Privacy Policy

This Privacy Policy explains how Klauris Innovations LLC, doing business as Solenva ("Solenva," "we," "us," or "our"), collects, uses, discloses, sells, or shares Personal Information and how you may exercise available privacy choices and rights. By using or accessing the Services, you acknowledge the practices described in this Privacy Policy.

1. SCOPE OF THE PRIVACY POLICY

This policy covers our treatment of information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household ("Personal Information") in connection with our Services. It applies to visitors, customers, prospective customers, and other consumers who interact with www.getsolenva.com, its subdomains, Solenva customer accounts and checkout experiences, email communications, products, and related services (collectively, the "Services"). Your use of the Services is also subject to our Terms of Use. This Policy does not apply to third-party websites, products, or services that we do not own or control, even if they are linked from the Services.

2. KEY TERMS

We, us, our: Klauris Innovations LLC, doing business as Solenva.

Our privacy contact: Klauris Innovations LLC, 520 Broad Street, 4th Floor, Newark, NJ 07102; hello@getsolenva.com.

Personal information: Any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household.

Sensitive personal information: Personal information revealing a consumer's social security number, driver's license and passport numbers, account numbers and credentials, precise geolocation, racial or ethnic origin, religious beliefs, or union membership, personal information concerning a consumer's health, sex life, or sexual orientation, contents of a consumer's mail, email and text messages where the business is not the intended recipient, genetic data, biometric information, and citizenship or immigration status.

Biometric information: An individual's physiological, biological, or behavioral characteristics, including information about an individual's deoxyribonucleic acid (DNA), that is used or is intended to be used singly or with each other or with other identifying data, to establish individual identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.

3. PERSONAL INFORMATION WE COLLECT ABOUT YOU

In the preceding 12 months, we have collected, or expect to collect in connection with the launch and operation of the Services, the following categories and specific types of consumer Personal Information:

4. HOW YOUR PERSONAL INFORMATION IS COLLECTED

We collect most Personal Information directly from you when you browse the website, create an account, join a mailing list, communicate with us, place an order, request support, or otherwise use the Services. We may also collect information from the following categories of sources:

• Directly from you, including information entered on the website, at checkout, or in communications with us
• Automatically from your browser or device through cookies, pixels, local storage, server logs, and similar technologies
• Shopify and Vercel, which support our storefront, checkout, customer-account, and website-hosting functions
• Shopify Payments and PayPal, which process payments and provide transaction, fraud-prevention, and payment-status information
• USPS and other fulfillment or delivery providers used to ship and track orders
• Google Analytics and related Google services used for website measurement, analytics, and advertising
• Meta Pixel and related Meta services used for advertising measurement, audience creation, and ad personalization
• Advertising networks, social networks, and analytics providers that receive information through our configured technologies
• Other parties at your direction or with your consent, such as a payment method or service you choose to use

5. WHY WE USE YOUR PERSONAL INFORMATION

We collect, use, disclose, and, in limited circumstances described below, sell or share consumer Personal Information for the following business or commercial purposes:

• Providing, processing, and fulfilling products, orders, subscriptions, returns, refunds, and related transactions
• Creating, maintaining, servicing, and securing customer accounts and preferences
• Processing payments, confirming transactions, detecting fraud, and protecting the security and integrity of the Services
• Shipping orders, providing delivery updates, and resolving fulfillment issues
• Providing customer service and responding to questions, requests, complaints, and other communications
• Operating, maintaining, debugging, and improving the website, checkout, products, and customer experience
• Measuring website traffic, engagement, conversions, and the effectiveness of our content and campaigns
• Sending transactional messages and, where permitted, marketing communications that you may unsubscribe from
• Providing and measuring advertising, including targeted or cross-context behavioral advertising where permitted
• Conducting internal research, quality assurance, forecasting, and product or service development
• Complying with legal, regulatory, tax, accounting, recordkeeping, and law-enforcement requirements
• Carrying out a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or other business transaction, or for another purpose disclosed to you with your consent

