Your Privacy and Data Security

LAST UPDATED: 10th April, 2026

1. INTRODUCTION. Comic Social Ltd (“Comic Social,” “Company,” “we,” “us,” or “our”) operates the Comic Social mobile application (the “App”), the website located at www.comicsocialapp.com (the “Site”), and any and all related services, features, and content (collectively, the App, Site or any and all related services, features, content, or functionality are referred to herein as the “Services”). This Privacy Policy (the “Privacy Policy”) describes how we collect, use, disclose, and protect your information.

This Privacy Policy constitutes a legally binding agreement between you (“you,” “your,” or “User”) and Comic Social Ltd (“Comic Social,” “Company,” “we,” “us,” or “our”). If you are accessing and/or using our Services for an entity, such as the company you work for, you represent that you have authority to bind that entity to this Privacy Policy, and you agree that “you,” and “your,” and “User” as used in this Privacy Policy includes both you personally and the entity you represent. If you are accessing our Services on behalf of only yourself as an individual, then you agree that “you,” and “your,” and “User” as used in this Privacy Policy includes only you personally as an individual.

BY ACCESSING, DOWNLOADING, INSTALLING, OR USING THE SERVICES IN ANY MANNER, YOU ACKNOWLEDGE THAT YOU HAVE READ, FAMILIARIZED, UNDERSTOOD, AND AGREE TO BE BOUND BY THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MUST IMMEDIATELY CEASE ALL USE OF THE SERVICES. YOUR CONTINUED USE OF THE SERVICES FOLLOWING THE POSTING OF ANY AMENDMENTS TO THIS PRIVACY POLICY SHALL CONSTITUTE YOUR ACCEPTANCE OF SUCH AMENDMENTS.

This Privacy Policy applies to all information collected through our Services, regardless of the device or method used to access them. This Privacy Policy does not apply to information collected by third parties, including but not limited to information collected by third parties through any application or content that may link to or be accessible from the Services.

2. DEFINITIONS

• “Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

• “Processing” means any operation or set of operations performed on Personal Information, including but not limited to collection, recording, organization, structuring, storage, adaptation,

alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination,

restriction, erasure, or destruction.

• “Service Provider” means a legal entity that processes Personal Information on behalf of

Comic Social pursuant to a written contract.

• “Device Identifier” means a unique string of characters assigned to or derived from your device, including but not limited to device fingerprints, advertising identifiers, and hardware identifiers.

3. INFORMATION WE COLLECT

3.1 Personal Information You Provide Directly. When you create an account or otherwise interact with the Services, we may collect:

• Information You Provide: Information you voluntarily provide to us

• Account Registration Information: first name, last name, email address, username, password.

• Profile Information: profile photographs, photographs, images, media

• Communication Data: name, email address, and message content submitted through our

contact forms, as well as any correspondence you direct to our customer support channels

• Payment Information: subscription selections, payment data and billing preferences (note: payment card details are processed directly by our third-party payment processor and are not stored on our servers)

3.2 Information Collected Automatically. When you access or use the Services, we may automatically collect:

• Location Data: precise GPS coordinates (with your consent); ZIP code-derived geographic coordinates. You may withdraw your consent to these location-based features of the Services by disabling the geolocation function on your mobile device. Please note that withdrawing consent may limit or eliminate certain functionality of the Services

• Device Information: device type, operating system, operating system version, unique Device Identifiers, platform, App version, mobile network information, system timezone, firebase installation ID, Android ID, and user-agent strings

• Device Fingerprint: we may utilize device fingerprinting technology to generate a unique Device Identifier based on your browser and device attributes (including but not limited to browser type, installed plugins, screen resolution, and hardware characteristics) for fraud prevention and security purposes

• Usage Data: search queries, interactions, pages and screens visited, features utilized, favorites saved, in-app activities, and navigation patterns

• Log Data: Internet Protocol (IP) address, browser type and version, referring/exit pages, date/time stamps, clickstream data, and diagnostic information

• Local Storage Data: authentication tokens and session identifiers stored on your device via browser local storage mechanisms

• Push Notification Tokens: unique device tokens required for the delivery of push notifications to your device

3.3 Information from Third-Party Sources. We may receive information about you from third-party sources, including but not limited to:

• Authentication Providers: account verification data from our authentication infrastructure provider

• Analytics Platforms: aggregated and individual usage metrics from our product analytics platform

• Payment Processors: transaction confirmation data, subscription status, and billing events from Apple App Store and/or Google Play in-app purchase systems

• Bot Detection Services: risk assessment scores and verification tokens

4. LEGAL BASES FOR PROCESSING (APPLICABLE JURISDICTIONS). Where required by applicable law, we process your Personal Information on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of our contract with you, including but not limited to account creation, service delivery, user interactions, and subscription management.

