Qu POS, Inc. ("Qu," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us through our website.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit www.qubeyond.com or otherwise interact with our website, including when you contact us, request information, or engage with our marketing content.

Scope

This Privacy Policy applies to personal information collected through our public-facing website and related online interactions that link to this Privacy Policy.

This Privacy Policy does not apply to:

• Information processed on behalf of our customers through Qu products and services, where separate contractual terms may apply; or
• Third-party websites, platforms, or services that may be linked from our website and are governed by their own privacy policies.

What We Collect

We get information about you in a range of ways.

Information You Provide Directly:

• your name
• email address
• phone number
• company name
• job title (voluntary disclosure)
• any other information you choose to submit through forms, demo requests, contact requests, or other communications with us

Information We Collect Automatically‍

• IP address
• browser type and version
• device type and operating system
• referring website
• pages viewed and time spent on pages
• dates and times of visits
• clicks and navigation behavior
• approximate geolocation derived from IP address\
• other usage and diagnostic information

Information From Other Sources - We may receive information about you from other sources, such as:

• marketing or event partners
• public business sources
• professional networking sites
• analytics providers
• service providers that support our website and marketing operations

We may also collect information that does not identify you directly, such as aggregated or de-identified information, and we may maintain and use such information in accordance with applicable law.

How We Use Information

We may use personal information collected through the website for the following purposes:

• to operate, maintain, and improve our website
• to respond to inquiries and provide requested information
• to schedule demos or follow up on requests
• to communicate with you about our products, services, events, updates, or promotions
• to better understand visitor interest and website engagement
• to personalize website content and improve user experience
• to support analytics and marketing activities, including measuring the effectiveness of our advertising
• to protect the security and integrity of our website and systems
• to detect, investigate, and prevent fraud, misuse, or other unlawful activity
• to comply with legal obligations and enforce our rights
• We do not use personal information collected through this website to train generative artificial intelligence or large language models.

Cookies and Similar Technologies

How We Use Cookies

We use cookies and similar technologies to collect information automatically from visitors to our website. Cookies are small data files stored on your device by a website. We use both session cookies, which expire once you close your web browser, and persistent cookies, which remain on your device until you delete them or they expire. These technologies may be used to keep the website functioning properly, understand how visitors use the website, improve performance and usability, and support analytics and advertising activities.

Categories of Cookies We Use

The table below describes the categories of cookies and tracking technologies used on this website:

Managing Your Cookie Preferences

You can control cookies in the following ways:

• Cookie Preference Tool: You may manage non-essential cookies (Functional, Analytics, and Advertising/Tracking categories) through the cookie preference tool available on our website at any time.
• Browser Settings: You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.
• LinkedIn Opt-Out: You may opt out of LinkedIn's advertising cookies directly at linkedin.com/psettings/.

5. How We Share Information

5. How We Share Information

5. How We Share Information

How We Share Information

Service Providers

We may share information with vendors, contractors, and service providers that help us operate our website, host content, manage communications, perform analytics, support marketing efforts, or otherwise provide services on our behalf. These providers are contractually required to use information only as directed by us and in a manner consistent with this Privacy Policy.

Affiliates and Corporate Transactions

We may share information with our affiliates or in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction.

Legal Compliance and Protection

We may disclose information when we believe it is necessary to:

• comply with applicable law, regulation, legal process, or governmental request
• protect our rights, safety, or property
• protect the rights, safety, or property of others
• investigate or prevent fraud, misuse, or security issues

With Your Direction or Consent

We may share information with third parties where you direct us to do so or otherwise consent.

Advertising Technologies

We use the LinkedIn Insights Tag on our website, which enables LinkedIn Corporation to collect information about visitors for purposes of measuring advertising effectiveness and enabling interest-based advertising on LinkedIn's platform. This may constitute sharing of personal information for cross-context behavioral advertising under applicable law. See Section 6 for our disclosure regarding this activity and Section 10 for California residents' opt-out rights.

6. We Do Not Sell Personal Information

We Do Not Sell Personal Information

Qu does not sell personal information collected through this website for monetary consideration. Our website is a B2B marketing website; any processing of personal data is conducted solely to support Qu's business operations and marketing activities, not to monetize visitor data.

We may use the LinkedIn Insights Tag, which shares certain visitor data with LinkedIn Corporation for cross-context behavioral advertising purposes. This activity does not involve monetary exchange but may constitute "sharing" under California law. California residents may opt out of this sharing as described in Section 10.

Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including:

• providing requested information and maintaining business and communication records
• improving and securing our website
• complying with legal, tax, accounting, or regulatory obligations
• resolving disputes and enforcing agreements

The specific retention period depends on the nature of the information and the purpose for which it was collected.

Data Security

We take reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Your Privacy Rights

Depending on where you reside and subject to applicable exceptions, you may have certain rights regarding your personal information. These may include the right to:

• confirm whether we process your personal information
• request access to personal information we hold about you
• request correction of inaccurate personal information
• request deletion of personal information
• obtain a copy of certain personal information in a portable format
• opt out of certain processing activities where required by applicable law

To exercise any applicable privacy rights, please contact us using the information in Section 16. We may need to verify your identity before responding to certain requests. For requests to know, access, delete, or correct personal information, we will ask you to provide sufficient information to confirm your identity based on information we have on file. The specific verification steps will depend on the nature of the request and the sensitivity of the information involved.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), subject to certain exceptions. These rights include:

