7.2 Business Transfers

If MeltLogic is involved in a merger, acquisition, sale of assets, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your personal information becomes subject to a different privacy policy.

7.3 Legal Requirements

We may disclose your personal information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law or legal process; (b) respond to requests from public authorities; (c) protect the safety of any person; or (d) protect MeltLogic's legal rights.

7.4 With Your Consent

We may share your information with other third parties when you have given us explicit consent to do so.

7.5 Advertising — Important Clarification

MeltLogic does not share your personal information with third-party advertising networks for the purpose of serving you targeted advertisements on other websites, except as described in Section 6.2 regarding the Meta Pixel, which may result in MeltLogic ads being shown to you on Meta platforms based on your visit to our website. If you wish to opt out of this activity, please follow the instructions in Section 6.2.

8. U.S. State Privacy Rights

Depending on the state in which you reside, you may have specific privacy rights under applicable state law. The following rights may apply to you:

8.1 Applicable Laws

• California: California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)

• Virginia: Consumer Data Protection Act (CDPA)

• Colorado: Colorado Privacy Act (CPA)

• Texas: Texas Data Privacy and Security Act (TDPSA)

• Other state laws as enacted

8.2 Your Rights

To the extent required by applicable law, you have the right to:

• Know / Access: Request that we disclose the categories and specific pieces of personal information we have collected about you

• Correct: Request correction of inaccurate personal information we maintain about you

• Delete: Request deletion of your personal information, subject to certain exceptions

• Opt Out of Sale/Sharing: Opt out of the "sale" or "sharing" of your personal information for targeted advertising purposes

• Non-Discrimination: Not receive discriminatory treatment for exercising your privacy rights

• Portable Copy: Receive a portable copy of your personal information in a usable format

8.3 How to Exercise Your Rights

To exercise any of the rights above, contact us at:

• Email: support@meltlogic.io

• Subject line: "Privacy Rights Request"

We will respond to verified requests within 45 days, with the possibility of an extension of an additional 45 days where reasonably necessary. We will not charge a fee for processing your request unless it is manifestly unfounded or excessive. We may need to verify your identity before fulfilling your request.

8.4 Authorized Agent

California residents may designate an authorized agent to submit requests on their behalf. We may require written proof of the agent's authorization and may verify your identity directly.

8.5 California "Shine the Light" Law

California residents may request information about disclosures of their personal information to third parties for their own direct marketing purposes. MeltLogic does not share personal information with third parties for their own direct marketing purposes.

9. Canadian Privacy Rights

If you are a resident of Canada, your personal information is collected, used, and disclosed in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

9.1 Consent

We collect, use, and disclose your personal information with your knowledge and consent. In some cases, consent may be implied by your use of our Services (for example, providing your property address to enable weather-based automation). You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us at support@meltlogic.io. Withdrawing consent may mean we are unable to continue providing the Services.

9.2 Your Rights Under PIPEDA

You have the right to: (a) access your personal information; (b) correct inaccuracies in your personal information; and (c) withdraw consent, as described above. To exercise these rights, contact us at support@meltlogic.io.

9.3 Cross-Border Transfers

MeltLogic is based in the United States and stores data on servers located in the United States. By using our Services, Canadian residents acknowledge that their personal information will be transferred to and processed in the United States, where the laws may differ from those in Canada. We take reasonable contractual and organizational measures to protect your data during any such transfer.

10. Data Retention

We retain your personal information for as long as necessary to provide the Services and fulfill the purposes outlined in this Policy, subject to the following:

• Active account data: Retained for the duration of your account

• Closed accounts: Personal account data is deleted or anonymized within 12 months of account closure or subscription lapse

• Billing records: Retained for 7 years as required by tax and accounting laws

• Legal holds: Data subject to a legal hold will be retained for the duration of that hold regardless of the above schedules

• Aggregate and anonymized data: Not subject to deletion timelines as it does not identify any individual

Device telemetry and SDI model data associated with a closed account will be anonymized and may be retained in aggregate form beyond the 12-month window.

