ADVANTEDGE

PRIVACY POLICY

Langston Digital LLC | advantedge.cloud

Effective Date: January 1, 2026 | Version 1.0

This Privacy Policy explains how Langston Digital LLC, operating as AdvantEdge, collects, uses, shares, and protects personal information. It covers the AdvantEdge platform (advantedge.services), the AdvantEdge marketing website (advantedge.cloud), and our related services. Please read it carefully. By using our services, you acknowledge the practices described here. This Privacy Policy is incorporated by reference into the AdvantEdge Terms of Service.

1. WHO WE ARE AND WHO THIS POLICY COVERS

Langston Digital LLC ("Langston Digital," "AdvantEdge," "we," "us," or "our") is a Virginia limited liability company that provides a multi-tenant field service management platform. This Privacy Policy applies to four categories of individuals:

• Subscribers: Businesses that purchase an AdvantEdge subscription, and the individuals who register on their behalf.
• Authorized Users: Employees, contractors, or agents of a Subscriber whom the Subscriber authorizes to use the platform.
• End-Customers: Individuals who book or receive services from a Subscriber through the AdvantEdge platform (for example, homeowners scheduling a car wash, lawn care visit, or plumbing service).
• Visitors: Anyone who visits the AdvantEdge marketing website at advantedge.cloud, including prospective customers and the general public.

2. OUR ROLE: CONTROLLER VS. PROCESSOR

Privacy laws distinguish between a "controller" (or "business," under California law) — the entity that decides why and how personal information is processed — and a "processor" (or "service provider") that processes information on behalf of a controller. AdvantEdge’s role differs depending on whose data is involved.

2.1 Subscriber, Authorized User, and Visitor Data. For information about Subscribers, Authorized Users, and Visitors, AdvantEdge acts as the controller. We decide what to collect, how to use it, and how to protect it.

2.2 End-Customer Data. For information about End-Customers (such as homeowners booking services), the Subscriber business acts as the controller and AdvantEdge acts as the processor. The Subscriber decides what End-Customer data to collect and how to use it. AdvantEdge processes that data only as needed to provide the platform.

2.3 What This Means for End-Customers. If you are an End-Customer and want to exercise privacy rights with respect to your personal information (such as access, deletion, or correction), you should generally direct your request to the Subscriber business that booked or provided your service. AdvantEdge will assist Subscribers in responding to such requests, and you may also contact us at privacy@advantedge.services if you cannot reach the Subscriber.

3. INFORMATION WE COLLECT

3.1 Information We Collect from Subscribers

• Account information: business name, primary contact name, email address, phone number, business address, industry/vertical, and subscription tier.
• Authentication credentials: usernames and hashed passwords (we never store passwords in readable form).
• Billing information: billing contact, billing address, and partial payment card details (full card numbers are tokenized and stored by Stripe, not by AdvantEdge).
• Communication and support records: messages exchanged with our support team, feedback, and survey responses.
• Configuration data: services offered, pricing, staff list, business hours, and other settings the Subscriber configures.

3.2 Information We Collect from Authorized Users

• Profile information: name, email address, phone number, role, and assigned permissions.
• Authentication credentials: usernames and hashed passwords.
• Device information: mobile device identifiers, push notification tokens (via Firebase), and operating system information.
• Location data: GPS coordinates when on a job, used to record time-on-site and to verify service delivery. Location data is collected only while an Authorized User is actively logged in and assigned to a booking.
• Activity logs: actions taken in the platform (bookings created, status changes, etc.), timestamps, and IP addresses.

3.3 Information We Process About End-Customers

AdvantEdge processes the following End-Customer information on behalf of Subscribers:

• Contact information: name, email address, phone number, and service address.
• Booking and service history: services booked, dates, staff assigned, completion status, and any photos or notes the Subscriber’s staff record on the job.
• Payment information: tokenized payment card details (handled by Stripe), transaction history, and tips.
• Loyalty and feedback: loyalty points balance, post-service reviews, and ratings.
• Communications: messages exchanged with the Subscriber via the platform, including booking confirmations and service updates.

3.4 Information We Collect from Marketing Site Visitors

• Automatically collected data: IP address, browser type, device type, operating system, referring URL, pages visited, and timestamps.
• Lead form data: when you submit a contact form, request a demo, or sign up for updates, we collect the information you provide (typically name, email, business name, and any message).
• Cookies and similar technologies: we use a limited set of cookies for site functionality and aggregate analytics. See Section 8 for details.