• Consent: Where you have provided explicit, informed, and freely given consent, including but not limited to for precise location data collection, push notification delivery, and marketing communications. You may withdraw consent at any time as described in Section 9.

• Legitimate Interests: Processing necessary for our legitimate business interests, provided such interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include but are not limited to fraud prevention, Services improvement, analytics, security, and enforcement of our terms.

• Legal Obligation: Processing necessary for compliance with applicable legal requirements, including but not limited to tax obligations, regulatory mandates, law enforcement requests, and litigation preservation duties.

5. HOW WE USE YOUR INFORMATION

5.1 Services Provision and Operations.

• Create, maintain, and administer your account

• Facilitate connections between users and other users

• Process and manage subscriptions through Apple App Store and Google Play in-app purchases

• Provide location-based discovery, marketing and recommendations

• Deliver push notifications regarding events, and Services updates

• Enable contact form submissions and customer support communications

• Authenticate your identity and manage session security 

5.2 Security and Fraud Prevention.

• Verify human interaction and prevent automated abuse

• Detect and prevent fraudulent activity, unauthorized access, and other illegal activities

• Monitor and analyze patterns of suspicious behavior

• Protect the integrity, security, and availability of the Services

5.3 Analytics and Improvement.

• Analyze usage patterns, trends, and user behavior including, but not limited to through analytics

• Conduct session recording and replay analysis to identify usability issues

• Evaluate feature adoption and the effectiveness of Services improvements

• Conduct A/B testing and feature flag experimentation

• Perform research and analysis for product development and business planning

5.4 Communications.

• Send Services-related notices, including but not limited to account verification emails, password reset communications, and subscription confirmations

• Deliver push notifications about events, promotions and Services updates

• Provide customer support and respond to inquiries submitted through our support email

• Send marketing and promotional communications (with your prior consent, where required by law)

5.5 Legal Compliance and Protection.

• Comply with applicable laws, regulations, legal processes, and governmental requests

• Enforce our Terms of Use, this Privacy Policy, and other agreements

• Protect the rights, property, and safety of Comic Social, the Services, our users and the public

• Investigate and address potential violations of our policies or applicable law

6. HOW WE SHARE YOUR INFORMATION. Comic Social does not sell, rent, or trade your Personal Information to third parties for their own marketing purposes. However, we may disclose your information in the following circumstances:

6.1 Service Providers and Processors. We may engage third-party Service Providers to perform functions on our behalf, subject to contractual obligations of confidentiality and data protection:

• authentication, database hosting, and backend infrastructure

• Apple App Store — in-app purchase processing and subscription management for iOS devices (Apple's processing of payment data is governed by Apple's Privacy Policy at https://www.apple.com/legal/privacy/)

• Google Play — in-app purchase processing and subscription management for Android devices (Google's processing of payment data is governed by Google's Privacy Policy at https://policies.google.com/privacy)

• product analytics, session recording, and user behavior analysis
• bot detection and abuse prevention
• Push Notification Services — device token management and push notification delivery infrastructure

• Fraud Prevention Services for security and abuse prevention

6.2 Third-Parties. When you interact with third-parties on the platform, certain information may be shared with those third-parties to facilitate the Services. We do not share your precise location, contact information, or payment details with third-parties without your explicit consent.

6.3 Legal and Regulatory Disclosures. We may disclose your information without your consent where we have a good-faith belief that disclosure is necessary to:

• Comply with applicable laws, regulations, or legal processes, including subpoenas, court orders, or governmental requests

• Enforce our Terms of Use, this Privacy Policy, or other contractual obligations

• Protect the rights, property, or safety of Comic Social, our users, or the public

• Detect, investigate, prevent, or address fraud, security, or technical issues

6.4 Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, dissolution, asset sale, financing or similar corporate transaction, your Personal Information may be transferred, sold, or otherwise disclosed to the successor entity. We will use reasonable efforts to direct the transferee to use your Personal Information in a manner consistent with this Policy. In such event, you will be notified via email and/or a prominent notice on our Services of any change in ownership or uses of your Personal Information, as well as any choices you may have regarding your Personal Information.

6.5 With Your Consent. We may share your Personal Information for purposes not described in this Policy with your express, informed consent, including but not limited to fulfill requests from you.