11. Account Deletion

You may request deletion of your MeltLogic account at any time through either of the following methods:

11.1 In-App Deletion

You can delete your account directly within the MeltLogic mobile application by navigating to: Profile > Account > Delete Account. Account deletion is permanent and irreversible. Upon deletion:

• Your personal account information (name, email, property data) will be scheduled for deletion within 30 days

• Active subscriptions purchased through Apple or Google will not be automatically cancelled — you must separately cancel through the relevant App Store to stop future charges

• Aggregate, anonymized data derived from your usage may be retained as described in Section 10

11.2 Deletion by Request

You may also request account deletion by emailing support@meltlogic.io with the subject line "Account Deletion Request." We will process your request within 30 days and confirm completion.

Note for Apple App Store users: Per Apple App Store Guidelines (Guideline 5.1.1), MeltLogic provides the ability to initiate account deletion from within the application. This is an in-app function, not solely a web-based process.

12. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS/HTTPS

• Encryption of sensitive data at rest

• Access controls limiting employee and contractor access to personal information on a need-to-know basis

• Secure storage of API keys and credentials (file-system level access controls on production servers)

• Regular security reviews of our infrastructure

No method of electronic transmission or storage is 100% secure. While we use commercially reasonable means to protect your information, we cannot guarantee absolute security. If we become aware of a data breach that is likely to affect your rights and freedoms, we will notify you and applicable regulators as required by law.

13. Children's Privacy

The MeltLogic Services are not directed to children under the age of 18 and we do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@meltlogic.io and we will promptly delete the information.

We do not knowingly collect personal information from children under 13 years of age, consistent with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13, we will delete it immediately.

14. Marketing Communications

We may, in the future, send you promotional emails, product updates, and newsletters. Before we do so, we will obtain your consent where required by applicable law. You will always have the ability to:

• Opt in to marketing emails at account creation or through your account settings

• Opt out at any time by clicking the "Unsubscribe" link in any marketing email

• Update your communication preferences at support@meltlogic.io

Opting out of marketing emails will not affect transactional or operational emails related to your account and subscription (such as password resets, billing confirmations, or controller status alerts).

15. Push Notifications

The MeltLogic mobile application may request permission to send push notifications to your device. Push notifications are used to alert you to heater activation events, system status changes, and weather-triggered automation decisions.

• You may grant or deny permission when first prompted by the application

• You may change your push notification preferences at any time in your device's system settings (iOS: Settings > MeltLogic > Notifications; Android: Settings > Apps > MeltLogic > Notifications)

• Disabling push notifications will not affect the operation of the automation system itself

16. Third-Party Links and Services

Our website and app may contain links to third-party websites or integrate with third-party services (including the Tuya hardware platform). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through our platform. MeltLogic is not responsible for the privacy practices of third parties.

17. Legal Basis for Processing

Although MeltLogic currently serves users in the United States and Canada, we disclose our legal bases for processing in the event future operations are subject to GDPR or similar frameworks:

• Contract performance: Processing necessary to deliver the Services you subscribed to (account management, automation, device communication)

• Consent: Analytics and marketing communications, where consent is obtained

• Legitimate interests: Security, fraud prevention, system improvement, and aggregate model training — balanced against your privacy interests

• Legal obligation: Retention of billing records and compliance with applicable law

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated policy on our website with a new "Last Updated" date

• Send an email notification to your registered email address

• Display an in-app notice at your next login

Your continued use of the Services after the effective date of the revised policy constitutes your acceptance of the changes. If you do not agree with the changes, you should discontinue use of the Services and may request account deletion as described in Section 11.

19. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: support@meltlogic.io (Subject: "Privacy Policy Inquiry")

• Mailing Address: MeltLogic LLC, N5211 2nd St., Spooner, Wisconsin 54801, USA

We will respond to all legitimate privacy inquiries within 30 days.