Privacy Policy

I. What Our Privacy Policy Covers

This privacy policy explains how Purple Blocks LLC dba pynmo, a Missouri limited liability company and the operator of pynmo (“pynmo,” “us,” “we,” or “our”), through the Service (our website and app) and otherwise, uses, collects, shares, and otherwise processes personal information. We may provide additional or supplemental privacy policies in connection with specific activities or events.

Some U.S. states have enacted legislation extending specific data privacy rights to residents. Please refer to Section IX, titled “Your Rights,” to determine whether you reside in any of the states that have enacted data privacy legislation and to Sections XII through XIX for more information on those specific rights.

The Service may link to other websites. We do not control the privacy practices of third-party websites or applications that we do not own.

II. What Personal Information We Collect

To provide the Service, we collect the following categories of personal information. Personal information is information that identifies, relates to, describes, or can be associated with you.

Personal information does not include publicly available information, de-identified or aggregated consumer information, or information excluded from the scope of applicable privacy laws, such as health or medical information covered by the Health Insurance Portability and Accountability Act (HIPAA) or personal information covered by certain sector-specific privacy laws, such as the Fair Credit Reporting Act (FCRA).

Personal information that has been sufficiently anonymized through aggregation with other information is not personal information for the purpose of this policy.

III. How We Collect Your Personal Information

We collect your personal information from various sources, including but not limited to the following.

Directly from You

We collect personal information you provide when you create an account, complete or edit your profile, write posts, upload a résumé, or send support correspondence, appeals, or feedback.

Automatically Using Cookies and Online Tracking Technologies

When you use the Service (our website and app), we collect first-party technical and usage data and use cookies and similar technologies. See Section IV for more information.

From Our Service Providers and Affiliates

If you choose Google or GitHub sign-in, we receive the identifier and email associated with that provider; from Google, we also receive basic profile information.

IV. Cookies and Similar Online Tracking Technologies

We use strictly necessary cookies and similar technologies for sign-in sessions, security, and load balancing. These cookies cannot be turned off. We also use your browser's storage to remember your drafts and settings.

Analytics and error monitoring are first-party. We do not use Google Analytics, Meta pixels, or third-party analytics or advertising SDKs. We do not use advertising or cross-site tracking cookies. Google Fonts requests disclose your IP address to provide typefaces.

We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the preceding twelve months. The first time you visit, a notice at the bottom of every page tells you that pynmo uses cookies and similar browser storage to keep you signed in, remember your drafts and settings, and keep the Service secure, and links to this policy. You acknowledge it by selecting “Got it”. It offers no choices, because the Service uses only cookies and storage it needs to work. Your acknowledgement is kept in your browser’s local storage, not in a cookie. If you need to contact us about cookies, use privacy@pynmo.com.

V. How We Use Your Personal Information

We use personal information for the following purposes and on the following bases:

Account, Profile, and Posts

We use personal information to create and run your account and show your profile and posts, which is necessary to provide the Service you signed up for.

Résumé upload and automated skill extraction are based on your consent, given by choosing to upload a file. You can withdraw consent at any time by deleting the résumé; withdrawal does not affect processing already carried out.

Personalizing by Phase

We use your Phase to personalize your experience, which is necessary to provide the Service you signed up for. Your Phase remains visible only to you.

Moderation, Abuse Prevention, and Platform Safety

We use personal information for moderation, abuse prevention, and platform safety as necessary to keep the community safe and to meet legal duties.

Security, Fraud Prevention, and Debugging

We use personal information for security, fraud prevention, and debugging as necessary to operate and secure the Service.

Product Analytics and Improvement

We use personal information for product analytics and improvement to improve the Service, with consent where required.

Service and Marketing Emails

We send service emails, including security alerts and policy changes, as necessary to run your account and meet legal duties. If we send marketing emails, we do so with your consent, which you may withdraw at any time.

Coaching Sessions and Payments

We use payment information to take payment for coaching sessions, refund members, and pay coaches. We use coaching session records to decide whether the coach and the member each attended. Both are necessary to provide the Service you signed up for.

