California Privacy Notice

1. Scope of this Notice

This Notice may apply when a California resident:

• visits the Rloop website;
• submits a quote or service request;
• creates or uses a Customer account;
• creates or uses a Contractor account;
• submits a Contractor application;
• uploads documents;
• schedules, receives, or performs Services;
• communicates with Rloop;
• makes or receives payments;
• applies for work or performs services for Rosario Reyes Solutions LLC;
• otherwise interacts with the platform or Company.

This Notice does not apply to information that is excluded from the definition of personal information under applicable law.

2. Applicability of the CCPA

The California Consumer Privacy Act, as amended, applies only to businesses that satisfy applicable statutory requirements.

Rloop may not meet every statutory applicability threshold during every stage of its development. We are nevertheless publishing this Notice to provide transparency and to prepare the platform for future growth.

Where the CCPA does not legally apply, Rloop may choose to honor certain privacy requests voluntarily, subject to identity verification, security, technical feasibility, contractual obligations, and applicable exceptions.

Nothing in this Notice creates a legal right beyond rights provided by applicable law or an express Rloop commitment.

3. Key definitions

Personal information

Personal information generally means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household.

Sensitive personal information

Sensitive personal information may include certain government identifiers, account credentials, precise geolocation, racial or ethnic origin, religious beliefs, union membership, message contents, biometric information, health information, and other information designated by California law.

Sale

A sale may include transferring personal information to a third party for monetary or other valuable consideration, subject to statutory exceptions.

Sharing

Sharing generally refers to disclosing personal information for cross-context behavioral advertising, whether or not money is exchanged, subject to statutory exceptions.

4. Categories of personal information

Depending on the relationship and features used, Rloop may collect the following categories:

Rloop does not necessarily collect every example listed above from every person.

5. Sources of personal information

Rloop may collect personal information from:

• Customers;
• Contractors and applicants;
• account users;
• property owners, tenants, occupants, or representatives;
• uploaded forms and documents;
• browsers and devices;
• cookies and similar technologies;
• payment processors;
• identity-verification or fraud-prevention providers;
• cloud-hosting and security providers;
• public records and government sources;
• insurers and licensing authorities;
• other users involved in a transaction;
• lawful third-party sources.

6. Business and commercial purposes

Rloop may collect, use, retain, or disclose personal information to:

• create and manage accounts;
• process service requests;
• prepare estimates;
• schedule and coordinate assignments;
• match Customers with Contractors;
• verify Contractor eligibility;
• review insurance, licenses, tax forms, and application documents;
• process payments and payouts;
• provide customer support;
• communicate job status;
• resolve claims and disputes;
• prevent fraud and abuse;
• secure accounts and infrastructure;
• maintain records;
• improve platform performance;
• measure engagement and marketing performance;
• enforce legal agreements;
• comply with legal obligations;
• protect users, property, and the public;
• support legitimate business operations.

7. Disclosures for business purposes

Rloop may disclose personal information to:

• assigned Contractors;
• Customers involved in an assignment;
• payment and payout providers;
• hosting and infrastructure providers;
• security and fraud-prevention vendors;
• email, communications, and support providers;
• analytics and performance providers;
• professional advisers;
• insurers;
• government authorities;
• courts and law-enforcement agencies;
• potential buyers, successors, or transaction parties;
• other recipients authorized by the consumer or permitted by law.

Information shared with a Contractor may include the Customer’s name, service address, telephone number, access instructions, service description, photographs, appointment information, and other details needed to perform the assignment.

Information shared with a Customer may include a Contractor’s name, company information, assignment status, arrival information, and other details necessary to coordinate Services.

8. Sale and sharing of personal information

Rloop does not sell personal information in the ordinary meaning of exchanging a person’s information directly for money.

Certain analytics, advertising, or marketing technologies may be considered a sale or sharing under California law even when no money changes hands.

If Rloop begins using technologies that constitute sale or sharing under applicable law, Rloop will:

• provide required notice;
• provide an appropriate opt-out method;
• honor valid opt-out preference signals;
• update this Notice;
• maintain required records.

