Legal

Privacy Policy

Last Revised: July 2026

Kasheesh, Inc. ("Kasheesh," "we," "our," or "us") respects your concerns about privacy and is committed to your privacy protection, and transparency of how we use information that may be collected from or about you through your use of, interactions with, or access to https://www.kasheesh.co/ (or such other URLs or web addresses as may be available by Kasheesh from time to time; the foregoing collectively, the "Sites") and any other services offered by us through or in connection with the Sites or our mobile apps, including the Kasheesh iOS and Kasheesh Android apps (collectively, with the Sites, the "Services"). This privacy policy (the "Privacy Policy") describes our practices for collecting, using, maintaining, protecting, and disclosing your information as well as the choices available to you regarding our use of your information. The Sites include all protocols (e.g. http, https), subdomains and paths associated with the relevant domains as well as any promotional sites, landing pages or other websites that make reference to this Privacy Policy.

I. Scope

This Privacy Policy applies to information we collect: (1) on or through the Services; (2) through online queries or forms you submit on the Services, and through any of your e-mail or other electronic communications with us regarding such queries or forms; and (3) any other information you submit to us for the purpose of using our Services.

This Privacy Policy does not apply to any information collected by any website operated by any third parties, including, but not limited to, certain of our vendors and other service providers' ("Service Providers") websites, and through any application or content (such as advertising) that may link to or be accessible from or through the Services ("third party" or "third parties"). More information regarding third party sources is available under the "How We Share Personal Information We Collect With Service Providers" section of this Privacy Policy.

Kasheesh works with Bangor Savings Bank ("BSB") in connection with Kasheesh's Services. In particular, BSB issues virtual debit card numbers for Kasheesh and provides certain other banking services. For more information on BSB's privacy policies, please see the Bangor Savings Bank Privacy Notice.

By using, interacting with, or otherwise accessing our Services or by providing your information to us or to our Service Providers or a Third Party, you agree to our treatment of your information in accordance with this Privacy Policy, our Terms of Service (the "Terms"), and any other policies, notices, or terms posted on the Sites.

II. Personal Information

"Personal Information" is information that identifies, relates to, describes, or can be reasonably linked to, directly or indirectly, a particular individual or household. This includes, but is not limited to:

Your name;
Your postal address (U.S. only);
Your e-mail address;
Your phone number;
Your date of birth;
Your ID collected for identity verification purposes (e.g., your SSN);
Your payment preference information, bank information, payment card information and credit card information;
Transaction history; and
Other information related to the above categories that we may use for purposes of preventing fraud.

We may also collect information that may not identify you or a household directly, but is linked to your computer or device ("Device Identifiable Information"). This information includes, but is not limited to:

Internet protocol ("IP") address;
Device type (e.g. desktop, laptop or mobile device);
Browser type, language, configuration and preferences;
Access times;
Pages visited;
Referring website addresses (if applicable);
Your mobile device type and model, operating system (e.g., iOS or Android), network type, carrier name, mobile browser (e.g., Chrome, Safari), and features (e.g. Bluetooth, NFC, GPS, accelerometer, etc.);
Applications using our Sites;
Location information, such as GPS coordinates;
Country location;
Amount of data transferred;
App information, crash logs and performance information; and
Identifiers assigned to your device, such as its iOS Identifier for Advertising ("IDFA"), Android Advertising ID ("AAID"), or unique device identifier (a number uniquely given to your device by your device manufacturer), sometimes referred to as a mobile carrier ID.

III. Information Collected

a. Information You Provide to Us

We collect information you provide to us when you register accounts with our Sites and other Services; enter information into our Services, such as your payment card information; sign up for mailing lists, and other products, services, or information from us; respond to surveys; participate in promotions, sweepstakes or contests; or otherwise interact with us.

b. Information Collected Automatically

To help us serve you better, we may collect Device Identifiable Information from you through technologies such as "cookies," "web beacons" (which are also called clear GIFs, pixel tags, tracking pixels or just 'pixels'), by tracking IP addresses or from your browser or device directly.

"Cookies" are small data files that are stored by your web browser when you interact with a website. When you visit a webpage, the cookie sends back Device Identifiable Information.

"Web beacons" are small graphic images (usually invisible) that can be embedded in content and ads on a webpage that track usage of the Sites and effectiveness of communication. These web beacons can then be used to recognize our cookies and to monitor certain user interactions with a website.