We may also use personal information to respond to legal requests as required by law. Where a purpose is not strictly necessary to run the Service, you can object or opt out as described in Section IX. We retain personal information for as long as necessary to fulfill the purposes described in this policy, considering the amount, nature, and sensitivity of the information; the potential risk of harm; the purposes for processing; whether those purposes can be achieved through other means; and applicable legal, regulatory, tax, accounting, or other requirements. Account and profile data is retained while your account is active. Posts are retained while your account is active or until you delete them. Uploaded résumé files are not stored: they are read in memory and discarded when the request ends. Extracted résumé text is not stored and is held only during extraction. Accepted skills are retained until you remove them or delete your account. Coaching session records are retained for 12 months after the session and then deleted automatically. Payment records for coaching sessions are retained while your account exists and are deleted with it; Stripe keeps its own records under its own privacy policy. If you delete your account, your name in Google Meet call records and the text of your technical issue reports are removed immediately. Server and security logs are retained for 7 days on our infrastructure providers’ rotation and are not exported or extended. Member reports and blocks are removed when the concerned account is deleted. A record of a blocked account, consisting of the email address, display name at the time, reason, and date, is retained for as long as the block stands. Records required by law are retained as required by applicable law. On account deletion, soft delete anonymizes your profile immediately, changes your display name to “Former member,” deletes skills, interests, and links, and keeps the account record and email address for 30 days for restoration only before deleting them. Hard delete is immediate and final. In either case, your posts and comments remain in the community without attribution. Encrypted backups may retain deleted data until they rotate out in 7 days and are not used to restore deleted accounts.

VI. How We Disclose Your Personal Information

We disclose personal information only in the circumstances described below.

Recipients and Processors

We disclose personal information to the following recipients:

All processors act on our instructions under written agreements.

Business Transfers

We may disclose personal information in connection with a merger, acquisition, or sale of assets. We will notify you before your information becomes subject to a different privacy policy.

Other Members

Other members can see your display name, avatar, role, accepted skills where you display them, and your posts. They cannot see your phase, email address, or résumé.

Legal Process

We may disclose personal information in response to valid subpoenas, warrants, court orders, government inquiries, or investigations, or to comply with applicable laws and regulations. We may also disclose information to establish, exercise, or protect our rights; defend against legal claims; or protect the rights or safety of members or the public.

Sensitive Personal Information

We do not ask for sensitive personal information. Résumés may incidentally contain sensitive information, which is handled as described in Section VII. We do not sell personal information or share it with data brokers, recruiters, or advertisers.

We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the preceding twelve months.

VII. Automated Decision-Making Technology

We may use automated decision-making technology (ADMT), including rules-based systems, machine learning models, artificial intelligence tools, profiling, fraud and security tools, and personalization or recommendation systems. pynmo does not currently use ADMT to make significant decisions or decisions with legal or similarly significant effects about you.

Before using ADMT to make a significant decision about you, we will provide any pre-use notice and related choices required by applicable law.

Resume Upload and AI-Based Skill Extraction

Résumé upload and AI-based skill extraction are optional and under your control. When you choose to upload a résumé or CV, we read the text in memory; the file is never written to our storage and is discarded when the request ends. We transmit the résumé text to Anthropic PBC through the Anthropic API under Anthropic’s Commercial Terms of Service and Data Processing Addendum. Processing takes place in the United States. Assume that the whole résumé content is transmitted, including names, contact details, employment history, education, and dates. We do not send your posts, phase, password, or other account data to Anthropic. Anthropic processes the content only to return results to us, does not use API content to train its models, and deletes inputs and outputs within 30 days of receiving or generating them, unless it must keep them longer to enforce its Usage Policy or to comply with the law. We cannot delete Anthropic’s copy on demand. Suggestions are shown to you for review, and nothing is added to your profile until you accept, edit, or reject each item.

AI output is a suggestion, not a decision. We do not use extracted skills or other AI output to score, rank, screen, or grade members, and no element of the output determines your access to employment, credit, housing, insurance, or any comparable benefit. Subject to applicable law, you may opt out of ADMT-based significant decisions, access information about how ADMT is used in decisions concerning you, and request human review of a decision generated by ADMT. You may ask a human at privacy@pynmo.com to review, correct, or delete anything the system produced about you.

Profiling

Where we engage in profiling that produces decisions with legal or similarly significant effects, you may have the rights described here under applicable law. pynmo does not currently engage in profiling in furtherance of decisions that produce legal or similarly significant effects.

Sensitive Information in Résumés and Corrections

Résumés may contain photographs, birth dates, nationality or visa status, marital status, religious or political affiliations, health or disability information, and referee contact details. We do not want or use this information and recommend removing it before upload. Incidental processing occurs if it is uploaded. You can type skills manually instead, with no effect on the rest of the Service. When you correct an extracted skill, we record the correction without identifiers: only our skill vocabulary, the matching phrase, whether the skill was kept, removed, or added, and the date. Only our vocabulary and anonymous counts may be sent to an AI model to improve our skill vocabulary; no résumé, name, or traceable information is sent.

pynmo does not use posts, profile information, or résumés to train AI models, ours or anyone else’s. Our vendor agreements prohibit it. We will seek explicit opt-in consent before any change; silence is not consent.

