Privacy Policy

Auction Rise, LLC

Effective: August 25, 2026

1. Scope of this policy

Auction Rise, Inc. ("Auction Rise," "we," "us," or "our") builds operating software for the wholesale automotive industry. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our marketing and informational websites — platform-rise.com, auction-rise.com, and title-rise.com, together with any subdomains and pages we operate for marketing and informational purposes (collectively, the "Sites") — and in connection with the sales and marketing activities described in Section 3.4, including outreach conducted by email, phone, and at industry events.

What this policy does not cover. This policy does not apply to:

• The Auction Rise platform (including app.auction-rise.com), the Title Rise application, the dealer portal, or any other password-protected product environment (collectively, the "Services"). Information processed in the Services — including customer records, vehicle and transaction data, and title documents — is governed by a separate privacy notice and by our agreement with the customer whose account holds that information. In the Services we generally act as a processor / service provider on behalf of our customers.
• Third-party websites, platforms, or tools we link to, which have their own privacy policies.
• Employment applications and personnel information, which are handled separately.

Your use of the Sites is also subject to our Terms of Use.

2. Who we are

Auction Rise, Inc., a Texas corporation, is the controller of the personal information described in this policy.

Auction Rise, Inc

Attn: Legal

2701 State St

Dallas, TX 75204

Email: legal@platform-rise.com

3. Information we collect

3.1 Information you give us

We collect information you choose to submit through the Sites, including when you fill out a contact form, request a demo or walkthrough, book time on our calendar, request early access to a product, or email us. Depending on the form, this may include:

• Identifiers — Name; business email address; phone number (optional)
• Professional information — Auction, dealership, or company name; role or title; company website
• Communications content — The message you write to us, and any subsequent correspondence
• Scheduling information — Meeting date and time, time zone, and any details you enter when booking a demo

Our forms are designed for business contact information. Please do not submit sensitive personal information, consumer records, title documents, or customer data through the Sites — those belong in the Services or in an agreed secure channel.

3.2 Information collected automatically

When you visit the Sites, we and our service providers may automatically collect:

• Device and connection data — IP address, browser type and version, operating system, device type, screen size, and language settings;
• Usage data — pages viewed, links clicked, referring URL, search terms that led you to us, date and time of access, and approximate location derived from IP address (city or region level). We do not collect precise geolocation;
• Server logs — technical records generated when your browser requests a page, retained for security, troubleshooting, and abuse prevention.

3.3 Cookies and similar technologies

We use cookies and similar technologies on the Sites in the following categories:

• Strictly necessary — required for the Sites to load, route traffic, balance load, and protect against abuse. These cannot be switched off.
• Analytics / performance — help us understand which pages are visited, how visitors navigate the Sites, and where they encounter problems, so we can improve them.
• Functional — remember preferences such as language or previously dismissed banners.
• Marketing / advertising — [INCLUDE ONLY IF APPLICABLE] used to measure the effectiveness of our campaigns and to show you our ads on other platforms.

Opt-out preference signals. We honor the Global Privacy Control (GPC) and similar browser- or device-based universal opt-out signals as a request to opt out of the sale or sharing of personal information and of targeted advertising for that browser or device. We process these signals automatically and do not require you to create an account to use them.

Do Not Track. Some browsers transmit "Do Not Track" (DNT) signals. Because no common industry standard for DNT has been adopted, the Sites do not currently respond to DNT signals. We do honor GPC as described above.

3.4 Information from other sources

We may receive information about you from:

• Our scheduling and form providers, when you submit a request;
• Social media platforms, if you interact with our pages there;
• Business contact and lead databases, and public sources such as company websites and industry directories, which we use to identify auctions and dealerships that may benefit from our products;
• Referrals and introductions from customers, partners, and industry contacts, and business cards or contact details exchanged at trade shows and industry events.

4. How we use personal information

We use personal information for the following purposes:

• Respond to you — answer questions, provide requested information, schedule and conduct demos and walkthroughs, and evaluate early access requests;
• Sales and marketing — send information about our products, industry updates, product announcements, and events, where permitted by law and subject to your right to opt out;
• Operate and improve the Sites — analyze usage, diagnose technical problems, develop new content, and improve design and performance;
• Security and abuse prevention — protect the Sites and our systems, detect and prevent fraud, scraping, and unauthorized access, and enforce our Terms of Use;
• Business administration — maintain internal records, evaluate business opportunities, and manage relationships with prospects and partners;
• Legal compliance — comply with applicable laws, respond to lawful requests, and establish, exercise, or defend legal claims.

Artificial intelligence. We do not use personal information collected through the Sites to train or fine-tune machine learning or artificial intelligence models, and we contractually require our service providers not to use it to train their models. [Confirm your vendor agreements actually say this — many standard analytics, CRM, and scheduling terms reserve service-improvement and model-training rights.]

Automated decision-making. We do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you.

Legal bases (for visitors in the EEA/UK, if applicable). Where the GDPR or UK GDPR applies, we rely on: our legitimate interests in operating and promoting our business and securing our Sites; consent for non-essential cookies and, where required, marketing emails; performance of a contract or steps taken at your request prior to entering one; and legal obligation where processing is required by law.

5. How we disclose personal information

We disclose personal information only as described here:

• Service providers. Vendors that perform functions on our behalf, such as website hosting and content delivery, form and email delivery, customer relationship management, meeting scheduling, analytics, and IT and security services. They are permitted to use the information only to provide services to us.
• Professional advisors. Lawyers, accountants, auditors, and insurers, where necessary and under duties of confidentiality.
• Legal and safety. When we believe disclosure is reasonably necessary to comply with a law, regulation, subpoena, court order, or governmental request; to enforce our Terms of Use or other agreements; or to protect the rights, property, safety, or security of Platform Rise, our customers, or the public.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business, subject to reasonable confidentiality protections. We will note any resulting change in how your information is handled.
• With your direction. When you ask us to share information or otherwise consent.