We may also use "link tracking technology", which involves adding special tags or parameters to the end of a URL (Uniform Resource Locator) to measure the effectiveness of our campaigns and the source of website traffic. This technology includes UTM (Urchin Tracking Module) parameters (e.g., utm_source, utm_medium, utm_campaign). When you click a tagged link, the parameters pass information to our analytics systems, allowing us to understand which marketing efforts led you to our website.

(i) Cookies

Cookies operate in the background and you can turn them off by adjusting your Web browser settings, but doing so may make it difficult to use some of the features on the Sites or the features may not be available to you. Our Sites use session cookies in order to provide you the Services. A session cookie allows us to link the actions of a user during a browser session. A browser session starts when you open a browser window and ends when you close the browser window. Session cookies are created temporarily.

We use session cookies in order to ensure your identity and prevent security risks in the performance of the Services. If you wish to refuse these cookies, we and our Service Providers cannot provide our Services to you.

We may also use cookies and other activity tracking tools on the Sites and through other Services to collect your engagement metrics, including your Personal Information and Device Identifiable Information, related to your activity on the Sites and Services.

We do not currently place or use cookies in order to collect information about you to deliver you targeted advertising. However, our Service Providers may do so, which is subject to and governed by their own policies and practices. If you opt-out or refuse cookies from our Service Providers, we may not be able to provide the Services to you.

For information on opting out of or refusing cookies, or our "Do Not Track" or "DNT" policy, please see "All Users: Your Choices and Controls," below.

(ii) Device Identifiable Information

We collect Device Identifiable Information from you in the normal course of providing the Services. When you visit our Sites or use our Services to browse, read, or download information, or to run one of our apps, we automatically collect Device Identifiable Information as described in the section titled "Personal Information," above. We may use Device Identifiable Information to analyze trends, help administer the Services, track the online movement of users, to learn about and determine how much time visitors spend on each page of the Sites, how visitors navigate throughout the Sites or use other Services, and to gather broad demographic information for aggregate use. We may also collect Device Identifiable Information through cookies or web beacons as explained in this Privacy Policy.

We may also collect your location information, such as your zip code or the approximate geographic area provided by your Internet service provider ("ISP") or location positioning information provided by the location services and GPS features of your mobile device when location services have been enabled.

(iii) Treatment of Aggregated or Deidentified Information

When aggregated or deidentified information, including Device Identifiable Information, is directly associated with Personal Information, such that the aggregated or deidentified information can be reasonably associated with a particular individual User or household, then this aggregated or deidentified information is treated as Personal Information.

(iv) Google Analytics

We may share your information with Google Analytics to track and analyze the use of the Services. The Google Analytics Advertising Features that we may use include: Google Analytics Demographics and Interests Reporting. This feature allows us to gather data on our users' age, gender, and interests using Google's advertising cookies and identifiers. We use this information to better understand our audience and create more relevant content and marketing campaigns.

Opt-Out: Visitors can opt-out of this tracking and personalized advertising by adjusting their settings via:

Google's Ads Settings: myadcenter.google.com/personalizationoff
The Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout

You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.

c. Information from Social Networks

We may collect information from third party social networking services (e.g., Google, Apple ID) (each, a "Social Network"), such as information available from your social media profiles, social media URLs, demographic information and custom profile information.

When using the Services or when using Social Networks you may have the option to connect your Service information and activity with your Social Network information and activity. For instance, you may use Google ID and Apple ID to create an account for our Services. If you authorize such a connection, you permit us to share or publish information about your Service activity with that Social Network and its users, and to access certain of your Social Network information, as disclosed to you at the time you consent to the connection through the relevant Social Network's own authorization or consent screen (the "Social Network Notice"). The Social Network Notice is presented and owned by the applicable Social Network, not by Kasheesh, and governs what information is shared between you, Kasheesh, and that Social Network.

As set forth in the relevant Social Network Notice, information we may share with a Social Network may include technical information about your Service activity, such as the fact that you created or accessed a Kasheesh account, your device type and operating system, IP address, browser or app version, timestamp of the connection event, and a unique account identifier used to link your Kasheesh account to your Social Network account (such as an OAuth token or similar authentication credential). As set forth in the relevant Social Network Notice, information we may access about you, with your consent, from a Social Network may include, but is not limited to, your basic Social Network information, your location data, your list of contacts, friends or followers, and certain information about your activities on the Social Network.

