Privacy Policy

Last Updated: December 1, 2025

Natural Capital Exchange, Inc. and its affiliates (collectively "NCX," "we," "our," or "us") value your privacy. In this Privacy Policy ("Policy"), we describe the information we collect, how we use it, and when and to whom we disclose it. This Policy applies to all of our websites, mobile applications, and other online services (collectively, the "Platform") made available by or through NCX and on which we post this Policy, including through our URL www.ncx.com, and to information we collect offline or through other means.

Undefined capitalized terms used herein shall have the definitions as set forth in our Terms of Use. By accessing or using the Platform, you agree to this Policy. IF YOU DO NOT AGREE TO THIS POLICY, PLEASE DO NOT ACCESS OR USE THE PLATFORM.

KEY TERMS

Capitalized terms used in this Policy have the meanings set forth in our Terms of Use, except as specifically defined below.

"Property Data" means all information about properties uploaded, submitted, or provided by Landowners through the Platform, including but not limited to property boundaries, acreage, forest data, timber information, soil information, topography, photographs and images, land use information, environmental data, and any other property-related materials.

INFORMATION WE COLLECT

How we collect and store information depends on how you access and use the Platform. We collect information in multiple ways including when you provide information directly to us, when we collect information from affiliates and non-affiliated sources, and when we passively collect information from you, such as information collected from your browser or device.

Information You Provide Directly to Us

You may provide us with information about you when you use or access the Platform, such as when you register for an account; participate in polls or surveys; enroll for electronic newsletters; request a quote or other information; submit or respond to a quote; make a purchase; fill out any forms; enter a sweepstakes or contest, or register for a promotion; transmit User Content; download or use one of our mobile applications; you consent to our collection of information, such as when you grant us permission to collect your device's contact list; or otherwise communicate with us or other Users through the Platform. This list is illustrative, not exhaustive; this Policy applies to all your uses of the Platform.

The personal information you provide directly to us may include, but is not limited to:

Account Information: (a) name; (b) email address; (c) home or business telephone number; (d) home, business or mailing address; (e) zip code; (f) date of birth and/or age verification; (g) demographic information (e.g., gender, age, and other information relevant to User surveys and/or offers); (h) username and password
Property Data: Information about your property including (i) property boundaries and acreage; (j) forest data and timber information; (k) soil information and topography; (l) photographs, videos, and images of your property; (m) land use information; (n) environmental data; (o) property location and geographic information; (p) property ownership information; (q) any other property-related materials you upload or submit
Service-Related Information: (r) information about your service requests or needs; (s) information specific to services you are requesting (such as project descriptions or preferences); (t) if you are an NCX Forester or Service Provider, business name, service description, qualifications, credentials, and insurance information; (u) in certain circumstances, identity verification information (such as Social Security number or driver's license information)
Communications: (v) photographs, video files, or audio files (e.g., customer service call recordings); (w) any other information you include in communications with other Users through the Platform or communications with us
For Paid Services Only - Payment Information: If you purchase Platform Services or engage Timber Sales Services, we collect payment information through our third-party payment processors (Stripe for Platform Services, Dwolla for Timber Sales Services), as described in the "Payment Processing" section below. Free Services users do not need to provide payment information.

You are not required to provide us with such information, but certain features of the Platform may not be accessible or available, absent the provision of the requested information.

Phone Number Privacy: We will not sell, rent, or share your phone number with third parties for their marketing purposes without your explicit consent, excluding aggregators and providers of SMS services.

Information from Affiliates, Social Networking Sites, and Other Non-Affiliated Sources

We may collect information about you through NCX affiliates or through non-affiliated sources, including public information sources. For example:

Social Networking Sites: You may be able to access the Platform through a social networking account, such as Facebook. If you access the Platform through your Facebook account, you may allow us to have access to certain information in your Facebook profile. This may include your name, profile picture, gender, networks, user IDs, list of friends, location, date of birth, email address, photos, videos, people you follow and/or who follow you, and/or your posts or "likes." Social networking sites, such as Facebook, have their own policies for handling your information. For a description of how these sites may use and disclose your information, including any information you make public, please consult those sites' privacy policies.
Supplemental Information: To the extent permitted by law, we may, in our sole discretion, ask for and collect supplemental information about you from non-affiliated sources, such as information about your credit from a credit bureau, or information to verify your identity or trustworthiness, or for other fraud or safety protection purposes. We may combine information that we collect from you through the Platform with information that we obtain from such sources, including public information sources and information derived from any other products or services we provide.
Off-Platform Communications: We may collect information that demonstrates the occurrence of an off-Platform communication between a Landowner and an NCX Forester or Service Provider in order to ensure accurate charging of fees and to enforce the Terms of Use. Except as explicitly stated herein, we will not collect or store the contents of any off-Platform communication between Users.