Rloop does not knowingly sell or share the personal information of consumers under 16 years of age.

9. Sensitive personal information

Rloop may collect sensitive personal information when reasonably necessary for:

• account authentication;
• Contractor identity verification;
• tax reporting;
• license and insurance verification;
• payment and payout processing;
• precise job coordination;
• fraud prevention;
• security;
• legal compliance.

Rloop does not intend to use or disclose sensitive personal information to infer characteristics about a person when such use would trigger a right to limit under California law.

If Rloop materially changes how sensitive personal information is used, we will update this Notice and provide required controls.

10. Retention of personal information

Rloop retains personal information only for as long as reasonably necessary for the disclosed purpose, unless a longer period is required or permitted by law.

Retention decisions may consider:

• account status;
• the duration of the relationship;
• transaction and assignment history;
• payment and tax requirements;
• insurance and licensing verification;
• document expiration;
• fraud and security prevention;
• dispute or claim periods;
• legal limitation periods;
• contractual obligations;
• regulatory and recordkeeping requirements.

Information may be deleted, anonymized, aggregated, or isolated from active systems when it is no longer reasonably needed.

11. California privacy rights

Right to know

You may have the right to request information about the categories and specific pieces of personal information Rloop has collected about you, applicable sources, purposes, and disclosures.

Right to access and portability

You may have the right to receive certain personal information in a portable and, where technically feasible, readily usable format.

Right to deletion

You may have the right to request deletion of personal information, subject to legal exceptions.

Right to correction

You may have the right to request correction of inaccurate personal information.

Right to opt out of sale or sharing

You may have the right to direct Rloop not to sell or share your personal information.

Right to limit sensitive-information use

You may have the right to limit certain uses and disclosures of sensitive personal information when that right applies.

Rights concerning automated decisionmaking

Depending on applicable regulations and the technology used, you may have rights to receive information about, access, or opt out of certain automated decisionmaking activities.

Right to non-discrimination

You have the right not to receive unlawful discriminatory treatment for exercising an applicable privacy right.

12. How to submit a privacy request

A California resident may submit a privacy request through the Rloop contact page.

The request should clearly state:

• that it is a California privacy request;
• the right being exercised;
• the requester’s full name;
• the email address or telephone number connected to the account or transaction;
• the requester’s relationship with Rloop;
• enough detail to locate the relevant records.

Rloop may provide additional request methods as the platform develops, including account controls, webforms, email addresses, or toll-free telephone support if required.

Rloop will respond within the period required by applicable law and may extend the response period when legally permitted.

13. Identity verification

Rloop must reasonably verify that a request relates to the person making the request before disclosing, correcting, or deleting personal information.

Verification may involve:

• confirming account access;
• matching contact information;
• confirming transaction or service details;
• requesting a signed declaration;
• requesting appropriate identification;
• using another reasonable verification method.

The verification level may depend on the sensitivity of the information and the risk of unauthorized access or deletion.

Rloop may deny or limit a request when identity cannot be reasonably verified.

14. Authorized agents

You may use an authorized agent to submit a privacy request where permitted by law.

Rloop may require:

• proof that the agent has written permission;
• direct verification of the consumer’s identity;
• confirmation that the consumer authorized the request;
• legally sufficient power-of-attorney documentation.

Rloop may deny an agent request when authority cannot be reasonably established.

15. Opting out of sale or sharing

Rloop does not currently sell personal information in exchange for money.

If Rloop uses advertising or analytics technology that constitutes sale or sharing under California law, California residents may submit an opt-out request through the method identified on the website.

Rloop may add a link labeled:

An opt-out request does not prevent Rloop from using information for legally permitted business purposes or from making disclosures that do not constitute sale or sharing.

16. Global Privacy Control

Global Privacy Control is a browser or device signal that may communicate a request to opt out of the sale or sharing of personal information.

Where required by California law, Rloop will treat a valid opt-out preference signal as an opt-out request for the browser or device sending the signal.

If the browser or device is associated with a known account, Rloop may apply the preference more broadly when required or when the user confirms the preference.

Rloop will not use a confusing or manipulative interface to obstruct a valid privacy choice.