If you permit a connection between a Social Network and a Service, we (and that Social Network) may be able to identify you and to associate information received pursuant to the connection with information we already have about you. For more information, please review the privacy disclosures and terms of your Social Network account, which govern how that account information is collected and shared with us.

d. Other Third Party Sources

Kasheesh may also receive other information from Service Providers (as defined below) in connection with the operation of our Services, including when you place transactions through one of our Service Providers (e.g. by utilizing a payment card number issued by Bangor Savings Bank), to determine if you receive email communications we send to you, or take our surveys through a third-party vendor, as listed in the "How We Share Personal Information We Collect With Service Providers" section below. We may also receive information from Service Providers through marketing and demographic studies that we use to supplement Personal Information and deidentified information provided directly by you.

In particular, we collect information about you from BSB, our bank partner and the issuer of Kasheesh virtual debit card numbers. This information may include the status of your Kasheesh card numbers, information about your transactions and related account activity, and information generated in connection with identity verification, fraud prevention, and dispute or error resolution. We use this information to provide the Services to you, to protect you and the Services from fraud, and to comply with our legal, regulatory, and contractual obligations.

e. Identity Verification and Security

We also may obtain information about you from other businesses to verify your identity so we can properly process your requests and prevent fraud. By accessing and using our Services, you agree that we may use your submitted and obtained Personal Information and Device Identifiable Information for such purposes and to maintain the security of the Services.

f. How We Utilize Information You Submit to Us

When you submit your Personal Information to use, interact with, or access our Sites or Services, we will store the Personal Information you provide to us to facilitate your use, interactions with, or access to our Sites or Services; process your requests; and, where applicable, answer your queries. We may use the information you submit to us, including Personal Information, to:

Create accounts and process your registration with our Sites and Services;
Provide Services to you;
Provide technical support and respond to user inquiries;
Improve our Sites, Services and other offerings;
Perform analytics;
Send you administrative information;
Communicate with our Service Providers in connection with the Services, for internal business purposes or to address your inquiries or requests;
Provide you notices of any changes and upgrades to our Sites, Services, Privacy Policy, or Terms, or send other communications that are relevant to your use of our Services;
Send you marketing communications about our services and the services of third parties, subject to the Section below entitled "Opting Out of Direct Marketing and Other Advertising";
Protect you from and prevent fraud and other criminal activity, claims, and other liabilities; and
Fulfill any legal obligations or requests.

We may retain any communications we have with you, including where you make requests to us, in order to process and respond to your requests, or to improve our Services. To improve our Services, as identified in the "How We Use Non-Personal Information" section of this Privacy Policy, we may aggregate or anonymize the data collected such that you cannot be personally identified in the aggregated or anonymized data.

In addition to the above, we may disclose your Personal Information:

If we are required to do so by law or legal process (e.g., court order or subpoena);
In response to requests by government or regulatory agencies (e.g., law enforcement authorities);
To establish, exercise, or defend our legal rights;
When we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss;
In connection with a business transfer (see section (g) below); and/or
Otherwise, with your consent.

g. Business Transfers

As we develop our business, we might sell or buy businesses or assets, such as the sale of all or most of Kasheesh's assets or equity to another company. In the event of a corporate sale, merger, reorganization, dissolution, or similar event in which a third party assumes control of all or part of our business, Personal Information may be part of the transferred assets or business. In the event of such a business transfer, we will require the successor entity to honor this Privacy Policy or provide you with notice and the opportunity to make choices about your Personal Information before any material changes to how it is used or disclosed.

h. How We Store Your Personal Information

We will retain your Personal Information for as long as necessary to fulfill the purposes and uses outlined in this Privacy Policy (e.g., provide you with access to our Services, receive your queries or form submissions), unless a longer retention period is required or permitted by any applicable law or regulation.