6.6 Aggregated and De-Identified Data. We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

7. DATA RETENTION. We retain your Personal Information for as long as reasonably necessary to fulfill the purposes for which it was collected, including but not limited to:

• Active Account Data: retained for the duration of your account's existence and active use of the Services

• Transaction and Subscription Records: retained for a minimum of seven (7) years following the transaction date, as required by applicable tax and financial regulations

• Communication Records: contact form submissions and customer support correspondence retained for three (3) years from the date of submission

• Usage and Analytics Data: retained in identifiable form for up to twenty-four (24) months, after which it is aggregated or anonymized

• Security and Fraud Prevention Data: device fingerprints and security logs retained for up to thirty-six (36) months

• Authentication Logs: retained for twelve (12) months from the date of the session

Upon account deletion, we will delete or anonymize your Personal Information within thirty (30) calendar days, except where retention is required by applicable law, necessary for the establishment, exercise, or defense of legal claims, or required for our legitimate business interests (e.g., fraud prevention). Cached or archived copies of your information may persist in non-public backup systems for up to ninety (90) days following deletion.

8. DATA SECURITY. We implement and maintain commercially reasonable administrative, technical, organizational, and physical security measures designed to protect your Personal Information from unauthorized access, use, alteration, disclosure, and destruction. These measures include, without limitation:

• Encryption of data in transit using TLS/SSL protocols and encryption of data at rest
• Secure password hashing algorithms for credential storage
• Role-based access controls and principle of least privilege
• Regular security assessments, vulnerability scanning, and penetration testing
• Incident response and data breach notification procedures
• Employee and contractor confidentiality obligations and security training

NOTWITHSTANDING THE FOREGOING, NO METHOD OF ELECTRONIC TRANSMISSION OR STORAGE IS COMPLETELY SECURE, PERFECT OR IMPENETRABLE AND WE CANNOT AND DO NOT PROMISE OR GUARANTEE THE ABSOLUTE SECURITY OF YOUR PERSONAL INFORMATION. ANY TRANSMISSION OF PERSONAL INFORMATION IS AT YOUR OWN RISK. YOU ARE RESPONSIBLE FOR

MAINTAINING THE CONFIDENTIALITY OF YOUR ACCOUNT CREDENTIALS AND FOR ALL ACTIVITIES THAT OCCUR UNDER YOUR ACCOUNT. YOU SHOULD ONLY ACCESS THE SERVICES WITHIN A SECURE ENVIRONMENT. YOU AGREE TO IMMEDIATELY NOTIFY US IMMEDIATELY OF ANY UNAUTHORIZED USE OF YOUR ACCOUNT OR ANY OTHER BREACH OF SECURITY.

9. YOUR RIGHTS AND CHOICES

9.1 Access and Correction. You may access and update your Personal Information through your account settings within the App. You may also submit a verifiable request to access the specific pieces of Personal Information we hold about you by contacting us as described in Section 21.

9.2 Data Portability. You have the right to request a copy of your Personal Information in a structured, commonly used, and machine-readable format (e.g., JSON or CSV).

9.3 Deletion. You may request deletion of your account and Personal Information through the App or by visiting our Delete My Data page. You may also submit a deletion request by contacting us as described in Section 21. Note that we may retain certain information as required by law or as described in Section 7.

9.4 Restriction and Objection. Where permitted by applicable law, you have the right to request restriction of processing of your Personal Information and to object to processing based on our legitimate interests. Where required by applicable law, we will review and respond to such requests.

9.5 Consent Withdrawal. Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Withdrawal of consent may limit the functionality of the Services available to you.

9.6 Marketing and Push Notification Opt-Out. You may opt out of marketing communications by:

• Adjusting notification preferences in the App's settings
• Using the unsubscribe mechanism included in marketing emails
• Texting STOP in response to SMS marketing messages
• Disabling push notifications through your device's operating system settings

9.7 Location Services. You may disable precise location services at any time through your device's operating system settings. Disabling location services may limit the functionality of the Services, including but not limited to the ability to discover nearby Vendors.

9.8 Do Not Track Signals. The Services do not currently respond to “Do Not Track” (DNT) browser signals or similar mechanisms, as there is no industry-accepted standard for DNT signal interpretation.

9.9 Exercising Your Rights. To exercise any of the rights described in this Section, please contact us as described in Section 21. We may require you to verify your identity before processing your request. We will respond to verifiable requests within the timeframes required by applicable law. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

You can also designate an authorized agent to make a request on your behalf. If you use an authorized agent, please include written permission that you have designated that agent to make the request, or proof of the agent’s power of attorney. We may follow up with you to verify your identity before processing your authorized agent’s request.