VIII. How We Protect Your Personal Information

We use encryption in transit through TLS and encryption at rest, hashed passwords, role-based staff access, logging of administrative access, and regular dependency and infrastructure patching. Uploaded images are held in access-restricted storage. Résumés are never stored.

We maintain reasonable and appropriate physical, electronic, and procedural safeguards, but no system is perfectly secure. If a breach affects your personal information and poses a risk to you, we will notify you and the relevant authority as required by law.

Where Your Data Is Stored

The Service is operated from the United States. Supabase stores account, profile, post, and uploaded-file data in Northern Virginia (us-east-1); Anthropic processes résumé text in the United States; Google Cloud Vision checks profile pictures in the United States; and Resend delivers email from Northern Virginia (us-east-1). Cloudflare’s global edge routing may pass through data centers outside the United States based on where you connect, without moving stored data outside the United States. We do not otherwise transfer personal information outside the United States.

IX. Your Rights

Managing Communication Preferences

You can stop receiving promotional emails by emailing us at privacy@pynmo.com; sending us your instructions to Purple Blocks, LLC at 2 Lindworth Dr, Saint Louis 63124, Missouri; or selecting the unsubscribe link at the bottom of marketing email communications you receive from us.

Deleting Your Posts and Account

You can delete any of your own posts at any time. Deleting your account does not delete your posts or comments; they remain in the community without attribution. If you want a post gone, delete it before closing your account.

Seeing and Downloading Your Data

If you have an account, “Your data” on your account page shows a summary of the personal information we hold about you and lets you download a copy in a portable format (JSON), once a day. Anyone can also submit a request through our web form at https://pynmo.com/privacy-request or by emailing privacy@pynmo.com. We respond within 45 days, extendable once with notice where the law allows.

You have additional rights regarding how we use your personal information if you are a resident of one of the following states:

• California;
• Colorado;
• Connecticut;
• Delaware;
• Florida;
• Indiana;
• Iowa;
• Kentucky;
• Maryland;
• Minnesota;
• Montana;
• Nebraska;
• New Hampshire;
• New Jersey;
• Oregon;
• Rhode Island;
• Tennessee;
• Texas;
• Utah;
• Virginia.

Please see the section below, naming your state, for additional rights afforded to you, per your state’s consumer data privacy act.

X. Children’s Privacy

The Service is not for people under 16. We do not knowingly collect personal information from people under 16, and we comply with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has given us personal information, write to privacy@pynmo.com and we will delete it. We do not sell or share personal information of anyone under 16.

XI. Communicating With Us

Purple Blocks LLC

2 Lindworth Dr, Saint Louis 63124, Missouri

Privacy: privacy@pynmo.com

General: reports@pynmo.com or legal@pynmo.com

XII. Additional Information for California Residents

California law requires us to disclose the following information regarding our privacy practices.

California Shine the Light

We do not disclose personal information to third parties for their own direct marketing purposes. California residents may request information concerning the categories of personal information, if any, that we disclose to third parties or affiliates for their direct marketing purposes by submitting a written request to us at the address below.

Purple Blocks LLC

2 Lindworth Dr, Saint Louis 63124, Missouri

privacy@pynmo.com

Categories of Personal Information We Collect and Our Purposes for Collection and Use

You can find a list of the categories of personal information that we collect in the “What Personal Information We Collect” section above. For details regarding the sources from which we obtain personal information, please see the “How We Collect Your Personal Information” section above. We collect and use personal information for the business or commercial purposes described in the “How We Use Your Personal Information” section above.

Categories of Recipients of Personal Information

We disclose personal information for business or commercial purposes to the categories of recipients listed below:

• Individuals. Your personal information will be provided to those employees, agents, their assistants and those who process information or transactions in connection with the products or services being provided by us to you.
• Other companies as necessary to process your business. Your personal information will be provided to third-party administrators and vendors utilized by us to provide services to you and effect transactions that you requested or authorized.
• Where required by law or regulation. We may be required by law or regulation to disclose your personal information to a third party, for example, in response to a subpoena or to comply with legal requirements and regulations.
• As otherwise authorized or permitted by law.
• As authorized by you. Upon your direction or with your permission we may share your information with a third party, other than as described in this notice.

For more information on how your information is disclosed, please see the “How We Disclose Your Personal Information” section, which provides more detail on our service providers and third parties with whom we interact. We may also need to disclose any of the above categories of information pursuant to Legal Process as described in the “How We Disclose Your Personal Information” section. As stated in the “How We Use Your Personal Information” section above, we typically retain your personal information for the period necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.