When your Personal Information is no longer necessary for the purposes for which it was collected, we retain it only for as long as required to satisfy our legal, regulatory, and contractual obligations, in accordance with our internal Record Retention Policy. The following retention periods apply to key categories of your Personal Information:

E-Sign Consent and Agreement records are retained for the life of your customer relationship with Kasheesh;
Customer complaint records are retained for a minimum of five (5) years;
Transaction consent and authorization records are retained for a minimum of five (5) years;
Know Your Customer (KYC) and identity verification records are retained for a minimum of five (5) years following account closure; and
Privacy notice and policy records are retained for a minimum of five (5) years.

After applicable retention periods have expired, we will delete, destroy, or anonymize your Personal Information in a secure manner consistent with our internal Record Retention Policy.

Please see the section entitled "Accessing, Reviewing, Updating, Correcting or Deleting Your Personal Information" for information on requesting deletion of your Personal Information.

i. How We Share Personal Information We Collect With Service Providers

When you submit any information to us to use, interact with, or access our Services, we may forward the information you provided to our Service Providers in order to provide you with our Services. Our Services may also provide hyperlinks to websites, platforms, and services operated and owned by third parties, such as our Service Providers, and may include, among others, the Service Providers' features (e.g., apps, payment services, widgets). The information collected and stored by third parties, whether through our Service or directly by our Service Providers, remains subject to their own policies and practices, including what information they share with us, your choices on their services and devices. We are not responsible for and make no representations regarding third party policies and practices, and encourage you to familiarize yourself with and consult their privacy policies and terms of use. We have agreements in place with our Service Providers, which are designed to help safeguard your personal information. This means that the Service Providers cannot do anything with your personal information unless we have instructed them to do it. Service Providers will also not share your personal information with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct.

We share Personal Information with the below Service Providers:

Service Provider	Purpose	Privacy Documentation
Google Analytics	Analytics	policies.google.com/privacy
Bangor Savings Bank	Card Issuer	Bangor Savings Bank Privacy Notice
Postmark	Email Provider	activecampaign.com/legal/privacy-policy
Google Firebase	App hosting, digital infrastructure, SMS	firebase.google.com/support/privacy
Heroku	Hosting	salesforce.com/company/legal/privacy
SightX	Surveys, User Insights	sightx.io/privacy-statement
PinWheel	Account Onboarding	pinwheelapi.com/terms-and-policies
Plaid	Identity Verification, Bank interconnection	plaid.com/legal
Stripe	Payment Processing	stripe.com/privacy

Sharing with our bank partner. We share Personal Information with BSB, our bank partner and the issuer of Kasheesh virtual debit card numbers. The Personal Information we share with BSB may include your identity verification information, transaction information, and account activity, and is shared in order to provide the Services to you, satisfy customer identification and other regulatory requirements, prevent fraud, resolve disputes and errors, and support BSB’s oversight of the Kasheesh program. BSB’s treatment of your information is described in the Bangor Savings Bank Privacy Notice.

We do not sell your Personal Information to third parties, whether for monetary or other valuable consideration.

We may share with third parties aggregated demographic information collected on or through the Services for various purposes such as fan research and audience analysis. Aggregated demographic information does not include and is not linked to any Personal Information that can identify you or another individual person, but we may use your IP addresses to verify users’ locations for various purposes, including geographic restrictions.

j. How We Use Non-Personal Information

We may use and disclose, in our sole discretion, any non-Personal Information that does not alone or in combination with other information identify you, including, but not limited to, all anonymized and aggregated information, without restriction. Such use may include, but is not limited to, (1) analyzing requests; (2) tracking usage patterns; or (3) identifying usage barriers so that we may improve our Services and enhance our user experience.

IV. Communication Services and Community Features

a. Chat Rooms, Forums, and Message Boards

The Services may make chat rooms, forums, blogs, message boards, and other community features and activities available to you and other users. If you post Personal Information online, it will be publicly available and you may receive unsolicited messages from other parties. We cannot ensure the security of any information you choose to make public in a chat room, forum, or message board. Also, we cannot ensure that parties who have access to such publicly available information will respect your privacy. Please exercise caution when deciding to disclose Personal Information in these areas. We reserve the right (but assume no obligation) to review and/or monitor any such community areas on the Services.

b. Short Message Service (SMS)

We may make available a service through which you can receive messages on your wireless device via short message service ("SMS Service"). You understand that your wireless carrier's standard rates apply to these messages.

