Legal

Privacy Policy

Version 1.1 · effective August 17, 2026

Key Privacy Disclosures

1. intendle is operated from the United States, while its primary server is located in Frankfurt, Germany. Personal data may therefore be processed in both the United States and Germany and may be transferred across borders.
2. Stripe processes payments and payouts. intendle does not receive or store complete payment-card numbers, card security codes, or equivalent full payment credentials.
3. Verification materials receive heightened protection. Screenshots of a seller’s profile or sales figures on another platform are treated as confidential business information, encrypted, access-restricted, access-logged, never published, and automatically deleted 30 days after the verification review is completed.
4. intendle does not sell personal information and does not disclose personal information for third-party behavioral advertising. The platform does not use third-party advertising networks.
5. intendle does not use artificial intelligence or machine-learning systems to operate Discover or to make verification and moderation decisions. Discover is rule-based; verification and moderation decisions are made or reviewed by a human administrator.
6. Public content is public. Profile information, public posts, portfolios, listings, names, images, follower relationships, and other information that a user chooses to publish may be viewed by other users and visitors according to the relevant visibility settings.
7. Deletion is not absolute where law or transaction integrity requires retention. Order, invoice, payout, tax, fraud-prevention, and moderation records may remain after account deletion when required by law or necessary to preserve transaction records, resolve disputes, or protect the platform and its users.
8. Traffic-source analytics are deliberately limited. intendle may store the kind of source through which content was reached and, only when the source is an external website, that website's domain. intendle does not store the full referring address, search terms, or external page content. These signals may be used for seller analytics, Marketplace performance measurement, rule-based recommendations, ranking, and content discovery.

1. Scope of This Privacy Policy

This Privacy Policy explains how intendle collects, uses, stores, discloses, and protects personal information when a person visits intendle.com, creates or uses an account, publishes content, follows other users, sends messages, applies for verification, operates a Books store or Art Marketplace shop, buys an item, receives a payout, contacts support, reports content, or otherwise uses intendle services (collectively, the “Services”).

This Policy applies to information processed by intendle in connection with the Services. It does not govern the independent privacy practices of a seller, payment provider, email provider, shipping carrier, external merchant, or other third party. In particular, editorial book recommendations that link to external merchants are governed by the privacy policies of those merchants once a visitor leaves intendle.

This Policy should be read with the Terms of Service, Cookie Policy, Verification Policy, Payment and Payout Terms, applicable Seller Agreement, and the other intendle legal documents.

2. Who Is Responsible for Your Personal Information

intendle is currently operated as a sole proprietorship in the United States. For purposes of this Policy, that legal operator is the controller or business responsible for personal information processed by intendle.

In this Policy, “intendle,” “we,” “us,” and “our” refer to the legal operator identified above. “You” refers to the person whose personal information is processed. A seller may act as a separate controller or business for buyer information received to fulfill an order, comply with tax and consumer law, or manage a buyer relationship. Sellers must use buyer information only for lawful transaction-related purposes and in accordance with the Seller Agreements.

3. Definitions

4. Personal Information We Collect

The categories below describe information intendle collects or may collect depending on how you use the Services. Not every category applies to every person.

4.1 Visitors Without an Account

• Network and log data: Internet Protocol address, request time, pages or resources requested, referring page, response status, and security-related server events.
• Device and browser data: device identifier, device type, operating system, browser type and version, language, and general technical configuration.
• Usage data: pages viewed, time and date of access, navigation path, and interactions necessary to operate, secure, and diagnose the Services.
• Traffic-source and discovery data: a normalized source category describing how content or a page was reached and, for external sources only, the referring hostname, as described in Section 4.9.
• Cookie and preference data: technically necessary session, security, and consent preferences as described in the Cookie Policy.