California Consumer Privacy Act (CCPA)

Under the CCPA, California residents have specific rights pertaining to the management and control of their personal information. Those rights are detailed below.

The Right to Opt Out of Cookies and Sale/Sharing Using Online Tracking Technologies

We do not sell or share personal information using online tracking technologies. We do not use cookies or similar technologies for advertising or cross-site tracking, so there is no cookie choice to make or withdraw. Our cookie notice is described in Section IV.

Your request to opt out of “sale” / “sharing” will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us.

California residents may opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.

If you would like us to make the connection between your account and your opt-out of “sale” / “sharing” of your personal information request, we recommend you submit information by email to privacy@pynmo.com.

When you email us regarding opting-out of the “sale” / “sharing” of your personal information, please provide the following information for each individual:

First name, middle initial and last name

Address, city, state and zip code

Telephone number (if applicable)

The Right to Limit the Use of Sensitive Personal Information

California residents have the right to limit the use and disclosure of sensitive personal information. We use or disclose sensitive personal information only to: (1) provide goods and services in line with your requests and expectations, (2) identify security incidents, (3) inhibit malicious, deceptive, fraudulent or illegal actions directed at us or our affiliates, (4) ensure physical safety, (5) display short-term non-personalized advertising, (6) provide services like account maintenance or customer service, or (7) verify or maintain the quality and safety of products and services we offer. We do not use sensitive personal information for inferring characteristics about you.

The Right to Access, Correct, and Delete Personal Information

You may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. If you are a resident of California you have the rights to access, correct, and delete personal information. These rights may be limited in some circumstances by applicable law.

Access and Deletion

You can submit a request to access or delete your personal information, or withdraw consent, by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Corrections

You can correct information related to your account by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Data Portability

You may submit a request for a copy of the information collected about you by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

California residents may request personal information collected in at least the last 12-months and may do so up to twice per year per customer.

Responding to Requests

Once you have submitted your request, we will respond within the timeframe permitted by the applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

Identity Verification

For us to process some requests, we will need to verify your identity to confirm that the request came from you. We may contact you by phone or e-mail to verify your request. Depending on your request, we will ask for information such as your name, an e-mail address that you have used with us or our affiliates, or a phone number you have used with us or our affiliates. For certain requests, we may also ask you to provide details about recent transactions or interactions with us and a declaration under penalty of perjury to confirm your identity.

Authorized Agent

If you are a resident of California you may designate an authorized agent to submit a request on your behalf to access or delete your personal information. To do so, you must: (1) provide that authorized agent written and signed permission to submit such request; and (2) verify your own identity directly with us. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights under the CCPA, including by: denying you goods or services; charging you different prices or rates for goods or services; providing you a different level or quality of goods or services; or suggesting that you will receive a different price or rate for goods or services, or a different level or quality of goods or services.

Appealing Requests

If we decline to take action on your request, we will inform you of our reasons for doing so, and you may appeal that decision. To submit an appeal, please contact us using any of the methods listed in the “Communicating With Us” section. We will respond to all appeal requests as soon as we reasonably can, and no later than legally required.

Automated Decision-Making Technology

California consumers may have rights regarding ADMT, including pre-use notice, opt-out, and access rights when applicable. pynmo does not currently use ADMT to make significant decisions.

To the extent required, pynmo conducts risk assessments for processing activities involving ADMT, sensitive personal information, and sales of personal information, and submits attestations to the California Privacy Protection Agency by applicable deadlines.

As of January 1, 2025, neural data is a category of sensitive personal information under California law.

XIII. Additional Information for Colorado, Delaware, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, and Oregon Residents

Under the privacy acts of the above states, residents of these states have specific rights pertaining to their personal information. Those rights are detailed below.

The Right to Opt Out of Cookies and Sale/Sharing Using Online Tracking Technologies

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. We do not use cookies or similar technologies for advertising or cross-site tracking, so there is no cookie choice to make or withdraw. Our cookie notice is described in Section IV.

Your request to opt out of “sale” / “sharing” will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us.

Residents of these states may opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. If you would like us to make the connection between your account and your opt-out of “sale” / “sharing” of your personal information request, we recommend you submit information by email to privacy@pynmo.com.

When you email us regarding opting-out of the “sale” / “sharing” of your personal information, please provide the following information for each individual:

First name, middle initial and last name

Address, city, state and zip code

Telephone number (if applicable)

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. If our practices change, we will provide the opt-out methods required by law.