Please note that we have no control over how any third-party site uses or discloses the information it collects about you.

Information That Is Passively or Automatically Collected

Device/Usage Information: We and certain third-party vendors, including ad networks and analytics providers, may use cookies, web beacons, and other tracking technologies to collect information about the computers or devices (including mobile devices) you use to access the Platform. As described further below, we and these third-party vendors may collect and analyze information including but not limited to (a) browser type; (b) ISP or operating system; (c) domain name; (d) access time; (e) referring or exit pages; (f) page views; (g) IP address; (h) unique device identifiers (e.g. IDFA or Android ID); and (i) the type of device that you use. We may also track and record when and how frequently you access or use the Platform, or how you browse the Platform. We do not, however, collect keystroke information. We use this information (including the information collected by relevant third-party vendors) for Platform analytics (including to determine which portions of the Platform are used most frequently and what our Users like/do not like), to assist in determining relevant advertising (both on and off the Platform), to evaluate the success of our advertising campaigns, and as otherwise described in this Policy.

Forecast Usage Data: When you use Free Services, including property value forecasts and estimates, we collect information about which forecasts you view, when you view them, and how frequently you access forecasts. We use this information to improve our forecasting algorithms, personalize your experience, track conversion from Free Services to paid services, and for market research purposes.

Location Information: When you use the Platform, we may collect general location information (such as your location as derived from your IP address). If you install our mobile app, depending on your device settings and any permissions you have granted, we may collect information about your precise geolocation, and we may use that information to improve the Platform, including providing you with location-based features (e.g., for identification of Landowner Services available near you). To deliver customized content and advertising, we may disclose your location information to our agents, vendors, or advertisers. If you access the Platform through a mobile device and you do not want your device to provide us with location-tracking information, you may be able to disable the GPS or other location-tracking functions on your device. See your device manufacturer's instructions for further details. If you disable certain functions, you may be unable to use certain parts of the Platform.

Cookies and Other Electronic Technologies: We and our third-party vendors may use cookies, clear GIFs, pixel tags, and other technologies that help us better understand User behavior, personalize preferences, perform research and analytics, and improve the Platform. These technologies, for example, may allow us to tailor the Platform to your needs, save your password in password-protected areas, track the pages you visit, help us manage content, and compile statistics about Platform usage. We also use certain of these technologies to deliver advertisements through the Platform that may interest you or to advertise ourselves and the Platform to you on other sites. We or our third-party vendors also may use certain of these technologies in emails to our Users to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but your browser may allow you to modify your browser settings to decline cookies if you prefer. If you disable cookies, you may be prevented from taking full advantage of the Platform, because it may not function properly. As we adopt additional technologies, we may also gather additional information through other methods.

HOW WE USE YOUR INFORMATION

We may use your information for any of the following reasons:

Service Delivery and Account Management

For the purposes for which you provided it
To enable you to use the services available through the Platform, including registering you for our services and verifying your identity and authority to use our services
To provide Free Services, including generating property value forecasts and market insights
To facilitate Platform Services and connect you with Service Providers
To facilitate Timber Sales Services and connect you with NCX Foresters and Timber Buyers
For customer support and to respond to your inquiries
To track fees and process billing and payment including sharing with third-party payment gateways and payment vendors in connection with the Platform
To contact you with information about your use of the Platform

Machine Learning and Product Development

To train and improve machine learning models and algorithms (see "Machine Learning and Data Analytics" section for details and opt-out rights)
To improve and maintain the Platform and for product development
To personalize and enhance your experience on the Platform
For research and analytical purposes
To create anonymized market insights and intelligence products

Marketing and Communications

To market and advertise our services and the Platform, including to send promotional emails regarding new products from NCX, special offers from NCX, or other information that may interest you
As permitted under applicable law, to contact you by text message regarding certain services or information you have requested
As permitted under applicable law, to contact you by telephone or text message regarding Platform features, improvements, or other products and services that may interest you
For NCX's market research purposes, including, but not limited to, the customization of the Platform according to your interests

