Privacy Policy & Child Data Practices

SitReady operates an online technology marketplace designed to connect adult parents and legal guardians (“Parents”) with independent babysitters (“Sitters”) for childcare Bookings.This Privacy Policy explains how SitReady may collect, use, disclose, retain, and protect information processed through the SitReady website, mobile applications, account registration and onboarding processes, Sitter profiles, availability tools, Booking creation and management, in-platform messaging, payments and payouts, background-screening status, reviews, customer support, safety reporting, account settings, and related services.This Policy applies to visitors, registered Parents, Sitters, Sitter applicants, and other adults who interact with SitReady.Children are not intended to create SitReady Accounts or independently use the Platform as Account Holders.

Depending on how you interact with SitReady, we may collect or receive the following categories of information.A. Account and Contact InformationThis may include: • Name; • Email address; • Telephone number; • Login credentials or authentication information; • Profile photograph; • Mailing or service address; • Account type; and • Other information necessary to establish and maintain an Account. B. Parent Profile and Household InformationParents may provide: • Identity and contact information; • Household or service location; • Childcare preferences; • Emergency contact information; • Booking history; • Saved or recurring childcare information; and • Other information reasonably necessary to arrange childcare. C. Sitter Profile and Onboarding InformationFor Sitters and Sitter applicants, information may include: • Legal and display name; • Contact information; • Photograph; • Biography; • Childcare experience; • Qualifications and certifications; • Availability; • Service preferences; • Identity-verification information; • Payment onboarding status; • Background-screening status; • Reviews and ratings; and • Other information necessary to determine eligibility to use the Platform. D. Booking InformationBooking-related information may include: • Requested and confirmed dates and times; • Booking type; • Childcare location; • Number and ages of Children; • Care instructions; • Selected Sitter; • Booking modifications or extensions; • Cancellations; • No-shows; • Relevant timestamps; • Charges; • Refunds; and • Booking status. E. CommunicationsSitReady may process information contained in: • In-platform messages; • Customer-support communications; • Safety reports; • Complaints; • Attachments; • Dispute-related communications; and • Other communications reasonably necessary to investigate safety concerns, fraud, disputes, or violations of SitReady policies. F. Payment and Payout InformationSitReady may process: • Transaction amounts; • Payment status; • Refund information; • Dispute and chargeback information; • Platform Fees; • Service Fees; • Sitter payout status; and • Payment-provider identifiers. Where payments are processed through Stripe or another payment provider, SitReady should not represent that it stores complete payment-card numbers unless the actual implementation does so.G. Technical and Usage InformationSitReady may collect technical and usage information such as: • IP address; • Device type; • Operating system; • Browser or application information; • Device or account identifiers; • Login and security events; • Pages or screens viewed; • Feature interactions; • Crash and performance information; • Cookies and similar technologies; and • Approximate or precise location information where implemented and lawfully permitted. H. Support, Safety, and Enforcement RecordsSitReady may maintain records relating to: • Complaints; • Safety or incident reports; • Cancellation evidence; • Emergency documentation; • Investigation records; • Account restrictions; • Appeals; • Fraud indicators; and • Other records reasonably necessary to protect Users, Children, SitReady, or the integrity of the Platform.

Parents may provide limited information about Children when reasonably necessary to arrange and facilitate childcare.Depending on the Platform's implemented features, Child Information may include: • First name or nickname; • Age or date of birth information; • Allergies; • Dietary restrictions; • Medical or developmental information relevant to care; • Medication instructions where permitted; • Routines; • Behavioral considerations; • Emergency information; • Authorized pickup information; and • Other care instructions. SitReady should collect only Child Information reasonably necessary for the childcare, Booking, operational, or safety purposes disclosed to the Parent.SitReady does not intend to make Child Information publicly searchable through Sitter profiles or other public-facing areas of the Platform.Child Information should not be used for behavioral advertising or sold for monetary consideration. The Parent represents and warrants that the Parent is the Child's parent, legal guardian, or otherwise legally authorized to provide the Child Information and arrange the requested childcare.

SitReady is designed for adult Parents and legally eligible Sitters rather than for Children to create Accounts or independently use the marketplace.Children should not create SitReady Accounts or submit personal information directly through the Platform.If SitReady becomes aware that a Child has created an unauthorized Account or directly submitted information in a manner prohibited by the Platform, SitReady may take appropriate steps, including: • Restricting the Account; • Deleting or limiting the information where appropriate; • Contacting a parent or legal guardian where appropriate; • Taking safety-related measures; and • Taking other steps required for legal or regulatory compliance. SitReady's product design should not intentionally encourage Children to create Accounts, independently use the marketplace, or communicate directly with Sitters through their own SitReady Accounts.