The Right to Access, Correct, and Delete Personal Information

You may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. If you are a resident of these states you have the rights to access, correct, and delete personal information under the applicable law (when these laws become effective). These rights may be limited in some circumstances by applicable law.

Access and Deletion

You can submit a request to access or delete your personal information, or withdraw consent, by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Corrections

You can correct information related to your account by:

• Submitting your request in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Data Portability

Residents of these states may request a copy of the information collected about them by following the steps outlined in the section above.

Identity Verification

For us to process some requests, we will need to verify your identity to confirm that the request came from you. We may contact you by phone or e-mail to verify your request. Depending on your request, we will ask for information such as your name, an e-mail address that you have used with us or our affiliates, or a phone number you have used with us or our affiliates. For certain requests, we may also ask you to provide details about your recent transactions or interactions with us.

Authorized Agent

Residents of these states may designate an authorized agent to submit a request on your behalf to access or delete your personal information. To do so, you must: (1) provide that authorized agent written and signed permission to submit such request; and (2) verify your own identity directly with us. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Responding to Requests

Once you have submitted your request, we will respond within the timeframe permitted by the applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

Appealing Requests

If you are a resident of one of these states, you may appeal our decision to your request regarding your personal information. To do so, please contact us in any of the ways listed in the “Communicating With Us” section. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.

Opt-in Consent for Sensitive Personal Information

Residents of these states must opt-in and consent to the collection or processing of sensitive personal information. For these states, sensitive personal information includes physical or mental health information, immigration information, demographic information (such as race, ethnicity, religion or sexual orientation), precise geolocation data, genetic information, biometric information, and data from children under the age of 13 years old. We will not collect this information from residents of these states without their consent and opt-in.

Oregon residents: We will provide notice and an opportunity to opt out before processing your sensitive personal information, as permitted by Oregon law.

Profiling and Automated Decision-Making

Residents of certain states, including Minnesota and Montana, have the right to opt out of profiling in furtherance of any automated decision that produces a legal or similarly significant effect, including decisions that are not solely automated. pynmo does not currently engage in profiling in furtherance of decisions that produce legal or similarly significant effects.

Where feasible, consumers may question the result of profiling, be informed of the reasoning behind the decision, and review the personal data processed for profiling.

pynmo conducts data protection assessments for profiling activities that present a heightened risk of harm.

Consumers in Minnesota have the right to request a list of specific third parties to whom their personal data has been disclosed.

Colorado residents: pynmo does not currently use covered ADMT. You may request access to and correction of inaccurate personal data used by ADMT, as provided by applicable law. Requests may be submitted using any of the methods listed in the “Communicating With Us” section.

XIV. Additional Information for Connecticut Residents

Connecticut residents have specific rights pertaining to the management and control of their personal information. Those rights are detailed below.

The Right to Opt Out of Cookies and Sale/Sharing Using Online Tracking Technologies

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. We do not use cookies or similar technologies for advertising or cross-site tracking, so there is no cookie choice to make or withdraw. Our cookie notice is described in Section IV.

Your request to opt out of “sale” / “sharing” will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us.

Connecticut residents may opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. If you would like us to make the connection between your account and your opt-out of “sale” / “sharing” of your personal information request, we recommend you submit information by email to privacy@pynmo.com.

When you email us regarding opting-out of the “sale” / “sharing” of your personal information, please provide the following information for each individual:

First name, middle initial and last name

Address, city, state and zip code

Telephone number (if applicable)

The Right to Access, Correct, and Delete Personal Information

You may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. If you are a resident of Connecticut you have the rights to access, correct, and delete personal information under applicable law. These rights may be limited in some circumstances by applicable law.

Access and Deletion

You can submit a request to access or delete your personal information, or withdraw consent, by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Corrections

You can correct information related to your account by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Data Portability

You may submit a request for a copy of the information collected about you by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Third-Party Disclosure List

Connecticut residents may request information about disclosures to third parties. pynmo does not sell personal information.

Profiling and Automated Decision-Making

Connecticut residents have the right to opt out of profiling in furtherance of any automated decision that produces any legal or similarly significant effect concerning the consumer, including decisions that are not solely automated. pynmo does not currently engage in profiling in furtherance of decisions that produce legal or similarly significant effects.

This right extends to decisions made “on behalf of” a controller by processors or service providers.

Where feasible, consumers may: (i) question the result of the profiling; (ii) be informed of the reason that the profiling resulted in a certain decision; (iii) review the personal data processed for profiling purposes; and (iv) for housing-related decisions, correct inaccurate data and have the decision re-evaluated.

pynmo conducts data protection assessments for profiling activities that present a heightened risk of harm, as required by applicable law.

