and disclosure of such sensitive information does not apply.

Your California Privacy Rights

The following rights apply to California residents:

• The right to request that businesses subject to the CCPA (which may include your Authorized Service Provider) disclose certain information to you about their collection and use of your Personal Information over the past 12 months including the     categories of information, the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom the business disclosed Personal Information, and the specific pieces of Personal Information collected about you.
• The right to ask such businesses to delete or correct Personal Information collected for you, subject to certain exceptions.
• The right to opt-out of a business selling or sharing your Personal Information.
• You may ask a business to limit its use of your sensitive Personal Information (e.g., biometric information or ethnicity), but know that Noonlight does not use your sensitive Personal Information in a manner subject to that right.
• If you choose to exercise your rights, you also have the right not to be discriminated against and will not be charged different prices or provided with different quality of services.