SitReady is intended for adult Account Holders and does not intend to knowingly collect personal information directly from Children under 13 through child-directed Account creation.The fact that a Parent provides information concerning a Child for legitimate childcare purposes does not, by itself, mean that the Child is an Account Holder or direct user of SitReady.SitReady may nevertheless be subject to applicable federal, state, or other child-privacy requirements depending on its actual products, practices, and applicable law.SitReady will take reasonable steps consistent with its Platform design to prevent unauthorized child-directed Account creation and direct use of the Platform by Children.

Parents may provide information about: • Emergency contacts; • Authorized pickup persons; • Household members; and • Other third parties. Parents should provide only information reasonably necessary for the applicable Booking, childcare coordination, safety, or emergency purposes and should have appropriate authority to provide such information.SitReady may use this information for purposes including: • Care coordination; • Safety; • Customer support; • Fraud prevention; • Legal compliance; and • Other legitimate operational purposes connected to the Platform.

SitReady may collect information directly from Users when they: • Create or update an Account; • Complete onboarding; • Provide Child Information; • Create or accept a Booking; • Set or update availability; • Send messages; • Submit reviews; • Contact Support; • Report a safety incident; • Request a refund; • Upload documentation; or • Use Account settings. SitReady may also receive information from service providers and integrations, including payment processors, background-screening providers, identity-verification providers, authentication providers, hosting providers, analytics providers, security providers, communications providers, customer-support providers, fraud-prevention providers, and lawful public or governmental sources.

SitReady may process information for purposes including:1.Creating and securing Accounts; 2.Displaying Sitter profiles and availability; 3.Helping Parents find and select Sitters; 4.Creating, accepting, modifying, and administering Bookings; 5.Facilitating communications between Users; 6.Processing payments, Fees, refunds, and payouts; 7.Supporting Recurring and Extended Bookings; 8.Verifying identity and screening eligibility; 9.Displaying appropriate screening status; 10.Operating reviews and ratings; 11.Providing customer support; 12.Investigating cancellations and No-Shows; 13.Investigating chargebacks and disputes; 14.Detecting fraud, abuse, or other prohibited conduct; 15.Responding to safety incidents; 16.Enforcing SitReady policies; 17.Complying with legal obligations; 18.Maintaining appropriate business and legal records; 19.Improving Platform reliability and functionality; 20.Communicating service or policy updates; and 21.Protecting Users, Children, and SitReady. SitReady should not assume that information will be used for materially unrelated purposes merely because the information is available through the Platform.Any proposed use involving behavioral advertising, cross-context behavioral advertising, sale of personal information, legally or similarly significant profiling, biometric processing, or other materially unrelated secondary purposes should be implemented only after appropriate legal and product review.

SitReady may collect and use address and other location information reasonably necessary to: • Operate Bookings; • Determine service-area eligibility; • Display relevant Booking opportunities; • Support safety and fraud prevention; and • Operate location-dependent Platform features. For Sitter arrival and departure verification, SitReady may request access to a Sitter's precise device location around the beginning and end of a confirmed Booking.This feature may be used to help verify that a Sitter arrived at or near the confirmed Booking location and to create arrival/check-in and departure/check-out timestamps.SitReady does not intend to continuously track a Sitter's precise location throughout a childcare Booking through this arrival and departure verification feature.Parents may receive an arrival, check-in, departure, or check-out status without receiving the Sitter's precise GPS coordinates.Precise location access requires the applicable device or operating-system permission.GPS and device-location information may be inaccurate or unavailable because of: • Device settings; • Signal conditions; • Network availability; • Battery-saving features; • Disabled permissions; or • Other technical limitations. SitReady may retain location-verification records and associated timestamps when reasonably necessary for Booking administration, safety, fraud prevention, lateness or No-Show review, payment disputes, legal compliance, or enforcement of Platform policies, subject to applicable retention practices and law.

SitReady may process and retain in-platform messages so that Parents and Sitters can coordinate childcare and so SitReady can operate, secure, support, and enforce the Platform.Users should understand that messages may be retained or reviewed when reasonably necessary for: • Safety; • Customer support; • Fraud prevention; • Dispute investigation; • Legal compliance; • Policy enforcement; or • Protection of Users and Children. SitReady does not represent that Platform messaging is end-to-end encrypted unless the applicable technical implementation actually provides such encryption.Access to message contents should be limited to authorized personnel and appropriate operational purposes.