High-Risk Artificial Intelligence Systems

pynmo does not currently deploy high-risk artificial intelligence systems to make, or to be a substantial factor in making, consequential decisions concerning Connecticut residents.

Sensitive Personal Information

Connecticut’s definition of sensitive data includes neural data; disability or treatment status; status as nonbinary or transgender; genetic or biometric data; certain financial account information, including account numbers in combination with a security code or password; government-issued identification numbers, including Social Security numbers; and precise geolocation data.

Processing of sensitive data requires consumer consent and must be reasonably necessary in relation to the disclosed purpose. The sale of sensitive data requires separate consumer consent.

Use of Personal Data to Train Artificial Intelligence

pynmo does not use personal information to train large language models or other artificial intelligence systems.

Identity Verification

For us to process some requests, we will need to verify your identity to confirm that the request came from you. We may contact you by phone or e-mail to verify your request. Depending on your request, we will ask for information such as your name, an e-mail address that you have used with us or our affiliates, or a phone number you have used with us or our affiliates. For certain requests, we may also ask you to provide details about your recent transactions or interactions with us.

Authorized Agent

Connecticut residents may designate an authorized agent to submit a request on their behalf to access or delete their personal information. To do so, you must: (1) provide that authorized agent written and signed permission to submit such request; and (2) verify your own identity directly with us. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Responding to Requests

Once you have submitted your request, we will respond within the timeframe permitted by applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

Appealing Requests

If you are a resident of Connecticut, you may appeal our decision regarding your request about your personal information. To do so, please contact us in any of the ways listed in the “Communicating With Us” section. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.

XV. Additional Information for Maryland Residents

Under the Maryland Online Data Privacy Act (MODPA), Maryland residents have specific rights pertaining to the management and control of their personal information. Those rights are detailed below.

The Right to Opt Out of Cookies and Sale/Sharing Using Online Tracking Technologies

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. We do not use cookies or similar technologies for advertising or cross-site tracking, so there is no cookie choice to make or withdraw. Our cookie notice is described in Section IV.

Your request to opt out of “sale” / “sharing” will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us.

Maryland residents may opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. If our practices change, we will provide the opt-out methods required by law. Maryland residents may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. pynmo does not currently engage in profiling in furtherance of decisions that produce legal or similarly significant effects.

The Right to Access, Correct, and Delete Personal Information

You may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. If you are a resident of Maryland you have the rights to access, correct, and delete personal information. These rights may be limited in some circumstances by applicable law.

Access and Deletion

You can submit a request to access or delete your personal information, or withdraw consent, by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Corrections

You can correct information related to your account by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Data Portability

You may submit a request for a copy of the information collected about you by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Responding to Requests

Once you have submitted your request, we will respond within the timeframe permitted by the applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

Identity Verification

For us to process some requests, we will need to verify your identity to confirm that the request came from you. We may contact you by phone or e-mail to verify your request. Depending on your request, we will ask for information such as your name, an e-mail address that you have used with us or our affiliates, or a phone number you have used with us or our affiliates. For certain requests, we may also ask you to provide details about recent transactions or interactions with us.

Authorized Agent

If you are a resident of Maryland you may designate an authorized agent to submit a request on your behalf to access or delete your personal information. To do so, you must: (1) provide that authorized agent written and signed permission to submit such request; and (2) verify your own identity directly with us. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Sensitive Personal Information and Data Minimization

We limit our collection of personal information of Maryland residents to what is reasonably necessary and proportionate to provide or maintain a specific product or service you request. We collect, process, or share sensitive personal information of Maryland residents only where strictly necessary to provide or maintain a specific product or service you request, and we do not sell sensitive personal information of Maryland residents.

Appealing Requests

If you are a resident of Maryland, you may appeal our decision regarding your request about your personal information. To do so, please contact us in any of the ways listed in the “Communicating With Us” section. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.

XVI. Additional Information for Texas Residents

Under the TDPSA, Texas residents have specific rights pertaining to the management and control of their personal information. Those rights are detailed below.

The Right to Opt Out of Cookies and Sale/Sharing Using Online Tracking Technologies

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. We do not use cookies or similar technologies for advertising or cross-site tracking, so there is no cookie choice to make or withdraw. Our cookie notice is described in Section IV.

Your request to opt out of “sale” / “sharing” will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us.

Texas residents may opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.

If you would like us to make the connection between your account and your opt-out of “sale” / “sharing” of your personal information request, we recommend you submit information by email to privacy@pynmo.com.