If you subscribe to one of our SMS Services, you may be required to register and provide Personal Information. We may also collect the date, time, and content of your messages in the course of your use of the SMS Service. We will use the information we obtain in connection with our SMS Service for the purpose of sending the SMS messages. If fees are charged to your wireless account invoice, we may provide your carrier with your applicable information to facilitate the transaction in connection therewith. Your wireless carrier and other service providers may also collect data about your wireless device usage, and their practices are governed by their own policies. We may also contact your carrier, which may access the content of your wireless account, for the purpose of identifying and resolving technical problems and/or Service-related complaints. We do not guarantee that your use of the SMS Service will be private or secure, and we are not liable to you for any lack of privacy or security you may experience. You are fully responsible for taking precautions and providing security measures best suited for your situation and intended use of the SMS Service. You may change your mind and unsubscribe to SMS Services at any time by following the instructions in the "All Users: Your Choices and Controls" section below.

V. All Users: Your Choices and Controls

You have various choices with respect to the collection of and certain of our uses of the Personal Information we collect from you on or through the Sites or Services. If you have not consented to us using your Personal Information as described in this Privacy Policy, we will only use it to complete the transaction or provide the service or product you have requested.

a. Accessing, Reviewing, Updating, Correcting or Deleting Your Personal Information

If you want to access, review, update, or correct inaccuracies in your Personal Information, or delete your Personal Information, you can:

email us at: privacy@kasheesh.co; or
write to us at Kasheesh Inc., 5 W. 20th Street, 4th Floor, New York, NY 10011, Attention: Privacy Requests.

Upon receiving your communication, we will take appropriate steps to update or correct such information in our possession, or to remove you from our contact list. Your preferences may include, for example, your profile information, as well as any address and account information (if applicable), as well as whether you want to receive communications from us. If you want us to delete the Personal Information we have (except for information that we keep for record-keeping purposes), you should contact us via email at: privacy@kasheesh.co. We may request certain Personal Information for the purposes of verifying the identity of the individual seeking access to their personal information records. We will also delete your information, as requested, provided that we may retain certain of your Personal Information for legal compliance purposes, including your transaction history and identity verification information collected during the account opening process (sometimes referred to as "Know Your Customer" or "KYC" information; this includes information such as your name, date of birth, address, and government-issued identification collected to verify your identity and comply with applicable financial regulations).

b. Opting Out of Direct Marketing and Other Advertising

If you have agreed to receive communications or solicitations from us, and you later change your mind, you can revise your preferences by contacting us at the address listed above, or via email at privacy@kasheesh.co. You also may opt out of receiving all future promotional e-mails from us by clicking on an opt-out or "unsubscribe" link within the promotional e-mail you receive.

Please understand that if you opt out of receiving promotional correspondence from us, we may still contact you in connection with updates to this Privacy Policy, the Terms, changes or updates to the Services, administrative issues related to your account, your use of the Services, your transactions or your communications with us.

You may also opt out of our SMS messages by texting "STOP" or another applicable keyword to the short code applicable to the particular SMS Service (as further described below).

If you have agreed to have us share your Personal Information with third parties so that they may contact you about promotions, offers and other information, you can revise your preferences by contacting us at the address listed above, or email us at privacy@kasheesh.co. If you do request to have us stop sharing your Personal Information with other entities for their direct marketing purposes, such request will only apply as of the date of your request, and we will not be responsible for any communications that you may receive from entities that received your Personal Information prior to such request. In these cases, please contact that entity directly or click on the opt-out or "unsubscribe" link that should be included within the promotional e-mail you receive from such third party.

You may opt-out of receiving ads from network advertisers by clicking the AdChoices icon on advertisements that are sent to you or visiting the opt-out pages at youradchoices.com/control/, and thenai.org/how-to-opt-out/advertising-privacy-settings-on-mobile-devices/. Opting out does not prevent you from seeing ads; it simply means that network advertisers will no longer collect data for the purpose of providing you targeted ads. The DAA and NAI opt-out tools are cookie-based. They signal network advertisers so that they do not collect data online or deliver specific ads targeting you, and only affect the Internet/web browser on the computer where the cookies are installed. These opt-out tools will only function if your browser is set to accept third-party cookies. If you delete an opt-out cookie or all your cookies from a browser's cookie files, change web browsers or change computers, you will no longer be opted out of our data collection and ad targeting, and we may place a new cookie unless an opt-out cookie is again reset on that browser. Opting out using one browser on one computer will not opt you out using any other browser on the same or another computer.

c. "Do Not Track" and Global Privacy Control

Your browser may offer you a "Do Not Track" ("DNT") option, which allows you to signal to operators of websites and web applications and services that you do not want them to track your online activities. California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

Your browser settings may allow you to automatically transmit a "Do Not Track" signal to online sites that you visit. We do not monitor or take action with respect to "Do Not Track" signals or other mechanisms. For more information on "Do Not Track," visit allaboutdnt.com.