4. HOW WE USE INFORMATION

We use the information described above for the following purposes:

• To provide and operate the AdvantEdge platform, including authenticating users, processing bookings, sending notifications, and routing payments.
• To bill Subscribers and process subscription payments through Stripe.
• To communicate with Subscribers and Authorized Users about their accounts, including service updates, security alerts, and billing notices.
• To respond to inquiries, provide customer support, and resolve issues.
• To monitor, secure, and improve the platform, including detecting and preventing fraud, abuse, and security incidents.
• To develop new features and improve existing ones, including AI Suite features (see Section 7).
• To send marketing communications to Subscribers and prospective customers, where permitted by law. Recipients can opt out of marketing emails at any time.
• To comply with legal obligations, enforce our agreements, and protect our rights and the rights of others.

5. HOW WE SHARE INFORMATION

We share personal information in the limited circumstances described below. We do not sell personal information for monetary consideration, and we do not share personal information for cross-context behavioral advertising.

5.1 Service Providers and Sub-Processors

We engage trusted third-party service providers to help us operate the platform. These service providers process personal information only on our instructions and are contractually bound to protect it. Our current sub-processors are:

We may add or change sub-processors over time. A current list is maintained at advantedge.cloud/subprocessors and Subscribers will receive notice of material changes.

5.2 Sharing with Subscribers

End-Customer information is shared with the Subscriber business that booked the service. This is the core function of the platform: when an End-Customer books a service, the Subscriber needs the End-Customer’s information to deliver that service. Subscribers are responsible for handling End-Customer information in accordance with their own privacy policies and applicable law.

5.3 Legal and Safety Disclosures

We may disclose personal information when we reasonably believe disclosure is necessary to: (a) comply with applicable law, regulation, court order, subpoena, or government request; (b) enforce the AdvantEdge Terms of Service or other agreements; (c) protect the rights, property, or safety of AdvantEdge, our Subscribers, or others; or (d) detect, prevent, or address fraud, security, or technical issues.

5.4 Business Transfers

If Langston Digital is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, personal information may be transferred to the successor entity. We will provide notice of any such transfer through email and/or a prominent notice on the platform.

5.5 With Your Direction

We may share personal information with other parties at the direction of the Subscriber or Authorized User, such as integrations with third-party tools the Subscriber chooses to enable.

6. DATA RETENTION

We retain personal information for as long as it is needed to provide the platform, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention practices include:

• Subscriber and Authorized User account data is retained while the account is active and for up to twelve (12) months after account closure, unless a longer period is required by law.
• End-Customer data is retained for as long as the Subscriber maintains an active subscription. Upon termination of the Subscriber’s account, End-Customer data is made available for export per the Terms of Service and then deleted in accordance with our standard retention schedule.
• Billing and transaction records are retained for at least seven (7) years to meet tax and accounting obligations.
• Marketing site analytics data is retained in aggregated form for up to twenty-four (24) months.
• Backups containing personal information may persist for up to ninety (90) days after deletion from the live system, after which they are overwritten.

7. AI SUITE FEATURES

AdvantEdge offers optional AI-powered features as part of the AI Suite add-on (the "AI Features"). These features include AI assistants for tasks such as customer support, copywriting, marketing, scheduling, and data analysis. The following terms apply when a Subscriber enables AI Features:

7.1 How the AI Features Work. When an Authorized User interacts with an AI Feature, the prompts, content, and context the user provides may be transmitted to a third-party large language model provider (currently Anthropic PBC) to generate the response. Responses are then displayed within the AdvantEdge platform.

7.2 Use by the Model Provider. Anthropic processes the data we send only to generate responses, in accordance with its commercial terms. Subscribers should review Anthropic’s applicable terms and privacy practices, available at anthropic.com, for additional information.

7.3 Use by AdvantEdge. AdvantEdge may use prompts, responses, and aggregated usage data from the AI Features to improve, evaluate, and develop our own AI Features and platform capabilities. We do not use Subscriber or End-Customer data to train foundation models operated by third-party providers.

7.4 Sensitive Information. Subscribers and Authorized Users should not enter Personal Health Information (PHI), financial account numbers, government identification numbers, or other highly sensitive data into AI Features. Inputs that contain such data are still processed by AI Features but should be avoided.

7.5 Opting Out. AI Features are an optional add-on. Subscribers who do not subscribe to the AI Suite will not have data processed through AI Features. Subscribers can disable specific AI Features at any time through their account settings.

8. COOKIES AND TRACKING TECHNOLOGIES

We use a limited set of cookies and similar technologies on the AdvantEdge marketing website and within the platform. Cookies are small text files placed on your device that help us recognize you and remember preferences.

8.1 Strictly Necessary Cookies. These cookies are required for the platform and website to function properly, including maintaining authenticated sessions and recording security events. They cannot be disabled.