When you email us regarding opting-out of the “sale” / “sharing” of your personal information, please provide the following information for each individual:

First name, middle initial and last name

Address, city, state and zip code

Telephone number (if applicable)

The Right to Opt Out of Targeted Advertising and Profiling

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. If our practices change, we will provide the opt-out methods required by law. Texas residents may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. pynmo does not currently engage in profiling in furtherance of decisions that produce legal or similarly significant effects.

The Right to Access, Correct, and Delete Personal Information

You may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. If you are a resident of Texas you have the rights to access, correct, and delete personal information. These rights may be limited in some circumstances by applicable law.

Access and Deletion

You can submit a request to access or delete your personal information, or withdraw consent, by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Corrections

You can correct information related to your account by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Data Portability

You may submit a request for a copy of the information collected about you by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Opt-in Consent for Sensitive Personal Information

Texas residents must opt-in and consent to the collection or processing of sensitive personal information. For Texas residents, sensitive personal information includes physical or mental health information, immigration information, demographic information (such as race, ethnicity, religion or sexual orientation), precise geolocation data, genetic information, biometric information, and data from children under the age of 13 years old. We will not collect this information from Texas residents without their consent and opt-in.

Responding to Requests

Once you have submitted your request, we will respond within the timeframe permitted by the applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

Identity Verification

For us to process some requests, we will need to verify your identity to confirm that the request came from you. We may contact you by phone or e-mail to verify your request. Depending on your request, we will ask for information such as your name, an e-mail address that you have used with us or our affiliates, or a phone number you have used with us or our affiliates. For certain requests, we may also ask you to provide details about recent transactions or interactions with us.

Authorized Agent

If you are a resident of Texas you may designate an authorized agent to submit a request on your behalf to access or delete your personal information. To do so, you must: (1) provide that authorized agent written and signed permission to submit such request; and (2) verify your own identity directly with us. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Appealing Requests

If you are a resident of Texas, you may appeal our decision regarding your request about your personal information. To do so, please contact us in any of the ways listed in the “Communicating With Us” section. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.

XVII. Additional Information for Indiana, Kentucky, Rhode Island, Tennessee, and Virginia Residents

Under the privacy acts of the above states, residents of these states have specific rights pertaining to their personal information. Those rights are detailed below.

The Right to Opt Out of Cookies and Sale/Sharing Using Online Tracking Technologies

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. We do not use cookies or similar technologies for advertising or cross-site tracking, so there is no cookie choice to make or withdraw. Our cookie notice is described in Section IV.

Your request to opt out of “sale” / “sharing” will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us.

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. If our practices change, we will provide the opt-out methods required by law.

The Right to Opt Out of Profiling

Residents of these states may opt out of the processing of their personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning them. To submit a request, please submit your information in our web form here https://pynmo.com/privacy-request or email us at privacy@pynmo.com.

The Right to Access, Correct, and Delete Personal Information

You may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. If you are a resident of these states you have the rights to access, correct, and delete personal information under the applicable law (when these laws become effective). These rights may be limited in some circumstances by applicable law.

Access and Deletion

You can submit a request to access or delete your personal information, or withdraw consent, by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Corrections

You can correct information related to your account by:

• Submitting your request in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Data Portability

Residents of these states may request a copy of the information collected about them by following the steps outlined in the section above.

Identity Verification

For us to process some requests, we will need to verify your identity to confirm that the request came from you. We may contact you by phone or e-mail to verify your request. Depending on your request, we will ask for information such as your name, an e-mail address that you have used with us or our affiliates, or a phone number you have used with us or our affiliates. For certain requests, we may also ask you to provide details about your recent transactions or interactions with us.

Authorized Agent

Residents of these states may designate an authorized agent to submit a request on your behalf to access or delete your personal information. To do so, you must: (1) provide that authorized agent written and signed permission to submit such request; and (2) verify your own identity directly with us. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Responding to Requests

Once you have submitted your request, we will respond within the timeframe permitted by the applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

Appealing Requests

If you are a resident of one of these states, you may appeal our decision regarding your request about your personal information. To do so, please contact us in any of the ways listed in the “Communicating With Us” section. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.

Opt-in Consent for Sensitive Personal Information

Residents of these states must opt-in and consent to the collection or processing of sensitive personal information. For these states, sensitive personal information includes physical or mental health information, immigration information, demographic information (such as race, ethnicity, religion or sexual orientation), precise geolocation data, genetic information, biometric information, and data from children under the age of 13 years old. We will not collect this information from residents of these states without their consent and opt-in.

XVIII. Additional Information for Iowa and Utah Residents

Under the Iowa Consumer Data Protection Act (ICDPA) and Utah Consumer Privacy Act (UCPA), residents of Iowa and Utah have specific rights pertaining to their personal information. Those rights are detailed below.