Detailed Purpose Table

6. WHO WE SHARE YOUR PERSONAL INFORMATION WITH

In the preceding 12 months, we have disclosed, or expect to disclose in connection with operating the Services, Personal Information to the following categories of recipients:

• Website and commerce providers, including Shopify and Vercel
• Payment and fraud-prevention providers, including Shopify Payments and PayPal
• Shipping and delivery providers, including USPS
• Analytics and advertising providers, including Google and Meta
• Professional advisers and service providers, such as attorneys, accountants, auditors, consultants, and information-security providers
• Banks, insurers, and brokers when reasonably necessary for business operations
• Government authorities, regulators, courts, or law enforcement when required or permitted by law
• Actual or prospective parties to a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business
• Other parties at your direction or with your consent

We require service providers and contractors to handle Personal Information only for specified purposes and to maintain appropriate protections. Third parties such as independent advertising platforms and payment providers may also process information under their own privacy policies where they act as separate businesses or controllers.

We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.

We may also need to share some personal information with other parties, such as potential buyers of some or all of our business or during a re-structuring. We will typically anonymize information, but this may not always be possible. The recipient of the information will be bound by confidentiality obligations.

7. CATEGORIES OF PERSONAL INFORMATION WE SOLD OR SHARED

We do not sell Personal Information for money. However, under California law, allowing advertising and analytics technologies such as Meta Pixel and certain Google services to collect identifiers and activity for cross-context behavioral advertising may be considered "sharing" and, in some circumstances, a "sale." In the preceding 12 months, we have shared, or expect to share, the following categories:

• Identifiers and customer-record information, such as IP address, device or cookie identifiers, and hashed or otherwise matched contact identifiers
• Commercial information, such as interactions with products, carts, purchases, and advertisements
• Internet or other electronic network activity, such as browsing, clickstream, referral, and ad-interaction information
• Approximate geolocation inferred from an IP address
• Inferences about interests, preferences, and likely engagement
• We do not knowingly sell or share sensitive Personal Information for cross-context behavioral advertising
• We do not knowingly sell or share the Personal Information of consumers under 16 years of age

8. CATEGORIES OF PERSONAL INFORMATION WE DISCLOSED FOR A BUSINESS PURPOSE

In the preceding 12 months, we have disclosed, or expect to disclose, the following categories of Personal Information for the business purposes described in this Policy:

• Identifiers
• Personal information categories listed in the California Customer Records statute
• Protected classification information limited to age-confirmation information, if collected
• Commercial information
• Internet or other electronic network activity information
• Approximate geolocation data
• Inferences drawn from other Personal Information
• Sensitive Personal Information limited to account credentials, payment-related information processed by payment providers, and communications you direct to us

9. HOW LONG YOUR PERSONAL INFORMATION WILL BE KEPT

We retain Personal Information only for as long as reasonably necessary for the purposes described in this Policy, including the following general retention criteria:

• Order, payment-status, shipping, tax, and accounting records are generally retained for up to seven years after the relevant transaction, or longer if required by law
• Account, customer-service, and inquiry information is generally retained while the relationship remains active and for up to three years after account closure or the last substantive interaction, unless a longer period is required
• Marketing information is retained until you unsubscribe, withdraw consent, or remain inactive for approximately three years; we may retain limited suppression information to honor your opt-out
• Cookie, analytics, advertising, security-log, and device information is retained according to our configured settings, legal requirements, and provider policies; records of privacy requests and responses are generally retained for at least 24 months

When Personal Information is no longer reasonably necessary, we will delete, deidentify, or securely dispose of it, subject to legal, security, fraud-prevention, backup, and dispute-resolution needs.

10. YOUR RIGHTS UNDER THE CCPA/CPRA (APPLICABLE TO CALIFORNIA RESIDENTS)

The California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), applies only to businesses that meet specified statutory thresholds. Klauris Innovations LLC does not currently believe it meets those thresholds. If and to the extent the CCPA/CPRA or another applicable privacy law applies, California residents may exercise the rights described below free of charge. We may also choose to honor a request voluntarily where reasonably feasible.

