Privacy Policy FOR saha exchange, llc

Effective Date: 7/1/2025

At Saha Exchange, LLC (“Saha Exchange,” “we,” “us,” or “our”), we value your privacy and are committed to protecting the personal information you share with us. This Privacy Policy ("Policy") describes the categories of information we collect, how we use it, the third parties with whom we may share it, and your rights with respect to that information. We implement reasonable technical and organizational security measures designed to protect your personal data in accordance with industry standards and applicable laws.

This Policy applies to all users of our website, mobile application, and services (the "Platform"), including those who rent, list, purchase, or sell items through the Platform. Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are under 18, please do not use our services or provide any information to us. We implement reasonable age verification mechanisms during the registration process as part of our efforts to comply with this policy. If we learn we have collected personal information from a child under 18, we will delete that information promptly. Please read this Policy carefully to understand how your data is collected, used, and protected.

We collect data in several ways, including (i) when you provide information to us directly; (ii) when you interact with the Platform; (iii) when you list or rent clothing; (iv) when you communicate via our in-app messaging features; and (v) through integrated third-party services. We are committed to complying with all applicable data protection laws, regardless of the method of collection. Data processing primarily occurs in the United States, with some processing potentially occurring in other countries where our service providers are located. By using our services, you acknowledge and expressly consent to the transfer of your information to these locations, which may have different data protection rules than your country. Such transfers will be conducted in accordance with applicable data transfer mechanisms and safeguards required by law, including Standard Contractual Clauses or other approved transfer mechanisms where required.

In some cases, we may receive additional information from third-party services or public sources to enhance our platform's functionality and user experience. Such data collection is done in compliance with applicable privacy laws and with respect for user consent and data protection principles.

We collect the following categories of personal information:

• Identifiers:  Your name, email address, phone number, mailing address, and username,      used to create and manage accounts, process transactions, and facilitate communications and deliveries.
• Shipping and Delivery Information: To deliver or receive items, we collect address and logistical data. We partner with third-party logistics providers such as Shippo and Uber to arrange shipments and track deliveries. You can read their privacy policies here:
      • Shippo: https://goshippo.com/privacy
      • Uber: https://www.uber.com/legal/en/document/?name=privacy-notice&country=united-states
• Payment Information: We collect limited payment data such as transaction records and billing addresses. Payment card data is handled exclusively by Stripe, Inc., our third-party payment processor. See Stripe’s privacy policy at https://stripe.com/privacy.
• Commercial Information: Your rental and listing history, reviews, preferences, and purchase or return records, which help us personalize your experience and improve recommendations.
• Personal Characteristics: Optional information such as your clothing size, gender, and age, used to enhance listing recommendations and fit-based search results.
• Communication Data: We utilize Sendbird to power messaging and voice features between      buyers and renters. We may collect and store the contents of messages, timestamps, voice notes, and other communication data transmitted via this service for dispute resolution, trust and safety, and customer support. Sendbird’s privacy policy is available at https://sendbird.com/privacy.
• Media Content: If you upload photos, videos, or audio related to listings, reviews, or messages, we may store and use this content to facilitate Platform functionality and enhance trust and safety.
• Internet or Network Activity: Technical data such as device ID, IP address, geolocation, and browsing activity within the Platform, used to improve security, performance, and personalization.
• Professional or Educational Information: When voluntarily provided (e.g., during onboarding or account verification), this may be used to verify identities or target community-building efforts.
• Inferences: We may derive internal insights from your behavior, preferences, or activities to      optimize Platform experience and engagement.

We use your personal information for the following business and operational purposes:

• To authenticate users and manage accounts
• To facilitate rentals, purchases, and returns
• To fulfill deliveries via Shippo and Uber
• To process payments via Stripe
• To enable secure communication between users via Sendbird
• To recommend listings based on your preferences
• To provide customer service, respond to inquiries, and resolve disputes
• To analyze usage trends and improve functionality
• To detect, investigate, and prevent fraud or prohibited conduct
• To comply with legal and regulatory obligations

We do not sell or share your personal information for monetary or other valuable considerations as defined under applicable privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). However, we may disclose your information under the following categories and purposes:

• Service Providers: We share data with trusted vendors who assist us with logistics (e.g.,      Shippo, Uber), payments (Stripe), messaging (Sendbird), hosting, analytics, fraud prevention, and security. These vendors only process your data on our behalf under strict contractual obligations, including written agreements that contain specific data protection provisions.
• Third Parties: We      may share certain data (e.g., with your credit card provider or platforms      like Facebook/Google) to facilitate services or meet legal requirements. Such entities operate under their own privacy policies. We limit third party access to only the information necessary for providing their specific services.
• Affiliates or Successors: In the event of a business transition (e.g., merger, sale, or acquisition), your information may be transferred to a new entity, subject to privacy safeguards.
• Legal Disclosures: We may share information if required by law, subpoena, or governmental      request, or to enforce our rights or investigate suspected misconduct.

We implement commercially reasonable safeguards to protect your information, including:

• Encryption of sensitive data in transit and at rest
• Secure payment processing via PCI-DSS compliant providers (Stripe)
• Infrastructure with physical and digital security controls
• Role-based access controls, limiting access to authorized personnel only

We also encourage users to maintain the confidentiality of their credentials and not share passwords. We will never ask you for your password via phone, chat, or email. While we implement reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure. You acknowledge and accept these inherent risks when using our Platform. We expressly disclaim any warranties or representations regarding the absolute security of your information. Despite our security measures, no data transmission or storage system can be guaranteed to be 100% secure.

We may share limited anonymized or de-identified information with advertising networks to deliver tailored content. If you interact with platforms like Facebook or Google, their privacy terms apply. You may still see our ads even if you do not share data directly with these platforms. You can opt out of targeted advertising by visiting www.aboutads.info/choices or www.networkadvertising.org/choices, or through your mobile device settings.

We do not knowingly collect personal information from individuals under the age of 13. If we learn that we have collected data from a child under 13 without verifiable parental consent, we will delete it promptly. Parents or guardians who believe we may have collected personal information from a child under 13 should contact us at mmani@saha-exchange.com.

If you are under the age of 18, you may request that your data be deleted by contacting us at help@sahaexchange.com. We will make commercially reasonable efforts to fulfill such requests, subject to applicable legal obligations and data retention requirements.

Depending on your jurisdiction, you may have specific rights under applicable privacy laws (including but not limited to the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), and other state privacy laws), including the right to:

• Access and receive a copy of your personal data
• Request correction or deletion of inaccurate or outdated information
• Opt out of certain data uses or disclosures
• Receive notice of data collection and sharing practices
• Exercise rights without discrimination

To submit a request or withdraw your consent for data processing, please email help@sahaexchange.com. We will verify your identity and respond as required by law.

For questions or concerns about this Privacy Policy or your personal data, please contact:

Saha Exchange, LLC

Email: help@sahaexchange.com

We will notify users of any material updates to this Privacy Policy through both email notifications and prominent announcements on our website at least thirty (30) days prior to such changes taking effect. Material changes include modifications to: (i) the categories of personal information we collect; (ii) the purposes for which we use personal information; (iii) the categories of third parties with whom we share personal information; or (iv) your rights regarding your personal information. Continued use of our services after the effective date of any privacy policy changes constitutes your acceptance of the updated terms and acknowledgment of the new data handling practices. If you do not agree with the updated Privacy Policy, you must discontinue using our services. For material changes to our data handling practices that affect previously collected personal information, we will obtain your explicit opt-in consent before applying such changes to your personal information. If you do not provide consent, we will continue to handle your previously collected personal information according to the Privacy Policy in effect when the information was collected.