If you are a resident of certain jurisdictions, then please see your additional rights listed in Section 14.

10. COOKIES POLICY, LOCAL STORAGE, AND TRACKING TECHNOLOGIES

10.1 Overview. We and our third-party Service Providers use the following technologies to collect information:

• Cookies: small data files placed on your device to remember preferences, authenticate sessions, and analyze usage patterns. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted or expired)

• Local Storage: the Services use browser local storage to persist authentication tokens (access tokens and refresh tokens) and session data on your device. This data is essential for maintaining your authenticated session and is not transmitted to third parties

• Web Beacons and Pixels: small electronic images used to monitor user engagement and deliver analytics data

• Device Fingerprinting: we generate a unique identifier from your browser and device attributes (including but not limited to browser type, installed plugins, screen resolution, and hardware characteristics) for fraud detection purposes

• reCAPTCHA Tokens: this operates in the background to assess the risk of interactions and may collect hardware and software information, browser data, and interaction patterns

10.2 Cookies Policy. By continuing to use the Services you are agreeing to the use of cookies and other similar technologies for the purposes we describe in this Cookies Policy.

The Services uses both first party cookies which are set directly by us and third party cookies which are set by third parties. We use first party and third party cookies for several reasons. Some cookies are required for technical reasons in order for the Services to operate, and we refer to these as “Strictly Necessary” cookies. Some cookies allow us to measure and improve the performance of the Services, such as by counting visits and traffic sources, and we refer to these as “Performance” cookies. Some cookies enable us to provide enhanced functionality and personalization of the Services, and we refer to these as “Functional” cookies. The specific types of cookies served through the Services and the purposes they perform are described below:

• Strictly Necessary Cookies: These cookies enable you to navigate the Services and to use their services and features. These cookies are necessary for the Services to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, authenticating users, or logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the Services will not work.

• Performance Cookies: These cookies and other technologies improve your experience by enabling personalization (for example, remembering if you have logged into the Services before), as well as enabling certain features. Performance cookies may also help you fill out forms in the Services more easily.

• Functional Cookies: These cookies and other technologies help us learn how well the Services are performing. We use these cookies to understand, improve, and research the Services.

• Unclassified: Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.

You may manage cookie preferences through your browser settings. Clearing cookies and local storage will terminate your authenticated session and require you to log in again. Certain tracking technologies are essential for the Services to function and cannot be disabled without impairing core functionality. In addition, you may: (1) delete your cookies (see below for information on deleting cookies); and then (2) refresh the web page. If you do not agree to the use of cookies, you also may disable or delete the cookies by following the instructions for your browser(s) set out at http://www.allaboutcookies.org/manage-cookies/index.html. Please note that the Services will not function well if cookies are disabled. It may also stop you from saving customized settings, like login information or a multitude of other critical functions. You may download a browser extension that will help preserve the opt-out preferences you set by visiting www.aboutads.info/PMC.

11. THIRD-PARTY ANALYTICS AND SERVICES. We may use analytics platforms to collect and process data on our behalf to help us understand user behavior, improve the Services, and optimize user experience. These analytics platforms may collect:

• Device Identifiers and technical information
• App usage data, screen views, and interaction events
• User session recordings and interaction replays
• Feature flag assignments and experiment participation data

We also may utilize reCAPTCHA services which may collect hardware and software information (including but not limited to device and application data), and this data is used for improving reCAPTCHA and general security purposes. 

Our payment processing is handled through Apple App Store and Google Play in-app purchase systems. When you subscribe to paid services, your payment information is collected and processed directly by Apple or Google, depending on your device platform, pursuant to their respective privacy policies. Comic Social does not store, process, or have access to your payment card numbers or billing details. Apple's privacy policy is available at https://www.apple.com/legal/privacy/ and Google's privacy policy is available at https://policies.google.com/privacy.

12. CHILDREN’S PRIVACY. The Services are not directed to, and we do not knowingly collect Personal Information from, solicit Personal Information from or market to individuals under the age of sixteen (16). If you are under the age of sixteen (16), you may not use the Services or provide any Personal Information to us. If you are a parent or legal guardian and believe that your child under the age of sixteen (16) or under the age of legal majority in your jurisdiction has provided us with Personal Information, please contact us immediately at contact@comic-social.com. Upon verification, we will take prompt steps to deactivate the account and delete such information from our systems. If we become aware that we have collected Personal Information from a child under the age of sixteen (16) without verification of parental consent, we will take commercially reasonable steps to delete that information.