4.2 Registered Users

• Account information: name, email address, password hash, account identifier, account status, registration date, and accepted legal-document versions.
• Profile information: display name, biography, profile image, location information you choose to provide, professional role, art categories, languages, education, skills, links, and other profile fields.
• Age-related information: date of birth and records used to apply the platform’s age rules.
• Security information: login timestamps, devices, active sessions, two-factor authentication setting, recovery events, and records of suspected unauthorized access.
• Social information: public posts, comments or other eligible contributions, follower and following relationships, reactions, verified-purchase reviews, seller responses to reviews, reports, and account visibility choices.
• Messages: direct messages, order-related messages, support communications, and attachments submitted through available communication features.
• Consent and contract records: date, time, account identifier, acceptance method, and version number for legal agreements, transaction consents, marketing choices, and digital-content acknowledgments.
• Usage, discovery, and Marketplace analytics: content and profile views, interactions, Marketplace discovery signals, and the limited Traffic Source fields described in Section 4.9 where the feature applies.

4.3 Images of People

• Information about the photographer or other rights holder where supplied.
• Consent, authorization, release, or rights information where requested in connection with a report, dispute, or moderation review.
• Information visible in an image, which may incidentally reveal characteristics about the person shown. Users must not upload an image unless they hold the required copyright and have the required permission from every identifiable person shown.

4.4 Sellers and Verification Applicants

• Identity and contact information: full legal name, postal address, telephone number, email address, and date of birth where required.
• Seller classification: artist, business, publisher, self-publisher, or gallery.
• Professional and commercial information: website, other sales platforms, professional role, business or publishing information, and information relevant to seller eligibility.
• Verification Materials: a short live video recorded in the application, company documents for organizations, links to social media profiles, optional screenshots of the applicant’s profile or sales figures on another platform, and other requested evidence. The live video is reviewed by people; intendle does not create a face template or other biometric identifier from it.
• Payout information: payout-account identifiers, payout status, and information needed by the payment provider to route funds. intendle should not store full bank-account credentials when the payment provider can store them directly.
• Tax information: tax status, tax identifiers or forms, and reporting information required by applicable law or the payment provider.
• Store and listing information: shop status, membership tier, published-title count, listings, prices, inventory, shipping settings, payout status, membership billing events, and seller-agreement acceptance records.
• Fulfillment information: shipping carrier, tracking number, shipment date, fulfillment status, buyer communications, and evidence used to resolve disputes.

4.5 Buyers

• Contact information: name, email address, and telephone number when required for order communications or delivery.
• Billing and delivery information: billing address, shipping address, delivery instructions, and country or region.
• Order information: items, seller, price, shipping charge, tax, total amount, order date, order status, refund status, dispute status, and order history.
• Payment records: payment-provider customer or payment identifiers, authorization and payment status, amount, currency, receipt, refund, chargeback, and fraud-prevention signals made available to intendle by Stripe.
• Transaction communications: messages between buyer and seller and communications with intendle concerning delivery, defects, non-delivery, returns, refunds, or disputes.
• Verified-purchase review information: a 1–5 star rating, optional written review, review date and moderation/report status, the related completed purchase used to verify eligibility, and any public seller response. intendle may display a verified-purchase indicator without publishing private order or payment details.

intendle does not receive or store complete payment-card numbers, card security codes, or equivalent complete card credentials. Those credentials are processed by Stripe or another expressly identified payment provider.

4.6 Content, Listings, and Community Activity

• Text, images, photographs, illustrations, previews, book files, metadata, artwork details, edition details, certificates, captions, tags, categories, prices, and other User Content.
• Publication status, revision history, withdrawal or deletion status, moderation status, and technical derivatives such as thumbnails or optimized images.
• Follower relationships, reactions, verified-purchase reviews, seller responses, reports, appeal submissions, and records of community or moderation actions.
• Information about intellectual-property ownership, licenses, releases, provenance, attribution, and rights where provided or requested.

4.7 Support, Reports, Moderation, and Legal Requests

• Support requests, complaint details, reports, evidence, correspondence, and resolution records.
• Moderation decisions, reasons, reviewer identity, dates, notices, appeal records, and outcomes.
• Copyright notices, counter-notices, identity and contact information supplied in legal notices, and repeat-infringer records.
• Fraud, security, sanctions, chargeback, and abuse indicators.
• Information contained in subpoenas, court orders, regulatory correspondence, law-enforcement requests, or other legal processes.

4.8 Information From Other Sources

intendle may receive personal information from Stripe concerning payment or payout status; from a buyer or seller involved in a transaction; from a user who reports content or an account; from publicly accessible professional or commercial sources used to verify information supplied by an applicant; and from competent authorities or legal representatives. intendle does not purchase consumer marketing lists and does not obtain personal information from advertising networks.