Right to Know About Personal Information Collected

You have the right to know, and request disclosure of:

• The categories of personal information we have collected about you, including sensitive personal information
• The categories of sources from which the personal information is collected
• Our business or commercial purpose for collecting, selling, or sharing personal information
• The categories of third parties to whom we disclose personal information, if any
• The specific pieces of personal information we have collected about you

Depending on the request and applicable law, we may not be required to:

• Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained
• Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information
• Provide the personal information to you more than twice in a 12-month period

Right to Know About Personal Information Sold, Shared, or Disclosed

In connection with any personal information we may sell, share, or disclose to a third party for a business purpose, you have the right to know:

• The categories of personal information about you that we sold or shared and the categories of third parties to whom the personal information was sold or shared
• The categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom the personal information was disclosed for a business purpose

Right to Opt-Out of Sale or Sharing

You may have the right to opt out of the sale of Personal Information or the sharing of Personal Information for cross-context behavioral advertising. We will process applicable opt-out preference signals, including Global Privacy Control, as required by law. If you opt out, we will not ask you to opt back in for at least 12 months where that waiting period applies.

To opt out, visit www.getsolenva.com and select "Your Privacy Choices" in the website footer. Use the preference center to turn off sale, sharing, or targeted-advertising technologies. You may also enable a recognized browser-based opt-out preference signal such as Global Privacy Control.

Right to Limit Use of Sensitive Personal Information

California law may provide a right to limit certain uses and disclosures of sensitive Personal Information when a business uses that information beyond specified permitted purposes. Solenva does not currently use or disclose sensitive Personal Information for purposes that trigger this limitation right.

Because we do not currently engage in uses that trigger the limitation right, we do not provide a separate "Limit the Use of My Sensitive Personal Information" link. If our practices change, we will update this Policy and provide the required method.

Right to Deletion

Subject to certain exceptions, on receipt of a verifiable request from you, we will:

• Delete your personal information from our records
• Direct any service providers or contractors to delete your personal information from their records
• Direct third parties to whom the business has sold or shared your personal information to delete your personal information unless this proves impossible or involves disproportionate effort

Please note that we may not delete your personal information if it is reasonably necessary for specific enumerated purposes including transaction completion, security, debugging, legal compliance, research, internal use, or legal obligations.

Right of Correction

If we maintain inaccurate personal information about you, you have the right to request us to correct that inaccurate personal information. Upon receipt of a verifiable request from you, we will use commercially reasonable efforts to correct the inaccurate personal information.

Protection Against Retaliation

You have the right to not be retaliated against by us because you exercised any of your rights under the CCPA/CPRA. This means we cannot, among other things:

• Deny goods or services to you
• Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties
• Provide a different level or quality of goods or services to you
• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services

11. HOW TO EXERCISE YOUR RIGHTS

To exercise an applicable right, email hello@getsolenva.com with the subject line "Privacy Request" or write to Klauris Innovations LLC, Attn: Privacy Request, 520 Broad Street, 4th Floor, Newark, NJ 07102. Sale, sharing, and targeted-advertising opt-outs may also be submitted through the "Your Privacy Choices" link in the footer of www.getsolenva.com.

Please note that you may only make a CCPA/CPRA-related data access or data portability disclosure request twice within a 12-month period.

When contacting us, please provide:

• Enough information to identify you and locate relevant records, such as your full name, email address, shipping address, and order number, if applicable
• Information reasonably necessary to verify the request by matching details already associated with your account or transactions; please do not send government identification unless we specifically request it and it is reasonably necessary
• A description of the right you wish to exercise and the information to which the request relates

We may deny or limit a request if we cannot reasonably verify your identity, the request is fraudulent or excessive, or an exception applies. An authorized agent may submit a request on your behalf, but we may require proof of authorization and may verify your identity directly, as permitted by law.

Personal Information collected to verify or process a privacy request will be used only for verification, request processing, security, fraud prevention, and required recordkeeping.