Safety, Fraud Prevention, and Legal Compliance

To address fraud or safety concerns, or to investigate complaints or suspected fraud or wrongdoing
To resolve disputes, to protect ourselves and other Users of the Platform, or third parties, including to protect property or safety; and to enforce any legal terms that govern your use of the Platform
For internal record-keeping purposes
To administer surveys, sweepstakes, promotions, or contests

NCX Forester and Service Provider Profiles: For NCX Foresters and Service Providers, we may display information related to your business, including your name or your business's name, publicly on your profile, except to the extent we tell you we will not display such information. If the information you provide us upon signing up for an account differs from the information you provide us as part of the verification data we collect, we have sole discretion in determining which information will be displayed publicly on your profile.

Message Scanning for Safety and Research: We may, either directly or through third-party providers we engage to provide services to us, review, scan, or analyze your communications with other Users exchanged via the Platform or as otherwise described in this Policy for fraud prevention, risk assessment, regulatory compliance, investigation, product development, research and User support purposes. For example, as part of our fraud prevention efforts, we may scan and analyze messages to prevent fraud or improper actions. We may also scan, review or analyze messages for research and product development purposes, as well as to debug, improve and expand product offerings. By using the Platform or engaging in off-Platform communications tracked by NCX, you consent that NCX, in its sole discretion, may, either directly or through third-parties we engage to provide services to us, review, scan, analyze, and store your communications, whether done manually or through automated means.

Aggregated and De-Identified Data: We may aggregate and/or de-identify information we collect. We may use de-identified or aggregated information for any purpose, including without limitation for research and marketing purposes and may also disclose such information to any third parties, including without limitation, advertisers, promotional partners, sponsors, event promoters, and/or others.

Combined Information: We may combine information that we collect from you through the Platform with information that we obtain from affiliated and non-affiliated sources, and information derived from any other products or services we provide.

HOW WE DISCLOSE YOUR INFORMATION

Unless otherwise described in this Policy, we may also disclose the information that we collect as follows:

To Deliver Landowner Services

NCX Foresters (Independent Contractors): When you engage Timber Sales Services, we disclose your Property Data, contact information, and service history to NCX Foresters from our network of licensed forestry professionals. NCX Foresters are independent contractors, not NCX employees. They use this information to assess your property, provide timber valuations, solicit competitive bids from Timber Buyers, and facilitate timber sales. This disclosure is necessary to deliver the Timber Sales Services you requested.

Service Providers (Third-Party Vendors): When you purchase Platform Services, we disclose your Property Data (as necessary for service delivery), contact information, and payment information to Service Providers who fulfill the services you purchased. Service Providers may include drone imagery providers (such as DroneDeploy), tax advisory professionals, conservation consultants, and other third-party vendors. This disclosure is necessary to deliver the Platform Services you requested.

Timber Buyers: When you engage Timber Sales Services, we may disclose your Property Data and contact information to potential Timber Buyers so they can evaluate your timber and submit competitive bids. Timber Buyers are third-party purchasers, not NCX affiliates. This disclosure is necessary to facilitate competitive timber sales on your behalf.

Service Providers and Vendors Working for NCX

Vendors: We may provide your information to select third parties who perform services on our behalf. These third parties provide a variety of services to us including without limitation billing, sales, marketing, advertising, market research, fulfillment, data storage, analysis and processing, identity verification, fraud and safety protection, customer support, and legal services.

Analytics and Advertising: We may disclose information to third-party analytics providers and advertising networks as described in the "Online Analytics and Tailored Advertising" section below.

Business Purposes and Legal Requirements

Affiliates: We may disclose your information to any NCX affiliates.

Consent: We may disclose your information based on your consent to do so.

Legal Requirements: We may disclose your information when required by law or when we believe in good faith that such disclosure is necessary to: (a) comply with subpoenas, court orders, or other legal process we receive; (b) establish or exercise our legal rights including enforcing and administering agreements with Users; or (c) defend NCX against legal claims. While you may challenge the disclosure request, please be advised we may still be legally required to turn over your information.

Protection of NCX and Others: We may disclose your information when we believe it appropriate to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of the Terms of Use or any other legal terms governing use of the Platform, and/or to protect our rights and property and the rights and property of others.