The Right to Opt Out of Cookies and Sale/Sharing Using Online Tracking Technologies

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. We do not use cookies or similar technologies for advertising or cross-site tracking, so there is no cookie choice to make or withdraw. Our cookie notice is described in Section IV.

Your request to opt out of “sale” / “sharing” will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us.

The Right to Access and Delete Personal Information

You may have the right to request access to and receive details about the personal information we maintain about you, obtain a copy of, or delete your personal information. If you are a resident of Iowa or Utah you have the right to access and delete personal information under applicable law. These rights may be limited in some circumstances by applicable law.

Access and Deletion

You can submit a request to access or delete your personal information, or withdraw consent, by:

• Submitting your information in our web form here https://pynmo.com/privacy-request; or
• Emailing us at privacy@pynmo.com.

Data Portability

You may submit a request for a copy of the information collected about you by following the steps outlined in the section above.

Responding to Requests

Once you have submitted your request, we will respond within the timeframe permitted by the applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

Identity Verification

For us to process some requests, we will need to verify your identity to confirm that the request came from you. We may contact you by phone or e-mail to verify your request. Depending on your request, we will ask for information such as your name, an e-mail address that you have used with us or our affiliates, or a phone number you have used with us or our affiliates. For certain requests, we may also ask you to provide details about your recent transactions or interactions with us.

Appealing Requests (Iowa Residents)

If you are a resident of Iowa, you may appeal our decision regarding your request about your personal information. To do so, please contact us in any of the ways listed in the “Communicating With Us” section. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.

Sensitive Personal Information

We will not process sensitive personal information of Iowa or Utah residents without first providing clear notice and an opportunity to opt out, or, where required by applicable law, obtaining your consent.

XIX. Additional Information for Florida Residents

Under the Florida Digital Bill of Rights (FDBR), Florida residents have specific rights pertaining to the management and control of their personal information. pynmo voluntarily extends the following rights to Florida residents.

The Right to Opt Out of Cookies and Sale/Sharing Using Online Tracking Technologies

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. We do not use cookies or similar technologies for advertising or cross-site tracking, so there is no cookie choice to make or withdraw. Our cookie notice is described in Section IV.

The Right to Access, Correct, and Delete Personal Information

If you are a resident of Florida, you have the rights to access, correct, and delete personal information. You may submit a request by: submitting your information in our web form here https://pynmo.com/privacy-request; or emailing us at privacy@pynmo.com. These rights may be limited in some circumstances by applicable law.

The Right to Opt Out of Targeted Advertising and Profiling

We do not sell your personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. If our practices change, we will provide the opt-out methods required by law. Florida residents may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. pynmo does not currently engage in profiling in furtherance of decisions that produce legal or similarly significant effects.

Opt-in Consent for Sensitive Personal Information

Residents of Florida must opt-in and consent to the collection or processing of sensitive personal information. For these states, sensitive personal information includes physical or mental health information, immigration information, demographic information (such as race, ethnicity, religion or sexual orientation), precise geolocation data, genetic information, biometric information, and data from children under the age of 13 years old. We will not collect this information from residents of these states without their consent and opt-in.

Appealing Requests

If you are a resident of Florida, you may appeal our decision regarding your request about your personal information. To do so, please contact us in any of the ways listed in the “Communicating With Us” section. We respond to all appeal requests as soon as we reasonably can, and no later than legally required.

XX. International Privacy Laws

If you are visiting the Site from outside the United States, please be aware that you are sending information (including Personal Data) to the United States where our servers are located. That information may then be transferred within the United States or back out of the United States depending on the type of information and how it is stored by us. We will hold and process your Personal Data in accordance with privacy laws in the United States and this Privacy Policy. Please note that privacy laws in the United States may not be the same as, and in some cases may be less protective than, the privacy laws in your country, and while in the United States Personal Data may be subject to lawful access requests by government agencies.

XXI. Changes to Privacy Policy

We may occasionally make changes to this Privacy Policy. If we wish to use your Personal Data for a new purpose not covered by this Privacy Policy, we will provide you with a new Privacy Policy explaining this new use prior to commencing the processing of your Personal Data pursuant to the new Privacy Policy and setting out the relevant purposes and processing conditions by posting the new Privacy Policy to our website.

For more information about our privacy policy, you can contact us at:

Purple Blocks LLC

2 Lindworth Dr, Saint Louis 63124, Missouri

Privacy: privacy@pynmo.com

General: reports@pynmo.com or legal@pynmo.com

© 2026 pynmo