If you choose Continue with Google, Google LLC provides intendle with your name, your email address, and Google’s confirmation that the address is verified. intendle does not receive your Google password.

4.9 Traffic Source and Discovery Signals

intendle may record a limited discovery-source signal when a page, profile, Marketplace listing, or other eligible content is viewed. The Traffic Source feature stores only:

• the kind of source: the feed, the Marketplace, Marketplace search, an artist profile, a direct visit, or an external website; and
• the external domain: only for an external website, its domain, such as instagram.com, google.com, or pinterest.com.

For this Traffic Source feature, intendle does not store the full referring address, search terms, or external page content. These signals may be attached to the related view and may be used for seller analytics, Marketplace performance measurement, rule-based recommendations, ranking and content discovery, fraud or abuse analysis, and service improvement.

Standard server and security logs are governed separately by the Network and log data disclosures above and the retention rules in Section 14.

5. Why We Use Personal Information and the Legal Bases

The following table describes the principal purposes for which intendle uses personal information. The “EEA/UK legal basis” column applies where the EU General Data Protection Regulation or UK GDPR requires a legal basis. More than one basis may apply to a processing activity, and the appropriate basis can depend on the context.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before withdrawal. Where processing is necessary to perform a contract or comply with law, intendle may be unable to provide the relevant feature if the required information is not supplied.

6. Public Information and Visibility

intendle is designed for professional visibility and self-promotion. Information you mark or submit as public may be visible worldwide to visitors and registered users. Depending on the feature and your settings, public information may include your display name, profile image, biography, professional role, location, portfolio, public posts, follower and following relationships, listings, book previews, artwork images, prices, seller type, verification status, verified-purchase reviews, public seller responses to reviews, and public shop information.

Messages, verification materials, payout information, tax information, full delivery addresses, and complete payment credentials are not public. Order information is shown only to the buyer, the relevant seller, intendle personnel with a need to know, and service providers or authorities as described in this Policy.

Removing content from public display does not necessarily remove transaction records, moderation records, notices already sent to other users, or temporary backup copies.

7. Verification Materials and Confidential Sales Information

Verification requires a separate and heightened level of protection because applicants may submit screenshots of profiles and sales figures from other platforms. Those screenshots may contain confidential commercial information and are treated as the applicant’s confidential business information.

7.1 What May Be Requested

• Full legal name, postal address, telephone number, email address, seller type, website, or other sales platform.
• Screenshots showing the applicant’s profile on another platform.
• Screenshots showing the applicant’s sales figures on another platform.
• Additional evidence reasonably necessary to confirm identity, role, rights, or eligibility, as described in the Verification Policy.

7.2 Protection Requirements

• Encryption: Verification Materials must be stored in encrypted form.
• Role-based access: access is limited to specifically authorized verification or security personnel with a need to know.
• Access logging: every access to Verification Materials is logged with the user or administrator identity, date, time, and action.
• No publication: Verification Materials and sales figures are never displayed on a public profile, shop, listing, report, or promotional surface.
• No independent third-party disclosure: Verification Materials are not disclosed to buyers, sellers, advertisers, marketing partners, or unrelated third parties. Encrypted storage by DigitalOcean is solely as an infrastructure processor, not for DigitalOcean’s independent use.
• Automatic deletion: Verification Materials are automatically deleted 30 days after the verification review is completed, whether the application is approved, denied, or closed.
• Permanent result record: intendle retains the verification result, decision date, and reviewer record permanently. The underlying screenshots and evidence are not retained with that result.

The standard verification review is free; a paid faster review does not change how Verification Materials are protected and does not guarantee approval. The verification form starts with information already in the applicant's profile, and the applicant's answers are stored in the application and in the profile; legal name, postal address, and phone number stay private in the profile.

8. Payments, Payouts, and Stripe

intendle uses Stripe to process payments and payouts. Depending on the transaction and account configuration, Stripe may collect information directly from buyers, sellers, or their representatives and may act as a processor, service provider, and/or independent controller for particular processing activities under Stripe’s own terms and privacy documentation.