13. GEOGRAPHIC SCOPE. The Services are operated in the United Kingdom and is intended for users located within the United Kingdom. We make no representation that the Services are appropriate or available for use beyond the United Kingdom. If you use the Services outside of the United Kingdom, you are doing so on your own initiative and you are solely responsible for compliance with applicable local laws regarding your online conduct and acceptable content, if and to the extent local laws apply. Your Personal Information is stored and processed in the United Kingdom, and by using the Services, you consent to the storage and processing of your information within the United Kingdom.

14. SPECIFIC PRIVACY RIGHTS

14.1 UK or EU Privacy Rights. If you are a UK or EU resident, you have the following rights under the General Data Protection Regulation (“GDPR”) and United Kingdom General Data Protection Regulation (“UK GDPR”) require us to explain the valid legal bases we rely on in order to process your personal information. We may rely on the following legal bases to process your personal information:

• Consent: We may process your information if you have given us permission or consent to use your personal information for a specific purpose. You can withdraw your consent at any time. Please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

• Performance Of A Contract: We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you including, but not limited to providing our Services or at your request prior to entering into a contract with you.

• Legitimate Interests: We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. We may process your personal information for including, but not limited to the following purposes in order to:

• • Send users information about special offers and discounts on our products and services.

• • Develop and display personalized and relevant advertising content for our users.

• • Analyze how our Services are used so we can improve them to engage and retain users.

• • Support our marketing activities.

• • Diagnose problems and/or prevent fraudulent activities.

• • Understand how our users use our products and services so we can improve user experience

• Legal Obligations: We may process your information where we believe it is necessary for compliance with our legal obligations including, but not limited to cooperating with a law enforcement body or regulatory agency, exercising or defending our legal rights, or disclosing your information as evidence in litigation in which we are involved.

• Vital Interests: We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party including, but not limited to situations involving potential threats to the safety of any person.

• Opting Out Of Marketing And Promotional Communications: You can unsubscribe from our marketing and promotional communications at any time by contacting us at contact@comic-social.com. You will then be removed from the marketing lists. However, we may still communicate with you including, but not limited to sending you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

If you are located in the EU or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority on this site: https://ec.europa.eu/newsroom/article29/items/612080 or UK data protection authority on this site: https://ico.org.uk/make-a-complaint/data-protection-complaints/data-protection-complaints/. 

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner on this site: https://www.edoeb.admin.ch/edoeb/en/home.html.

14.2 California Privacy Rights. If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”). This information supplements our Privacy Policy for California residents only. The following rights do not apply to individuals who reside outside of California.

14.2.1 Right to Know. You have the right to request that we disclose the categories and specific pieces of Personal Information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information.

14.2.2 Right to Delete. You have the right to request deletion of your Personal Information, subject to certain exceptions provided by law. For example, we are not required to delete Personal Information if it is necessary for us to complete your transaction. We are also not required to delete your Personal Information if it is for an ongoing business relationship. Upon receipt and verification of a consumer request to delete Personal Information, we will delete (and direct third-party service providers to delete) your Personal Information from our records, unless an exclusion applies.

14.2.3 Right to Correct. You have the right to request correction of inaccurate Personal Information that we maintain about you.

14.2.4 Right to Opt-Out of Sale or Sharing. Comic Social does not sell your Personal Information as defined under the CCPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

14.2.5 Right to Limit Use of Sensitive Personal Information. To the extent we process sensitive Personal Information (such as precise geolocation), we do so only for purposes authorized under the CCPA, including providing the Services you request.

14.2.6 Right to Non-Discrimination. We shall not discriminate against you for exercising any of your CCPA rights, including by denying goods or services, charging different prices, providing a different level or quality of goods or services, or suggesting that you will receive a different price or rate.

14.2.7 Categories of Information Collected. In the preceding twelve (12) months, we have collected the following categories of Personal Information as defined by the CCPA: Identifiers (name, email, IP address, Device Identifiers); Personal information categories listed in Cal. Civ. Code 1798.80(e) (name); Commercial information (subscription records, purchasing history); Internet or electronic network activity (browsing history, interaction with Services); Geolocation data (precise and approximate location); and Inferences drawn from the above to create a profile.

14.2.8 Exercising Your Rights. To exercise your CCPA rights, please contact us at contact@comic-social.com with the subject line “California Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

In addition, you may report a complaint to the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs by telephone at (800) 952-5210 or by mail at California Department of Consumer Affairs, 400 R Street, Sacramento, CA 95814.

14.3 Colorado Privacy Rights. If you are a Colorado resident, you have the following rights under the Colorado Privacy Act (“CPA”). This information supplements our Privacy Policy for Colorado residents only. The following rights do not apply to individuals who reside outside of Colorado.