8.2 Functional Cookies. These cookies remember preferences such as display settings and selected tenant context.

8.3 Analytics Cookies. We use first-party analytics to understand aggregate usage patterns of the marketing website and the platform. We do not use third-party advertising cookies, and we do not engage in cross-site or cross-device tracking for advertising purposes.

8.4 Your Choices. Most browsers let you control cookies through their settings. Disabling strictly necessary cookies may break parts of the platform. We honor Global Privacy Control (GPC) signals from your browser as an opt-out of any "sale" or "sharing" of personal information, where applicable.

9. DATA SECURITY

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and destruction. These safeguards include encryption of data in transit and at rest, role-based access controls, row-level security in our database, regular security reviews, vendor due diligence, and incident response procedures.

No security measure is perfect. While we work hard to protect personal information, we cannot guarantee absolute security. If you believe your account or personal information has been compromised, contact us immediately at security@advantedge.services.

10. YOUR PRIVACY RIGHTS

Depending on where you live, you may have specific rights regarding your personal information. The rights described below apply to information for which AdvantEdge is the controller. If you are an End-Customer, see Section 2.3 for guidance on exercising rights.

10.1 California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know what personal information we have collected, the sources, the purposes, and the categories of recipients.
• Right to access a copy of the specific personal information we have collected about you in the prior twelve (12) months.
• Right to delete personal information we have collected, subject to certain exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the "sale" or "sharing" of personal information. AdvantEdge does not sell personal information for monetary consideration, and we do not share personal information for cross-context behavioral advertising.
• Right to limit the use of sensitive personal information. AdvantEdge uses sensitive personal information (such as account credentials and precise location for Authorized Users on the job) only for permitted business purposes.
• Right to non-discrimination for exercising your privacy rights. We will not deny services, charge different prices, or provide a different level of service in retaliation for exercising your rights.

10.2 Virginia Residents (VCDPA)

If you are a Virginia resident, the Virginia Consumer Data Protection Act gives you the following rights:

• Right to confirm whether we are processing your personal data and to access that data.
• Right to correct inaccuracies in your personal data.
• Right to delete personal data provided by or obtained about you.
• Right to obtain a copy of personal data you previously provided in a portable, readily usable format.
• Right to opt out of (a) targeted advertising, (b) the sale of personal data, and (c) profiling in furtherance of decisions that produce legal or similarly significant effects. AdvantEdge does not engage in any of these activities with respect to Subscriber, Authorized User, or Visitor data.
• Right to appeal a refusal of a privacy request. If we deny your request, you may appeal by replying to our denial within sixty (60) days. If your appeal is also denied, you may contact the Virginia Attorney General at oag.state.va.us.

10.3 Other US State Residents

Residents of Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and other states with comprehensive privacy laws have rights similar to those described above, including the rights to access, delete, correct, and obtain a copy of their personal information, and to opt out of targeted advertising and the sale of personal information. We honor verified requests from residents of these states. Specific rights vary by state; we apply the protections required by the law of your state of residence.

10.4 How to Exercise Your Rights

To exercise any of the rights above, contact us at privacy@advantedge.services with the following information:

• Your full name and the email address associated with any AdvantEdge account.
• The state in which you reside.
• The specific right you are exercising and any relevant details (for example, the data you wish to access or delete).

We may need to verify your identity before responding, typically by confirming information already associated with your account. We will respond within forty-five (45) days, with a possible extension of an additional forty-five (45) days where reasonably necessary, and we will notify you of any extension.

You may also designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your identity directly with us.

11. CHILDREN’S PRIVACY

AdvantEdge is a business platform and is not directed to children under sixteen (16). We do not knowingly collect personal information from children under sixteen. If you believe a child under sixteen has provided personal information to us, please contact privacy@advantedge.services and we will take appropriate steps to investigate and, where appropriate, delete the information.

12. INTERNATIONAL USERS

AdvantEdge operates in the United States and our infrastructure is located in the United States. If you access the platform from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence. AdvantEdge does not currently offer the platform in the European Economic Area, the United Kingdom, or other jurisdictions that require GDPR-equivalent compliance.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will provide at least thirty (30) days’ advance notice by email to the registered account holder and/or by posting a prominent notice on the platform and at advantedge.cloud/privacy. The "Effective Date" at the top of this policy reflects the most recent revision. Your continued use of the platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

14. CONTACT US

If you have questions about this Privacy Policy, want to exercise privacy rights, or have any concerns about how we handle personal information, please contact us:

Langston Digital LLC

Operating as: AdvantEdge

Privacy: privacy@advantedge.services

Legal: legal@advantedge.services

Security: security@advantedge.services

Marketing site: advantedge.cloud

Application: advantedge.services

— END OF PRIVACY POLICY —