Business Transfers: As we continue to develop our business, we may sell, buy, merge or partner with other companies or businesses, or sell some or all our assets. In such contemplated or actual transactions or where there is any change of control of NCX, your information may be among the disclosed and/or transferred assets.

Research and Market Intelligence

Academics and Research: We may provide information about Users to third-parties for academic and research purposes, in anonymized or aggregated form.

Market Intelligence Products: We may disclose anonymized or aggregated Property Data and market insights to third parties for research, market analysis, industry reports, and other market intelligence purposes. We remove personally identifiable information (name, email, phone) before such disclosures, but property location data may still be included in anonymized datasets.

App Store Providers

We may provide your identity and mobile device identifier to third-party app store providers (for example, the Apple App Store) to allow you to download our mobile apps.

Public Information and User-Generated Content

You may post Content on or through our Platform, including, but not limited to, your comments, pictures, profile information, and other information. However, please be careful and responsible whenever you are online. Some information you provide and/or that we collect may be publicly accessible. For instance, registration for an account requires that you provide us with your name. Your name (full name, or in some instances, your first name and last initial) may be visible to other Users. Depending on the circumstances, your name may be attached to your Content or information, such as scheduling of Landowner Services, service requests, reviews, participating in discussions or forums, messaging, and profile information. Certain other people, including other Users with whom you have interacted via the Platform, may see information about you that is attached to your name. For example (but without limitation), if you are a Landowner seeking services, the description you provide of your preferences, along with your name, will be shown to NCX Foresters or Service Providers. Thus, other Users may be able to personally identify you based on Content you provide. Similarly, certain information we collect, including but not limited to when you last accessed the Platform, may be disclosed to other Users with whom you are interacting or otherwise made public.

If you choose to post User Content on or through the Platform, such as through User-to-User messaging or through our review boards, forums, blogs, or other postings, that information: (a) may be or may become publicly available; (b) may be collected and used by third-parties with or without our knowledge; and (c) may be used by third parties (including other Users) in a manner that may violate this Policy or applicable law.

MACHINE LEARNING AND DATA ANALYTICS

NCX uses Property Data to train, test, and improve machine learning models and algorithms that power our Free Services, including property value forecasts and market insights. When using Property Data for machine learning:

We combine your Property Data with third-party data sources, historical sales information, regional market data, and anonymized data from other properties
We remove personally identifiable information (name, email, phone number, account identifiers) before using data for model training
Property location and characteristics may still allow re-identification in some circumstances, particularly for unique or distinctive properties
Anonymized data may be used in market reports, research publications, and market intelligence products
Property Data used for machine learning may be retained indefinitely in anonymized form, consistent with the license grant you provided in our Terms of Use

For information about how we share Property Data with third parties, see the "How We Disclose Your Information" section below.

PAYMENT PROCESSING

For Paid Services Only: We use two payment processors depending on the service type. Payment account requirements are described in our Terms of Use. Free Services users do NOT need payment accounts.

Stripe (Platform Services)

For Platform Services such as drone imagery and property assessments, payment processing is handled by Stripe, Inc. When you purchase Platform Services, we share payment information (name, email address, payment card details, billing address) with Stripe for payment processing. See Stripe's privacy policy at stripe.com/legal/privacy.

Dwolla (Timber Sales Services)

For Timber Sales Services, payment processing is handled by Dwolla, Inc. When you engage Timber Sales Services, we share personal information (name, DOB, SSN, address, email, phone, financial details) with Dwolla for payment processing and regulatory compliance. See Dwolla's privacy policy at www.dwolla.com/legal/privacy and manage your account through Platform settings or support@ncx.com.

ONLINE ANALYTICS AND TAILORED ADVERTISING

Analytics

We may use third-party web analytics services on the Platform, such as those of Google Analytics. Providers of these services use cookies and similar technologies (as described in the Information That Is Passively or Automatically Collected section above) to help us analyze how Users use the Platform, including by noting the third-party website from which you arrive. The information collected by the technology may be disclosed to or collected directly by these providers. We may also use Google Analytics; to prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-Out Browser Add-on.

Tailored Advertising

We may use advertising services provided by third parties on the Platform, which provide their services using cookies and similar technologies (as described in the Information That Is Passively or Automatically Collected section above). Third parties whose products or services are accessible or marketed via the Platform may also place such technologies on your computer, mobile phone, or other device to collect information about your use of the Platform. We, our providers, and third parties collect information in this way for advertising and marketing purposes.