Under the CPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the CPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your CPA rights, please contact us at contact@comic-social.com with the subject line “Colorado Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.4 Connecticut Privacy Rights. If you are a Connecticut resident, you have the following rights under the Connecticut Data Privacy Act (“CTDPA”). This information supplements our Privacy Policy for Connecticut residents only. The following rights do not apply to individuals who reside outside of Connecticut.

Under the CTDPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the CTDPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your CTDPA rights, please contact us at contact@comic-social.com with the subject line “Connecticut Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.5 Delaware Privacy Rights. If you are a Delaware resident, you have the following rights under the Delaware Personal Data Privacy Act (“DPDPA”). This information supplements our Privacy Policy for Delaware residents only. The following rights do not apply to individuals who reside outside of Delaware.

Under the DPDPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the DPDPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your DPDPA rights, please contact us at contact@comic-social.com with the subject line “Delaware Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.6 Florida Privacy Rights. If you are a Florida resident, you have the following rights under the Florida Digital Bill of Rights (“FDBR”). This information supplements our Privacy Policy for Florida residents only. The following rights do not apply to individuals who reside outside of Florida.

Under the FDBR, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the FDBR. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your FDBR rights, please contact us at contact@comic-social.com with the subject line “Florida Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.7 Indiana Privacy Rights. If you are an Indiana resident, you have the following rights under the Indiana Consumer Data Protection Act (“INCDPA”). This information supplements our Privacy Policy for Indiana residents only. The following rights do not apply to individuals who reside outside of Indiana.

Under the INCDPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the INCDPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your INCDPA rights, please contact us at contact@comic-social.com with the subject line “Indiana Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.8 Iowa Privacy Rights. If you are an Iowa resident, you have the following rights under the Iowa Consumer Data Protection Act (“ICDPA”). This information supplements our Privacy Policy for Iowa residents only. The following rights do not apply to individuals who reside outside of Iowa.

Under the ICDPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data. 
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the ICDPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your ICDPA rights, please contact us at contact@comic-social.com with the subject line “Iowa Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.9 Kentucky Privacy Rights. If you are a Kentucky resident, you have the following rights under the Kentucky Consumer Data Protection Act (“KCDPA”). This information supplements our Privacy Policy for Kentucky residents only. The following rights do not apply to individuals who reside outside of Kentucky.

Under the KCDPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the KCDPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your KCDPA rights, please contact us at contact@comic-social.com with the subject line “Kentucky Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.10 Maryland Privacy Rights. If you are a Maryland resident, you have the following rights under the Maryland Online Data Privacy Act (“MODPA”). This information supplements our Privacy Policy for Maryland residents only. The following rights do not apply to individuals who reside outside of Maryland.

Under the MODPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the MODPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your MODPA rights, please contact us at contact@comic-social.com with the subject line “Maryland Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.11 Minnesota Privacy Rights. If you are a Minnesota resident, you have the following rights under the Minnesota Consumer Data Privacy Act (“MCDPA”). This information supplements our Privacy Policy for Minnesota residents only. The following rights do not apply to individuals who reside outside of Minnesota.

Under the MCDPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the MCDPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your MCDPA rights, please contact us at contact@comic-social.com with the subject line “Minnesota Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.12 Montana Privacy Rights. If you are a Montana resident, you have the following rights under the Montana Consumer Data Privacy Act (“MTCDPA”). This information supplements our Privacy Policy for Montana residents only. The following rights do not apply to individuals who reside outside of Montana.

Under the MTCDPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the

sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the MTCDPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your MTCDPA rights, please contact us at contact@comic-social.com with the subject line “Montana Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.13 Nebraska Privacy Rights. If you are a Nebraska resident, you have the following rights under the Nebraska Data Privacy Act (“NDPA”). This information supplements our Privacy Policy for Nebraska residents only. The following rights do not apply to individuals who reside outside of Nebraska.

Under the NDPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the

sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the NDPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your NDPA rights, please contact us at contact@comic-social.com with the subject line “Nebraska Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.14 Nevada Privacy Rights. If you reside in the State of Nevada, you have the right to request that we do not sell your personal information. Please contact us at contact@comic-social.com with the subject line “Nevada Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded.

Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request. This information supplements our Privacy Policy for Nevada residents only. The above rights do not apply to individuals who reside outside of Nevada.

14.15 New Hampshire Privacy Rights. If you are a New Hampshire resident, you have the following rights under the New Hampshire Privacy Act (“NHPA”). This information supplements our Privacy Policy for New Hampshire residents only. The following rights do not apply to individuals who reside outside of New Hampshire.