No sale or sharing. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under California and other U.S. state privacy laws. We have not done so in the preceding 12 months. We do not sell or share the personal information of consumers we know to be under 16.

6. Retention

We keep personal information only as long as we need it for the purposes described in this policy, and then delete it or de-identify it. We determine retention periods based on how long we are in active contact with you, whether you have asked us not to contact you, our legal and record-keeping obligations, and the period during which a legal claim could be brought. In practice:

• Inquiry and demo request records — retained for the duration of the sales conversation and for 24 months after the last interaction;
• Marketing contacts — retained until you opt out, plus a permanent suppression record so we can continue to honor your opt-out;
• Server logs and security records — retained for 90 days;
• Analytics data — retained for 14 months, per the settings of our analytics provider.

We may retain information longer where required by law or where necessary to establish, exercise, or defend legal claims.

7. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit (TLS) across the Sites and role-based access controls limiting who can view information submitted through our forms.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use care in what you send us through web forms and email.

8. Your choices

• Marketing email. Every marketing email includes an unsubscribe link. You can also email [privacy@platform-rise.com]. We may still send transactional messages, such as a reply to a question you asked.
• Cookies. Manage cookies through the cookie preference control on the Sites, if available, and through your browser settings. See Section 3.3.
• Phone and text. If you gave us a phone number and prefer we not use it, tell us and we will remove it from outreach. Reply STOP to any text message to stop texts.
• Access, correction, deletion. You can ask us to access, correct, or delete the information you submitted. See Section 9.

9. U.S. state privacy rights

Depending on where you live, state privacy laws — including in California, Colorado, Connecticut, Texas, Virginia, and a growing number of other states — may give you rights over your personal information. Where those laws apply to us, you may have the right to:

• Know / access the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients;
• Correct inaccurate personal information;
• Delete personal information we collected about you, subject to exceptions;
• Obtain a portable copy of information you provided to us;
• Opt out of the sale of personal information, of sharing for targeted or cross-context behavioral advertising, and of profiling that produces legal or similarly significant effects. As described in Sections 4 and 5, we do not engage in these activities;
• Limit the use of sensitive personal information. We do not collect sensitive personal information through the Sites;
• Be free from discrimination for exercising any of these rights.

How to submit a request. Email [privacy@platform-rise.com] with the subject line "Privacy Request," or use the request form at [platform-rise.com/privacy-request], and tell us which right you want to exercise and the email address or other identifier you used with us. We will verify your request by matching the information you provide against our records, and may ask for additional information if we cannot verify you. We will respond within the time required by applicable law (generally 45 days, extendable where permitted).

Authorized agents. You may use an authorized agent to submit a request. We may ask the agent for proof of authorization and may ask you to verify your identity directly.

Appeals. If we decline your request, you may appeal by replying to our decision or writing to [privacy@platform-rise.com] with the subject line "Privacy Appeal." We will respond within the period required by your state's law and explain our reasoning. If your appeal is denied, you may contact your state attorney general.

Categories under California law. In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email, phone, IP address); commercial and professional information (company, role, product interest); internet or network activity (browsing and interaction with the Sites); and inferences drawn from the foregoing about product interest. We collect these from you, automatically through your device, and from the sources listed in Section 3.4, and we use and disclose them for the purposes in Sections 4 and 5. We do not collect Social Security numbers, financial account numbers, government ID numbers, precise geolocation, or biometric data through the Sites.

California "Shine the Light." California residents may request information about disclosures of personal information to third parties for those third parties' direct marketing purposes. We do not make such disclosures.

Nevada. Nevada residents may submit a verified request that we not sell certain covered information. We do not sell covered information, but you may submit a request to [privacy@platform-rise.com].

Note on business contact information. Most state privacy laws other than California's exempt information collected in a purely business-to-business context, and many apply only to companies above certain volume thresholds. Where a law does not apply to us, we will still consider your request in good faith and will tell you how we handled it.

10. Visitors outside the United States

We are based in the United States, and the Sites are hosted and operated in the United States. If you access the Sites from outside the U.S., your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your country. Where required, we use appropriate safeguards for international transfers, such as the European Commission's Standard Contractual Clauses.

If you are in the EEA or UK, you may also have the right to lodge a complaint with your local supervisory authority.

REVIEW NOTE — DELETE BEFORE PUBLISHING: [DECISION NEEDED] A US-focused B2B marketing site can reasonably scope GDPR out entirely. If you keep this section and the GDPR legal bases in Section 4, you should also determine whether you need an Article 27 EU/UK representative and name them here. Half-in is the weakest position — pick one.

11. Children's privacy

The Sites are intended for business users who are at least 18 years old and are not directed to children. We do not knowingly collect personal information from children under 13, and consistent with our Terms of Use we do not intend to collect information from anyone under 18. If you believe a child has provided us information, contact [privacy@platform-rise.com] and we will delete it.

12. Third-party links

The Sites link to third-party websites, social media pages, and tools, including our scheduling provider and our profiles on X, LinkedIn, Instagram, and Facebook. We do not control those services, and this policy does not apply to them. Review their privacy policies before providing information.

13. Changes to this policy

We review this Privacy Policy at least every 12 months and may update it at other times. We will post the updated version here and revise the "Last updated" date. If we make material changes, we will provide additional notice, such as a banner on the Sites or an email to contacts on our list where appropriate. Your continued use of the Sites after an update means you accept the revised policy.

14. Contact us

Questions about these Terms:

Auction Rise, Inc.

Attn: Legal

2701 State St

Dallas, TX 75204

Email: legal@platform-rise.com