SitReady intends to use Stripe and Stripe Connect, or another authorized payment provider, to facilitate Parent payments and Sitter payouts.Payment providers may independently collect and process information relating to: • Payments; • Identity verification; • Bank accounts; • Tax information; • Fraud prevention; • Verification; and • Connected payment accounts. SitReady may receive information such as: • Transaction identifiers; • Payment status; • Payout status; • Dispute and chargeback information; • Verification status; • Connected-account information; and • Other information necessary to administer marketplace payments. The information available to SitReady will depend on the final payment-provider configuration and applicable provider terms.

SitReady may require Sitter identity verification and background screening through Checkr or another authorized provider.SitReady should generally receive and retain only information reasonably necessary to: • Determine screening eligibility; • Display appropriate screening status; • Administer Sitter eligibility; • Address legitimate disputes; • Conduct safety reviews; or • Comply with applicable legal requirements. A background-screening badge or status displayed to Parents should communicate only the status or information that SitReady is legally permitted and appropriately authorized to display.SitReady should not unnecessarily disclose detailed screening-report information to Parents.Identity documents and screening reports require heightened access controls, security measures, retention rules, and appropriate handling procedures.

Sitter profile information intended for marketplace discovery may be visible to Parents or other authorized Users depending on Platform functionality. Reviews and ratings may be displayed to assist Users in evaluating Sitters.SitReady should distinguish between information intended to be profile-visible and information that should remain private, including: • Child Information; • Payment information; • Identity documents; • Screening information; • Private messages; • Safety records; and • Other sensitive account information. Users should not place sensitive information in public-facing reviews or profile text.This includes, without limitation: • A Child's full name; • Medical information; • Home access codes; • Financial information; or • Other sensitive personal information.

SitReady may disclose information when reasonably necessary to operate the Platform and provide requested services.Potential recipients may include:A. Booking ParticipantsInformation may be shared with the Parent or Sitter involved in a Booking when reasonably necessary to arrange or perform the applicable childcare services.B. Service ProvidersInformation may be disclosed to authorized service providers supporting SitReady's operations, including: • Payment processors; • Background-screening providers; • Identity-verification providers; • Cloud hosting providers; • Database providers; • Communications providers; • Analytics providers; • Security providers; • Customer-support providers; • Fraud-prevention providers; and • Professional-service providers. C. Safety, Legal, and Regulatory RecipientsInformation may be disclosed to: • Law enforcement; • Courts; • Regulators; • Child-protection authorities; • Emergency responders; or • Other appropriate authorities when legally required or reasonably necessary for safety, legal compliance, or protection of Users and Children.D. Corporate TransactionsInformation may be disclosed as part of a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction, subject to appropriate safeguards and applicable law.SitReady should not disclose Child Information or other sensitive User information to another User merely because that User has a SitReady Account. Access should be based on a legitimate Booking, safety, support, legal, or operational need.

SitReady does not intend to sell Child Information for monetary consideration or use Child Information for targeted advertising. SitReady also does not intend to intentionally sell Users' personal information for monetary consideration.However, privacy laws may define terms such as “sale” or “sharing” more broadly than an ordinary monetary transaction.Accordingly, SitReady's advertising, analytics, software development kits (“SDKs”), attribution tools, push-notification systems, social-login systems, cookies, and mobile measurement technologies should be reviewed against the actual production implementation before the Platform makes categorical representations concerning the sale or sharing of personal information.

The SitReady website and mobile applications may use: • Cookies; • Local storage; • Software development kits; • Analytics tools; • Crash-reporting tools; • Security technologies; and • Similar technologies. These technologies may be used to: • Keep Users signed in; • Remember settings; • Measure Platform performance; • Detect fraud; • Troubleshoot errors; • Understand feature usage; and • Maintain Platform security and functionality. The technologies actually deployed by SitReady may change over time.SitReady should provide applicable notices and controls required by law based on the technologies actually implemented.

SitReady should retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate operational, safety, fraud-prevention, tax, accounting, dispute, chargeback, screening, legal, and recordkeeping purposes.Different categories of information may require different retention periods.These categories may include: • Account and profile information; • Child Information; • Messages; • Booking records; • Payment records; • Screening records; • Identity documents; • Incident reports; • Emergency documentation; • Support records; • Reviews; and • Enforcement records. SitReady should not automatically apply one universal retention period to every category of information.