Under the NHPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the NHPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your NHPA rights, please contact us at contact@comic-social.com with the subject line “New Hampshire Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.16 New Jersey Privacy Rights. If you are a New Jersey resident, you have the following rights under the New Jersey Data Privacy Act (“NJDPA”). This information supplements our Privacy Policy for New Jersey residents only. The following rights do not apply to individuals who reside outside of New Jersey.

Under the NJDPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the NJDPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your NJDPA rights, please contact us at contact@comic-social.com with the subject line “New Jersey Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.17 Oregon Privacy Rights. If you are an Oregon resident, you have the following rights under the Oregon Consumer Privacy Act (“OCPA”). This information supplements our Privacy Policy for Oregon residents only. The following rights do not apply to individuals who reside outside of Oregon.

Under the OCPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the OCPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your OCPA rights, please contact us at contact@comic-social.com with the subject line “Oregon Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.18 Rhode Island Privacy Rights. If you are a Rhode Island resident, you have the following rights under the Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA”). This information supplements our Privacy Policy for Rhode Island residents only. The following rights do not apply to individuals who reside outside of Rhode Island.

Under the RIDTPPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the RIDTPPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your RIDTPPA rights, please contact us at contact@comic-social.com with the subject line “Rhode Island Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.19 Tennessee Privacy Rights. If you are a Tennessee resident, you have the following rights under the Tennessee Information Protection Act (“TIPA”). This information supplements our Privacy Policy for Tennessee residents only. The following rights do not apply to individuals who reside outside of Tennessee.

Under the TIPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the

sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the TIPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your TIPA rights, please contact us at contact@comic-social.com with the subject line “Tennessee Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.20 Texas Privacy Rights. If you are a Texas resident, you have the following rights under the Texas Data Privacy and Security Act (“TDPSA”). This information supplements our Privacy Policy for Texas residents only. The following rights do not apply to individuals who reside outside of Texas.

Under the TDPSA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the TDPSA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your TDPSA rights, please contact us at contact@comic-social.com with the subject line “Texas Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.21 Utah Privacy Rights. If you are a Utah resident, you have the following rights under the Utah Consumer Privacy Act (“UCPA”). This information supplements our Privacy Policy for Utah residents only. The following rights do not apply to individuals who reside outside of Utah.

Under the UCPA, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

• Right to be informed whether or not we are processing your personal data.
• Right to access your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of the personal data you previously shared with us.
• Right to opt out of the processing of your personal data if it is used for targeted advertising or

the sale of personal data.

We do not sell or share your personal information, as those terms are defined under the UCPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your UCPA rights, please contact us at contact@comic-social.com with the subject line “Utah Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.22 Virginia Privacy Rights. If you are a Virginia resident, you have the following rights under the Virginia Consumer Data Protection Act (“VCDPA”). This information supplements our Privacy Policy for Virginia residents only. The following rights do not apply to individuals who reside outside of Virginia.

Under the VCDPA:

• “Consumer” means a natural person who is a resident of the Commonwealth acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.

• “Personal data” means any information that is linked or reasonably linkable to an identified or identifiable natural person. “Personal data” does not include de-identified data or publicly available information.

• “Sale of personal data” means the exchange of personal data for monetary consideration. If this definition of “consumer” applies to you, we must adhere to certain rights and obligations regarding your personal data. Your rights with respect to your personal data are the:

• • Right to be informed whether or not we are processing your personal data.
  • Right to access your personal data.
  • Right to correct inaccuracies in your personal data.
  • Right to request deletion of your personal data.
  • Right to obtain a copy of the personal data you previously shared with us.
  • Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

We do not sell or share your personal information, as those terms are defined under the VCDPA. We do not share your Personal Information for cross-context behavioral advertising purposes.

To exercise your VCDPA rights, please contact us at contact@comic-social.com with the subject line “Virginia Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request. If your appeal is denied, you may contact the Attorney General to submit a complaint.

14.23 Canada Privacy Rights. If you are a resident of Canada, we may process your information if you have given us specific permission or express consent to use your personal information for a specific purpose, or in situations where your permission can be inferred. You can withdraw your consent at any time by contacting us at contact@comic-social.com.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent including, but not limited to:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way.

• For investigations and fraud detection and prevention.

• For business transactions provided certain conditions are met.

• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim.

• For identifying injured, ill, or deceased persons and communicating with next of kin.

• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse.

• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province.

• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records.

• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced.

• If the collection is solely for journalistic, artistic, or literary purposes.

• If the information is publicly available and is specified by the regulations.