17. Automated decisionmaking technology

Rloop may use automated tools to support operational decisions such as:

• detecting fraud or suspicious activity;
• prioritizing support requests;
• matching assignments by location, availability, equipment, or qualifications;
• identifying expired or missing documents;
• estimating service conditions;
• improving platform recommendations.

Rloop does not currently intend to rely exclusively on automated processing to make decisions that produce significant legal or similarly significant effects without meaningful safeguards.

If Rloop introduces regulated automated decisionmaking technology, we will provide any required notice, access, explanation, or opt-out mechanism.

Fraud, safety, security, and legal-compliance tools may remain available where exceptions permit their use.

18. Personal information of minors

Rloop Services are intended for adults and are not directed to children under 13.

Rloop does not knowingly sell or share personal information belonging to consumers under 16 years of age.

If Rloop learns that information was collected from a child in a manner inconsistent with applicable law, Rloop will take reasonable steps to delete or otherwise address the information.

A parent or guardian may contact Rloop regarding information believed to relate to a minor.

19. Applicants, employees, and workforce members

Rloop may collect personal information relating to job applicants, employees, temporary personnel, officers, owners, and other workforce members.

This information may include:

• contact information;
• employment history;
• education and qualifications;
• payroll and tax information;
• identity and eligibility records;
• performance and disciplinary records;
• account and system activity;
• legally required records.

Rloop may provide a more specific workforce privacy notice if its hiring or employment operations expand.

20. Contractor and applicant information

Rloop may collect detailed information from Contractor applicants and approved Contractors, including:

• account and contact information;
• company information;
• business addresses;
• service areas;
• equipment records;
• insurance certificates;
• licenses and identification;
• tax forms;
• banking or payout information;
• availability;
• job history;
• Customer ratings and complaints;
• photographs and completion evidence;
• verification and compliance records.

Rloop uses this information to review applications, verify eligibility, assign work, process payouts, maintain platform quality, prevent fraud, enforce agreements, and comply with law.

Contractors should not upload personal information that is unrelated to a required application, verification, assignment, tax, insurance, or payment purpose.

21. Security safeguards

Rloop uses administrative, technical, and physical safeguards designed to protect personal information.

Measures may include:

• authentication controls;
• role-based access;
• secure connections;
• CSRF protection;
• secure cookies;
• infrastructure monitoring;
• network-security services;
• access logging;
• backups;
• limited access to uploaded documents;
• service-provider controls.

No information system can guarantee absolute security.

Users are responsible for protecting account credentials and promptly reporting suspected unauthorized access.

22. Non-discrimination

Rloop will not unlawfully discriminate against a California resident for exercising an applicable privacy right.

Rloop will not, solely because of a valid privacy request:

• deny Services;
• charge an unlawful different price;
• provide an unlawful different level or quality of service;
• retaliate against a Contractor or applicant;
• suggest unlawful adverse treatment.

Rloop may take actions that are reasonably related to the value of information or necessary to honor a request, secure an account, prevent fraud, or comply with law.

23. Appeals, concerns, and complaints

If Rloop denies or limits a privacy request, the response will explain the reason when legally required.

You may contact Rloop to request reconsideration or provide additional information.

California residents may also submit complaints to the California Privacy Protection Agency or the California Attorney General where appropriate.

Nothing in this Notice limits a right to contact a regulator or seek another remedy available under law.

24. Privacy request metrics

If Rloop becomes subject to a legal requirement to publish annual privacy-request statistics, Rloop may disclose metrics such as:

• number of requests received;
• number of requests complied with;
• number of requests denied;
• average response time;
• request categories.

Rloop will publish metrics only when required or when it determines that doing so meaningfully improves transparency.

25. Updates to this Notice

Rloop may update this Notice to reflect:

• changes in California law;
• new privacy regulations;
• new platform features;
• new categories of information;
• new business purposes;
• changes to service providers;
• advertising or automated technologies;
• changes in Rloop’s legal obligations.

The updated Notice will display a revised effective or last-updated date.

Rloop may provide additional notice before a material change takes effect when required by law.