WEBOX PRIVACY POLICY

PLEASE READ THE FOLLOWING PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING OUR SITES AND OUR SERVICES, YOU HEREBY AGREE TO BE BOUND BY THE TERMS AND ALL TERMS INCORPORATED HEREIN BY REFERENCE. IT IS THE RESPONSIBILITY OF YOU, THE USER, CUSTOMER, OR PROSPECTIVE CUSTOMER TO READ THE PRIVACY POLICY BEFORE PROCEEDING TO USE THIS SITE. IF YOU DO NOT EXPRESSLY AGREE TO ALL OF THE TERMS AND CONDITIONS, THEN PLEASE DO NOT ACCESS OR USE OUR SITES OR OUR SERVICES. THIS PRIVACY POLICY IS EFFECTIVE AS OF 01/07/2026.

LAST UPDATED: JANUARY 7, 2026

This Privacy Policy is issued by WeBox Inc (“WeBox”, “we”, “our”, or “us”). We are committed to protecting your privacy and handling your personal information in a transparent, secure, and compliant way. This Policy explains how we collect, use, share, and safeguard your information when you interact with WeBox services. By using our services, you confirm that you have read and agree to this Privacy Policy.

SCOPE This Policy applies to all services operated by WeBox Inc, including www.webox.com, WeBox iOS and Android applications, courier and delivery systems, and other services linked to this Policy.

1. INFORMATION WE COLLECT WeBox collects the following categories of information:

Notice at Collection (California Residents): This section serves as WeBox’s “Notice at Collection” under the California Consumer Privacy Act (CCPA/CPRA). We collect information for the business purposes described in Section 2. In the preceding 12 months, WeBox has not sold or shared your personal information with third parties for cross-context behavioral advertising.

• Information You Provide: Including your name, phone number, delivery address, email, profile details, and photos.
• Sensitive Personal Information: We collect precise geolocation data from your device to provide delivery services. We only use this sensitive information to perform the services requested by you (e.g., delivering your order) and do not use it for purposes that would require a “Limit the Use of My Sensitive Personal Information” option under California law.
• Payment Information: Processed securely by third-party providers (e.g., Stripe). We only store limited identifiers like the last four digits of a card.
• Automatically Collected Information: Includes IP address, device ID, and analytics data for security and performance.

2. HOW WE USE INFORMATION We use your information to:

• Provide and manage delivery services and account functions.
• Offer customer support and prevent fraud.
• Personalized Recommendations: We use your activity within the WeBox platform to suggest dishes or promotions. This personalization is based solely on your internal activity and does not involve third-party cross-site tracking.

3. COOKIES & TRACKING TECHNOLOGIES We use strictly necessary and functional cookies for secure login and session continuity. We use Analytics Cookies (Google Analytics) to improve performance. You may opt out via browser settings or the Global Privacy Control (GPC) signal.

4. HOW WE SHARE INFORMATION We may share information with service providers (payment processors, cloud hosting) solely to support our operations. WeBox does not sell your personal information.

5. DATA RETENTION & DELETION We retain data as long as your account is active or as required by law (typically 3–7 years for transaction records). Deletion requests are processed within 30–45 days.

6. YOUR RIGHTS (CALIFORNIA & GDPR) Depending on your location, you have the following rights:

• Right to Know/Access: Request the categories and specific pieces of data we collect.
• Right to Delete: Request deletion of your personal information.
• Right to Correct: Request correction of inaccurate information.
• Right to Opt-Out: WeBox does not sell your data; however, we honor GPC signals.
• Right to Non-Discrimination: We will not discriminate against you (e.g., deny services or charge different prices) for exercising any of your privacy rights.

To exercise these rights, please contact us at support@webox.com or call (408) 685-2000.

7. CHILDREN’S PRIVACY WeBox is not directed to children under 13. We do not knowingly collect personal information from children under 13.

8. CROSS-BORDER TRANSFERS WeBox may transfer personal information to the U.S. using appropriate safeguards such as Standard Contractual Clauses.

9. POLICY UPDATES We may update this Policy periodically. Continued use of our services after updates indicates acceptance.

VIOLATIONS Please report any and all violations of this Privacy Policy to WeBox as follows:

Mailing Address: WeBox Inc 2300 Zanker Rd, Unit A San Jose, California 95131

Telephone: (408) 685-2000

Email: support@webox.com