Where available, SitReady's Account settings may provide an Account-deletion function.Deleting an Account may begin the applicable account closure and deletion process but does not necessarily require immediate deletion of every record.SitReady may retain information where it has a lawful or legitimate reason to do so, including information necessary for: • Completed transactions; • Fraud or security investigations; • Disputes; • Chargebacks; • Tax or accounting requirements; • Safety incidents; • Legal holds; • Compliance obligations; or • Other legally permitted purposes. Where Applicable Law grants privacy rights, eligible individuals may have rights to request, as applicable: • Access; • Correction; • Deletion; • Portability; • Applicable opt-outs; and • Appeal of a denied privacy request where required. SitReady may take reasonable steps to authenticate privacy requests before processing them.

SitReady should maintain administrative, technical, and physical safeguards appropriate to the nature and sensitivity of information it processes.Safeguards may include: • Least-privilege access controls; • Secure authentication; • Encryption in transit; • Encryption at rest where appropriate; • Credential and secret management; • Security logging; • Vendor security controls; • Secure development practices; • Vulnerability management; • Incident-response procedures; • Backup and recovery controls; and • Heightened protections for Child, identity, screening, payment, and safety information. No security system can guarantee absolute security.Accordingly, SitReady does not represent that information can never be accessed, disclosed, altered, lost, or destroyed despite reasonable safeguards.

SitReady should maintain an internal incident-response process addressing suspected unauthorized: • Access; • Acquisition; • Disclosure; • Alteration; • Loss; or • Destruction of personal information.The incident-response process should address, as appropriate: • Internal escalation; • Preservation of evidence; • Vendor coordination; • Legal analysis; • Remediation; and • Legally required notifications. SitReady should evaluate applicable breach-notification requirements based on the types of information actually collected and stored and the jurisdictions in which affected individuals reside.

SitReady's initial service model is expected to focus on the United States, including Florida. The applicability of comprehensive state privacy laws may depend on statutory thresholds, exemptions, the nature of SitReady's activities, and other factors.SitReady will evaluate applicable privacy obligations as its business launches and expands.Where a privacy law applies, SitReady's privacy notices and privacy-request procedures should address applicable requirements concerning: • Categories of personal information; • Processing purposes; • Disclosures and recipients; • Sensitive personal information; • Consumer rights; • Privacy-request procedures; • Appeals; and • Applicable opt-out mechanisms. Even where a particular comprehensive privacy statute does not apply because SitReady falls below an applicable threshold or qualifies for an exemption, SitReady intends to provide accurate disclosures and follow its stated privacy practices.

This Privacy Policy is designed around SitReady's initial United States service model.SitReady does not represent that this Policy independently establishes compliance with international privacy regimes, including: • GDPR; • UK GDPR; • Canadian provincial privacy laws; or • Other foreign privacy frameworks. If SitReady intentionally expands its services internationally, applicable legal requirements should be separately evaluated, including requirements relating to: • Privacy notices; • Lawful bases; • International data transfers; • Contracts; • Consumer rights; and • Other applicable privacy obligations.

SitReady may update this Privacy Policy when: • The Platform changes; • Applicable laws change; • Service providers change; • Data-processing practices change; or • Other material operational circumstances require an update. Where required by Applicable Law, SitReady will provide appropriate notice of material changes.SitReady may maintain an effective date and version history for this Privacy Policy and preserve material historical versions for appropriate legal and operational records.

SitReady will provide an appropriate method for privacy-related questions and requests.The final published Privacy Policy should identify SitReady's verified: • Legal entity name; • Mailing address; • Privacy or support email address; and/or • In-app privacy-request method, together with any other privacy contact information required by Applicable Law.SitReady will not intentionally publish placeholder contact information.

Although SitReady intends to implement reasonable safeguards appropriate to the sensitivity of the information it processes, no electronic transmission, storage system, application, website, or security control can be guaranteed to be completely secure.Users should therefore take reasonable precautions when accessing their Accounts and submitting information through the Platform.

This Privacy Policy should be read together with SitReady's Terms of Service and other applicable Platform policies governing User conduct, Bookings, payments, screening, safety, childcare responsibilities, and use of the Platform.If a conflict exists between this Privacy Policy and another SitReady policy concerning the collection, use, disclosure, or protection of personal information, the applicable policy and governing terms should be interpreted consistently to the extent reasonably possible and otherwise according to the applicable order of precedence established by SitReady's governing Terms of Service.