Certain third-party providers and certain cookies or similar technologies on the Platform enable us and third parties to serve you "tailored" advertising online that is more relevant to you and your interests. If you are interested in more information about tailored browser advertising and how you can generally control cookies from being put on your computer to deliver tailored advertising, you may visit the Network Advertising Initiative's Consumer Opt-Out Link at http://www.networkadvertising.org/choices/ and/or the Digital Advertising Alliance's Consumer Opt-Out Link at http://www.aboutads.info/choices/ to opt out of receiving tailored advertising from companies that participate in those programs. To opt out of Google Analytics for Display Advertising or customize Google Display Network ads, you can visit the Google Ads Settings page at https://www.google.com/settings/ads. We do not control any of these opt-out mechanisms and are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms. If your browsers are configured to reject cookies when you visit this opt-out page, or you subsequently erase your cookies, use a different computer or change web browsers, your NAI or DAA opt-out may no longer be effective. Additional information is available on NAI's and DAA's websites.

Please note that if you opt out of tailored advertising, you may still receive online advertisements about us, the Platform, or third parties on the Platform – however, such advertising is not tailored.

Mobile Advertising

When using a mobile application, you may also receive tailored in-application advertising. Each operating system (e.g., iOS for Apple devices, Android for Android devices, and Windows for Microsoft devices) provides its own instructions on how to prevent use of your mobile advertising identifier to deliver tailored in-application advertising. For more information, you may review the support materials and/or the privacy settings for the operating systems and devices you use, or contact the applicable provider/operator.

DATA RETENTION

We retain your information for as long as necessary to provide you with the Platform and Landowner Services, to comply with our legal obligations, to resolve disputes, to enforce our agreements, and for other legitimate business purposes.

Retention Periods by Data Category

Active Accounts: We retain your account information and User Content for the duration of your relationship with NCX and as long as your account remains active.

Closed Accounts: After you close your account, we retain certain information for up to seven (7) years to comply with legal obligations, prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigations, enforce our Terms of Use, and for any other purposes otherwise permitted by law that we deem necessary in our sole discretion.

Property Data for Machine Learning: Property Data used to train machine learning models may be retained indefinitely in anonymized form to maintain model accuracy and research value, as described in the "Machine Learning and Data Analytics" section.

Payment Records: Payment and transaction information is retained for seven (7) years or as required by financial services regulations and tax laws. Our payment processors (Stripe and Dwolla) may retain payment information separately according to their own retention policies.

Forecast History and Usage Data: We retain records of forecasts you viewed and Platform usage data for up to three (3) years for quality monitoring, algorithm improvement, and research purposes.

Legal Hold and Investigations: If we receive a legal request or if information is relevant to an investigation, litigation, or regulatory matter, we will retain that information for as long as necessary to comply with the request or resolve the matter, which may extend beyond the retention periods described above.

Your Content Shared with Others

You should understand that once you transmit User Content through the Platform, it may be acquired by others who may not be required to delete or modify such User Content. Once we have deactivated or removed your account, you agree that NCX will not be responsible for retaining information related to your account, except as described in this section.

YOUR RIGHTS AND CHOICES

Account Information

You may review, correct, and delete certain information about you through your account, such as by logging in to the Platform and navigating to your account settings or preferences page. We expect you to promptly update your account information if it changes or is inaccurate. Upon your request, we will close your account and remove your profile information from view as soon as reasonably possible, subject to the retention periods described in the "Data Retention" section above.

Marketing Communications

We may send periodic promotional emails to you. You may opt out of promotional emails by following the opt-out instructions contained in the email. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt out of receiving promotional emails, we may still send you non-promotional emails about your account, services you have requested or received from us, transactions, or changes to our Terms of Use, this Policy, or other relevant terms.

Text Messages

If you provided your phone number and consented to receive text messages, you may opt out of text messages at any time by replying "STOP" to any text message you receive from us, or by contacting us at support@ncx.com.

Telephone Monitoring

We may monitor and record our telephone conversations with you for training and quality assurance purposes. You will be provided with a notice at the beginning of any call that is being recorded.

State-Specific Privacy Rights

Depending on where you live, you may have additional privacy rights under state law. See the "State-Specific Privacy Rights" section below for more information.

STATE-SPECIFIC PRIVACY RIGHTS

Depending on your state of residence, you may have additional privacy rights under state law. This section describes rights available to residents of certain states.