14.24 Australia or New Zealand Privacy Rights. If you are a resident of Australia or New Zealand, you have the following rights under the Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020 (“Privacy Act”). This Privacy Policy satisfies the notice requirements defined in both Privacy Acts, in particular what personal information we collect from you, from which sources, for which purposes, and other recipients of your personal information.

If you do not wish to provide the personal information necessary to fulfill their applicable purpose, it may affect our ability to provide our services, in particular:

• offer you the products or services that you want.
• respond to or help with your requests.
• manage your account with us.
• confirm your identity and protect your account.

At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us at contact@comic-social.com.

If you believe we are unlawfully processing your personal information, you have the right to submit a complaint about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner on this site: https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us and a breach of New Zealand's Privacy Principles to the Office of New Zealand Privacy Commissioner on this site: https://www.privacy.org.nz/your-rights/making-a-complaint-to-the-privacy-commissioner/.

14.25 South Africa Privacy Rights. If you are a resident of South Africa, you have the right to request access to or correction of your personal information at any time. You can make such a request by contacting us at contact@comic-social.com.

If you are unsatisfied with the manner in which we address any complaint with regard to our processing of personal information, you can contact the office of the regulator, the details of which are:

The Information Regulator (South Africa)

General enquiries: enquiries@inforegulator.org.za 

Complaints (complete POPIA/PAIA form 5): PAIAComplaints@inforegulator.org.za & POPIAComplaints@inforegulator.org.za

14.26 Privacy Rights For Other Jurisdictions. If you are located in another jurisdiction that is not specifically discussed in this Privacy Policy, you may have rights, under applicable data privacy laws, to request information about or access to your personal information that we maintain, to require that inaccurate information be corrected or, in some circumstances, to object to our processing of your personal information. To exercise any rights you may have in another jurisdiction, please contact us at contact@comic-social.com with the subject line “Other Jurisdiction Privacy Rights.” You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

15. DATA BREACH NOTIFICATION. In the event of a security breach that results in the unauthorized access, acquisition, or disclosure of your Personal Information, we will:

• Investigate the nature and scope of the breach promptly
• Take reasonable steps to contain and remediate the breach
• Notify affected individuals without unreasonable delay, and in no event later than the timeframes required by applicable state breach notification laws in England and Wales
• Provide notification to applicable regulatory authorities as required by law
• Include in such notification a description of the nature of the breach, the categories and approximate number of individuals concerned, the likely consequences, and the measures taken or proposed to address the breach

16. UPDATES TO THIS PRIVACY POLICY. We reserve the right to modify this Privacy Policy at any time in our sole discretion. Amendments to this Privacy Policy shall apply to information already collected as well as information collected after the effective date of the amendment. We will notify you of material changes by:

• Posting the updated Policy on the App and Site
• Updating the “Last Updated” Date at the top of this Policy
• Sending notification through the App or via email for material changes

Your continued use of the Services following the posting of any amendments constitutes your acceptance of such amendments. If you do not agree to the amended Policy, you must immediately discontinue use of the Services and request deletion of your account.

17. TERMS OF USE. Your use of the Service is also governed by our Terms of Use, which is hereby incorporated into this Privacy Policy by reference. Please review the Terms of Use carefully since you acknowledge and agree that you have read our Terms of Use and agree to our Terms of Use by accessing and/or using the Services. As stated in the Terms of Use, the Terms of Use may be changed from time to time and such changes are effective immediately upon their posting. Capitalized terms used but not defined in this Privacy Policy will have the meanings assigned to them in the Terms of Use.

18. SEVERABILITY. If any provision of this Privacy Policy is held by a court or arbitrator of competent jurisdiction to be invalid, illegal, or unenforceable, such provision shall be modified and interpreted to accomplish the objectives of such provision to the greatest extent possible under applicable law, and the remaining provisions shall continue in full force and effect.

19. ENTIRE AGREEMENT. This Privacy Policy, together with our Terms of Use and any other agreements, policies, or guidelines expressly incorporated by reference, constitutes the sole and entire agreement between you and Comic Social with respect to the subject matter hereof and supersedes all prior or contemporaneous communications, understandings, representations, warranties, and/or agreements, whether oral or written, with respect to such subject matter.

20. WAIVER. No failure or delay by Comic Social in exercising any right, remedy, power, or privilege under this Privacy Policy shall operate as a waiver thereof. No single or partial exercise of any right or remedy shall preclude any other or further exercise thereof or the exercise of any other right or remedy. Any waiver must be in writing and signed by Comic Social to be effective.

21. CONTACT INFORMATION. If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at contact@comic-social.com.