Global Privacy Control. We are aware of the Global Privacy Control ("GPC") signal, a browser-level setting that allows consumers to signal their preference to opt out of the sale or sharing of their personal information. We are currently working to implement technical support for GPC signals on our website in accordance with applicable California privacy law requirements. In the meantime, if you are a California resident and wish to opt out of the sale or sharing of your Personal Information, please submit a request directly to us at privacy@kasheesh.co or through the choices described in this Privacy Policy, and we will honor your request promptly.

d. "Cookie Preferences"

Most browsers accept cookies, but you can change your browser settings to refuse cookies, disable existing ones or be notified when a new cookie is sent to your device. Similarly, some mobile operating systems, such as Android and iOS, enable you to opt out of the use of mobile advertising IDs for ads personalization. For your browser, you can generally find cookie preferences in your "settings" or "preferences" panel.

The following sites provide information on opting out of certain cookie practices:

VI. Data Security

We are committed to the protection of the information you provide to us or that we collect, including your Personal Information. We take reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Nevertheless, transmission via the internet, and storage of information on digital services, is not completely secure and we cannot guarantee the security of your information collected through our Service.

VII. Located in the United States

The Services and all e-mails, texts, administrative notices, and other communications from us are based in the United States and operate under U.S. law. Please be aware that the United States and its jurisdictions other than the one in which you are located may not provide the same level of data protection as is considered adequate in your country or jurisdiction. The information we collect is kept on servers in the U.S. and may be transferred to servers in other countries, subject to the terms of this Privacy Policy. We retain the Personal Information that we collect for so long as we continue to have a business purpose for it.

By accessing and using the Sites or Services, establishing an account, or making a purchase, you consent to the processing of your Personal Information as provided in this Privacy Policy.

As such, visitors and users of the Services located outside the United States should not use, interact with, or otherwise access the Services or engage in communication with us. We make no assurances or representations of any kind that the Services are suitable for use outside the U.S. or in the country in which you reside.

If you wish to object to or raise a complaint on how we have handled your Personal Information, you may contact us at Kasheesh Inc., 5 W. 20th Street, 4th Floor, New York, NY 10011, Attention: Privacy Requests, or email us at privacy@kasheesh.co.

If you are not satisfied with our response or believe our processing of your Personal Information is not in accordance with law, you may register a complaint with the appropriate governmental authority.

Kasheesh Inc. controls the Personal Information collected via the Sites and Services.

VIII. U.S. Privacy Rights

a. California's "Shine the Light" Law

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our customers who are California residents to request and obtain from us once a year, free of charge, information about the Personal Information we disclosed to third parties for direct marketing purposes in the preceding calendar year. If you are a California resident and would like a copy of this notice, please contact us at Kasheesh Inc., 5 W. 20th Street, 4th Floor, New York, NY 10011, Attention: Privacy Requests. Not all information sharing is covered by the "Shine The Light" requirements and only information on covered sharing will be included in our response. Under California law, businesses are only required to respond to a request once during any calendar year.

b. Your Rights In the US, Generally

You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. Depending on the state in which you live, these rights include:

Right to know whether or not we are processing your personal data;
Right to access your personal data;
Right to correct inaccuracies in your personal data;
Right to request the deletion of your personal data;
Right to obtain a copy of the personal data you previously shared with us;
Right to non-discrimination for exercising your rights;
Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California's privacy law), the sale of personal data, automated decision making or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling");
Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including California's and Delaware's privacy law);
Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including Oregon's privacy law);
Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including California's privacy law); and
Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including Florida's privacy law).

c. Right to Know

Depending upon the state where you live, you have the right to know and see what data we have collected about you over the past 12 months, including:

The categories of Personal Information we have collected about you;
The categories of sources from which the Personal Information is collected;
The business or commercial purpose for collecting your Personal Information;
The categories of third parties with whom we have shared your Personal Information; and
The specific pieces of Personal Information we have collected about you.

d. Right to Delete

Depending upon the state where you live, you have the right to request that we delete the Personal Information we have collected from you (and direct our Service Providers to do the same). There are a number of exceptions, however, that include, but are not limited to, when the information is necessary for us or a third party to do any of the following:

Complete a transaction you request;
Provide you a good or service;
Perform a contract between us and you;
Protect your security and prosecute those responsible for breaching it;
Fix our system in the case of a bug;
Protect the free speech rights of you or other users;
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.);
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interests that adheres to all other applicable ethics and privacy laws;
Comply with a legal obligation; or
Make other internal and lawful uses of the information that are compatible with the context in which you provided it.

e. Exercising Your Rights

To exercise your right to know or your right to delete, please submit a verifiable consumer request to us as indicated in the "Contact Us" section of this Privacy Policy. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may only make a verifiable consumer request to exercise your right to know twice within a 12-month period. The verifiable consumer request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

We will not discriminate against you for exercising any of your rights described above. Unless permitted by applicable law, we will not deny you goods or services; charge you different prices or rates for goods or services; provide you a different level or quality of goods or services; or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

f. Request Verification

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.

If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide a written and signed permission from you to submit such request on your behalf.

g. Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at privacy@kasheesh.co. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, depending on your state of residence, you may submit a complaint to your state attorney general.

IX. Financial Incentive Notice

Financial Incentives for California Consumers. From time to time, we may offer various types of financial incentives in exchange for your personal information, such as coupons, discounts, promotions, loyalty points, sweepstakes, contests, surveys, and other exclusive offers for consumers who sign up to receive our marketing emails, join loyalty or rewards programs or refer other users. The amount and terms of such offers will be presented to you at the time of the offer. When you participate in a financial incentive, we collect personal information from you, such as identifiers (like your email address) and commercial information (like your purchase history). Solely for purposes of California privacy law, we reasonably estimate the value of the discount, coupon, or other financial incentive that we offer to you to be equal to or greater than the value we receive from a consumer's Personal Information collected in connection with the offer. We reasonably estimate the value of a consumer's data by estimating the expenses related to the provision of each incentive program per consumer. We incur a variety of expenses for providing financial incentives, such as administrative and technical expenses associated with maintaining a loyalty program and costs associated with discounts on purchases. Participation in our financial incentives is voluntary. You may opt into a financial incentive by following the sign-up or participation instructions provided, and you have the ability to opt out by unsubscribing from our emails or closing your loyalty member account.

X. Links to Other Services

The Sites and Services may contain links to other websites and online services. When you link to such other sites and services (including by means of clicking on hyperlinks, logos, widgets, banners or advertisements), you become subject to their terms of use and privacy policies posted thereon and/or applicable thereto. Because we cannot control the activities of third parties, please note that we are not responsible for the privacy practices of third-party websites. We encourage you to be aware of this when you click on a link and leave the Sites, and to read the privacy policies of every website that collects Personal Information from you.

XI. Children's Privacy

The Services are not intended, targeted to, or advertised to children under 18 years of age and no one under the age of 18 may provide any Personal Information to, or through, the Services. If you are under 18 years of age, you are prohibited from using and/or providing any information on or through the Services, including without limitation, through any of its features. If you believe we might have any Personal Information from or about a minor under the age of 18, please contact us pursuant to the "Contact Us" Section of this Privacy Policy.

XII. Changes to the Privacy Policy

Kasheesh reserves the right to change, modify, or revise this Privacy Policy at any time to reflect changes in our practices for collecting, using, maintaining, and disclosing your information or to satisfy any legal requirements to which we may be subject. We will notify you of any such changes and those changes shall be effective immediately upon notice. We encourage you to regularly check this Privacy Policy so that you understand our current policies. The date at the top and bottom of this Privacy Policy indicates its last update.

XIII. Contact Us

If you have any comments or queries about this Privacy Policy or the way we collect and use your Personal Information, please call us at +1 (888) 283-1095, email us at privacy@kasheesh.co or write to us at:

Kasheesh Inc.
5 W. 20th Street
4th Floor
New York, NY 10011
Attention: Privacy Requests