• Right to Know: You have the right to know the categories and specific pieces of personal information we have collected about you, the purposes for which it is used, the categories of sources from which it was collected, and the categories of third parties with whom it is shared.
• Right to Access: You have the right to request access to the personal information we hold about you.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Data Portability: You have the right to obtain a copy of your personal information in a portable and usable format.
• Right to Opt Out of Sale: Qu does not sell personal information for monetary consideration.
• Right to Opt Out of Sharing: You have the right to opt out of the sharing of your personal information for cross-context behavioral advertising. We use the LinkedIn Insights Tag, which may constitute sharing under CCPA. To opt out, click the "Do Not Sell or Share My Personal Information" link on our website, use the cookie preference tool, contact us at the address in Section 16, or opt out directly with LinkedIn at linkedin.com/psettings/.
• Right to Limit Use of Sensitive Personal Information: To the extent we process sensitive personal information as defined under CPRA, you may have the right to limit such use to purposes permitted by law. We do not intentionally collect sensitive personal information through this website. If sensitive personal information is inadvertently provided by a user through free-text form fields or other communications, we will process it only for the purpose for which it was submitted.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA/CPRA privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised a privacy right.
• Right to Appeal: If we decline to take action on your privacy request, you have the right to appeal that decision. To submit an appeal, please contact us using the information in Section 16. We will respond to your appeal within the timeframes required by applicable law.
• Authorized Agents: You may designate an authorized agent to submit a privacy request on your behalf. To do so, you must provide the authorized agent with written permission to act on your behalf, and we may require you to verify your identity directly with us and confirm that you provided the agent with permission to submit the request.

Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals as a valid opt-out request for the sharing of personal information for cross-context behavioral advertising and targeted advertising. If your browser or device transmits a GPC signal to our website, we will treat it as a request to opt out of sharing and targeted advertising, consistent with applicable state law.

Do Not Track (DNT)

Our website does not respond to Do Not Track browser signals, as there is no universally adopted standard for interpreting or responding to such signals. For information about how we respond to Global Privacy Control (GPC) signals, see above.

To exercise your California privacy rights, please contact us using the information in Section 16. We will respond within the timeframes required by applicable law.

Categories of Personal Information Collected, Disclosed, and Shared

The following describes the categories of personal information (as defined by the CCPA) that we have collected through this website in the preceding 12 months, together with the sources, purposes, and categories of third parties to whom each category is disclosed or shared.

We have not collected the following categories of personal information through this website in the preceding 12 months: protected classification characteristics (Category C), biometric information (Category E), sensory data (Category H), non-public education information (Category J), or sensitive personal information as defined under CPRA.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

We retain each category of personal information for as long as reasonably necessary to fulfill the purposes described above, consistent with the criteria described in Section 7 of this Privacy Policy.

Additional U.S. State Privacy Rights

Certain U.S. states have enacted comprehensive consumer privacy laws that may grant residents rights regarding personal information collected about them. As of the date of this Privacy Policy, these states include, but may not be limited to, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. To the extent these laws apply to our processing of your personal information, you may have some or all of the following rights, subject to applicable thresholds, exemptions, and exceptions:

• Right to Confirm and Access: You may have the right to confirm whether we process your personal data and to access the personal data we hold about you.
• Right to Correct: You may have the right to request correction of inaccuracies in your personal data. Note: this right is not available under Iowa's ICDPA.
• Right to Delete: You may have the right to request deletion of personal data we have collected from you, subject to certain exceptions.
• Right to Data Portability: You may have the right to obtain a copy of your personal data in a portable and, where technically feasible, readily usable format.
• Right to Opt Out of Targeted Advertising: You may have the right to opt out of the processing of your personal data for purposes of targeted advertising.
• Right to Opt Out of Sale: You may have the right to opt out of the sale of your personal data. Qu does not sell personal data for monetary consideration.
• Right to Opt Out of Profiling: Where applicable under your state's law, you may have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. Note: this right is not available under Iowa's ICDPA or Utah's UCPA.

To exercise any of these rights, or to appeal a decision, contact us via Section 16.

Canadian Visitors

Qu's customers include organizations located in Canada, excluding Quebec. If personal information is collected from individuals in Canada through this website, Qu will handle that information in accordance with applicable Canadian federal privacy requirements, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable provincial laws relevant to our operations. Under PIPEDA, you may have the right to access and request correction of personal information we hold about you, withdraw your consent to our processing of your personal information, and file a complaint with the Office of the Privacy Commissioner of Canada. To exercise any of these rights, please contact us using the information in Section 16.

Personal information collected from Canadian visitors through this website is transferred to and processed in the United States, where it may be accessible to U.S. courts, law enforcement, and government authorities under applicable U.S. law. We use contractual and other measures to protect personal information transferred across borders in accordance with applicable privacy requirements.

Our website and business are not directed specifically at residents of Quebec.

Children's Privacy

13. Children's Privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the website. If you believe that a child has provided personal information to us, please contact us so that we can take appropriate steps.

14. Third-Party Links and Social Media

Third-Party Links

Our website may contain links to third-party websites or services, and may include features that allow you to share content via third-party social networking websites and products. We are not responsible for the privacy, security, or content of those third parties, and their privacy policies govern their data practices. We encourage you to review the privacy policies of any third-party website before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Any changes will become effective when posted unless otherwise stated. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have questions about this Privacy Policy or would like to exercise applicable privacy rights, please contact us at:

• Chief Marketing Officer, Jen Kern, jkern@qubeyond.com

• Privacy Officer, Nazim Lokhandwala, nlokhandwala@qubeyond.com

You may also write to us at: Qu POS, Inc., Attn: Privacy Officer, 1100 Wilson Blvd, Suite 2920, Arlington, Virginia 22209.