California Residents (CCPA/CPRA Rights)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information.

Categories of Personal Information We Collect:

Category	Examples	Business Purpose	Third Parties Shared With
Identifiers	Name, email address, phone number, mailing address, IP address, account username	Account management, service delivery, customer support, fraud prevention	NCX Foresters, Service Providers, Stripe, Dwolla, vendors, analytics providers
Personal Information under Cal. Civ. Code § 1798.80(e)	Name, address, Social Security Number (Timber Sales users only), financial account information	Payment processing, identity verification, tax reporting	Stripe, Dwolla and financial institution partners
Commercial Information	Property Data, timber sales records, service purchase history, payment history	Service delivery, forecasting, machine learning training, market research	NCX Foresters, Service Providers, Timber Buyers, research partners (anonymized)*
Internet or Network Activity	Website usage, browsing history, forecast views, search history, interaction with Platform	Analytics, product improvement, tailored advertising, machine learning training	Analytics providers, advertising networks, vendors
Geolocation Data	Property location, property boundaries, general location derived from IP address	Property forecasts, service delivery, location-based features	NCX Foresters, Service Providers, Timber Buyers, analytics providers
Inferences	Property value estimates, user preferences, predicted interests, market predictions	Free Services provision, product recommendations, personalization, machine learning training	None (internal use only)

*Property Data and Commercial Information are shared only with third parties involved in services you specifically request. For example, NCX Foresters receive your Property Data only if you engage Timber Sales Services; Service Providers receive your Property Data only if you purchase Platform Services requiring their involvement; and Timber Buyers receive your Property Data only if you are selling timber through NCX.

"Sale" or "Sharing" of Personal Information: NCX may "share" personal information (as that term is defined under the CPRA) for targeted advertising purposes. Specifically, we share Internet or Network Activity information with advertising networks to deliver tailored advertising. We do not "sell" personal information in the traditional sense of exchanging information for money.

Sensitive Personal Information: We collect the following categories of sensitive personal information:

Social Security Number (only for Timber Sales Services users engaging Dwolla accounts)
Payment card information (only for Platform Services users making purchases through Stripe)
Precise geolocation data (property locations from Property Data)

We use and disclose sensitive personal information only for purposes permitted under the CPRA, including to provide services you requested, prevent fraud and security incidents, and verify or maintain the quality of our services.

Your CCPA/CPRA Rights:

Right to Know: You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purpose for collecting it, and the categories of third parties with whom we shared it.
Right to Delete: You have the right to request that we delete personal information we collected from you, subject to certain exceptions.
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale/Sharing: You have the right to opt-out of the "sale" or "sharing" of your personal information. To opt-out, email support@ncx.com with "Do Not Sell My Personal Information" in the subject line or contact us using the methods listed in the "Contact Us" section below.
Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of your sensitive personal information to permitted purposes only. However, we currently use sensitive personal information only for permitted purposes, so this right may not apply.
Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA/CPRA rights.

How to Exercise Your Rights: To exercise your CCPA/CPRA rights, please:

Email us at support@ncx.com with "California Privacy Rights" in the subject line
Call us at (415) 223-0022
Visit ncx.com/contact

We will verify your identity before processing your request. We may ask you to provide information such as your name, email address, and phone number to match against our records. We will respond to verifiable requests within 45 days, or notify you if we need additional time (up to 90 days total).

Authorized Agents: You may designate an authorized agent to make a request on your behalf. We will require proof of your authorization and may verify your identity directly.

Virginia Residents (VCDPA Rights)

If you are a Virginia resident, the Virginia Consumer Data Protection Act (VCDPA) provides you with the following rights regarding your personal data:

Right to Access: You have the right to confirm whether we are processing your personal data and to access such personal data.
Right to Correction: You have the right to correct inaccuracies in your personal data.
Right to Deletion: You have the right to delete personal data you provided to us.
Right to Data Portability: You have the right to obtain a copy of your personal data in a portable and readily usable format.
Right to Opt-Out: You have the right to opt-out of:
- Targeted advertising
- The sale of personal data
- Profiling in furtherance of decisions that produce legal or similarly significant effects

How to Exercise Your Rights: To exercise your VCDPA rights, please contact us at support@ncx.com with "Virginia Privacy Rights" in the subject line, or use the contact methods described in the "Contact Us" section below. We will respond to your request within 45 days.

Appeals: If we deny your request, you have the right to appeal our decision by contacting us at support@ncx.com with "Virginia Privacy Appeal" in the subject line.

Other State Privacy Rights

Residents of Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights to those described above. Please contact us at support@ncx.com to exercise your state-specific privacy rights.

SECURITY

We employ physical, procedural, and technological security measures to help protect your information from unauthorized access or disclosure. NCX may use encryption, passwords, and physical security measures to help protect your information against unauthorized access and disclosure.

Specifically:

We use industry-standard encryption (TLS/SSL) to protect data transmitted between your browser and our servers
Property Data is stored in secure, access-controlled databases
Payment information is processed through third-party payment processors (Stripe for Platform Services, Dwolla for Timber Sales Services) and is subject to their respective security measures and PCI-DSS compliance standards
We limit employee and contractor access to personal information on a need-to-know basis
We conduct regular security assessments and updates to our systems

No security measures, however, are 100% failsafe. Therefore, we do not promise and cannot guarantee, and thus you should not expect, that any information provided or transmitted online is completely secure. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, keeping your log-in and password private, and not recycling passwords from other websites or accounts. NCX is not responsible for the unauthorized use of your information nor for any lost, stolen, or compromised passwords, or for any activity on your account via unauthorized password activity.

PRIVACY OF MINORS

Our services are not provided to minors (i.e., persons under the age of 18). We elect to provide services only to persons 18 years of age or older, including any use of the Platform. If we discover, or if you inform us, that an individual under 18 has provided us with personal information, we will close the account and delete that individual's personal information as required by law, including the Children's Online Privacy Protection Act (COPPA). We may, where permitted by law, retain certain information internally for purposes described in this Policy, such as to prevent fraud or comply with legal obligations.

If you believe that an individual under 18 has provided personal information to us, please contact us immediately at support@ncx.com.

LINKS TO EXTERNAL PLATFORMS

The Platform may contain links to third-party websites or resources over which NCX does not have any control. Such links do not constitute an endorsement by NCX of those third-party websites. You acknowledge that NCX is providing these links to you only as a convenience, and further agree that NCX is not responsible in any way for such third-party websites, including without limitation for their content, privacy practices, or how they treat information you provide to them.

Please review the privacy policies of any third-party websites or services before providing them with your personal information. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

CHANGES TO THIS POLICY

THIS POLICY IS CURRENT AS OF THE EFFECTIVE DATE SET FORTH ABOVE. NCX MAY, IN ITS SOLE AND ABSOLUTE DISCRETION, CHANGE THIS POLICY AT ANY TIME. NCX WILL POST ITS UPDATED POLICY ON THE PLATFORM, SEND YOU A MESSAGE OR OTHERWISE NOTIFY YOU WHEN YOU ARE LOGGED INTO YOUR ACCOUNT. NCX ENCOURAGES YOU TO REVIEW THIS POLICY REGULARLY FOR ANY CHANGES. YOUR CONTINUED ACCESS TO OR USE OF THE PLATFORM WILL BE SUBJECT TO THE TERMS OF THE THEN-CURRENT POLICY.

Material changes to this Policy will be effective 30 days after we post the updated Policy or notify you of the changes, unless otherwise required by law. If you do not agree to the modified Policy, you should discontinue your use of the Platform. Your continued use of the Platform after the effective date of the modified Policy constitutes your acceptance of the modified Policy.

CONSENT TO TRANSFER

Our computer systems are currently based in the United States, so your information will be processed by us in the United States, where data protection and privacy regulations may not offer the same level of protection as in your country of residence and data may be accessible to law enforcement and national security authorities under certain circumstances. If you create an account with the Platform as a visitor from outside the United States, by using the Platform, you agree to this Policy and you consent to the processing of all such information in the United States.

CONTACT US

If you have any questions about this Policy or the Platform, or if you wish to exercise any of your privacy rights described in this Policy, please contact us:

By Email: support@ncx.com

By Mail: NCX, Inc. Attn: Privacy Officer 2443 Fillmore St. #380-1418 San Francisco, CA 94115

For California Residents: If you have submitted a request and are not satisfied with our response, you have the right to file a complaint with the California Attorney General. Visit https://oag.ca.gov/contact for more information.

For Virginia Residents: If we deny your privacy request, you have the right to appeal our decision by contacting us at support@ncx.com with "Virginia Privacy Appeal" in the subject line.