• Information sent to or received from Stripe may include name, email address, billing address, amount, currency, order reference, payment or payout status, fraud-prevention signals, refund and chargeback information, and other data required to process the transaction.
• Sellers may be required to provide Stripe with identity, ownership, bank-account, tax, or compliance information. intendle may receive status information without receiving all underlying credentials or documents.
• intendle does not receive or store complete payment-card numbers or card security codes.
• Marketplace artwork charges are made directly on the Seller's connected Stripe account. Stripe controls balance availability and payout timing; intendle does not hold or release the proceeds based on shipping or tracking entry.
• Payout information is managed through Stripe's authenticated connected-account interface. Stripe may require renewed authentication, verification or a security delay under its rules.
• Digital books do not require shipping confirmation; payment and payout processing follows successful digital delivery under the Payment and Payout Terms.

Stripe’s current privacy policy is available at https://stripe.com/privacy. Stripe’s use of information is governed by its own documentation in addition to this Policy.

9. Transactional Email and Google Workspace

intendle uses Google Workspace, an email service of Google LLC, to send account verification messages, security alerts, legal notices, order communications, receipts, password or account recovery communications, moderation notices, and other transactional email, and to receive email sent to intendle addresses. Information transmitted may include an email address and the content and technical metadata of the message.

Optional marketing or editorial email is sent only in accordance with applicable consent and unsubscribe requirements. intendle does not provide email addresses to third parties for their own advertising. Google’s privacy policy is available at https://policies.google.com/privacy.

10. Hosting and DigitalOcean

The primary intendle server is hosted by DigitalOcean in Frankfurt, Germany. DigitalOcean infrastructure may store or transmit platform data on intendle’s behalf, including account information, User Content, messages, order data, and encrypted Verification Materials. DigitalOcean acts as an infrastructure service provider and is not authorized to use intendle user data for independent marketing purposes.

DigitalOcean’s privacy policy is available at https://www.digitalocean.com/legal/privacy-policy.

11. Other Recipients and Disclosures

intendle may disclose personal information only as reasonably necessary for the purposes described below.

intendle does not disclose personal information to advertising networks and does not permit service providers to use intendle user data for their own behavioral advertising. intendle requires service providers to process information only for authorized purposes and to apply appropriate confidentiality and security protections, subject to the providers’ independent legal duties.

12. No Sale, No Cross-Context Behavioral Advertising, and No AI Services

intendle:

• does not sell personal information for money or other valuable consideration;
• does not share personal information for cross-context behavioral advertising as those terms are defined under California law;
• does not use third-party advertising networks or advertising cookies;
• does not disclose personal information to third parties for their own direct marketing;
• does not use third-party artificial-intelligence services to process platform data; and
• does not use machine learning or artificial intelligence to operate Discover. intendle may use the limited Traffic Source and engagement signals described in this Policy as inputs to rule-based recommendations, ranking, Marketplace analytics, and content discovery.

With your consent in the cookie choices, intendle uses an analytics provider to count visits and pages read, as described in the Cookie Policy.

13. International Data Transfers

intendle is operated from the United States, the primary server is located in Germany, and Stripe and Google provide services from or through the United States and other locations described in their documentation. As a result, personal information may be accessed, stored, or otherwise processed in a country other than the country where you live.

Where the GDPR, UK GDPR, or another law restricts international transfers, intendle will use a legally recognized transfer mechanism as applicable, such as an adequacy decision, certification under an applicable data privacy framework, approved standard contractual clauses, a United Kingdom transfer addendum or international data transfer agreement, or another lawful safeguard.

Laws in the destination country may differ from those in your country. intendle will provide information about applicable safeguards on request where required by law.

14. Data Retention

intendle retains personal information only for the period required by the platform rules stated below, by applicable law, or by a legitimate operational or legal need.

intendle may retain information longer when necessary to comply with law, preserve evidence, respond to a legal hold, prevent fraud, resolve a dispute, enforce an agreement, or protect the rights and safety of users. When retention is no longer justified, information will be deleted, anonymized, or securely destroyed according to the applicable system and backup process.

15. Security

intendle uses administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, alteration, disclosure, or destruction. Safeguards are selected according to the nature and sensitivity of the information and may include:

• password hashing rather than storage of readable passwords;
• encrypted transmission using HTTPS;
• encryption and access restrictions for Verification Materials;
• role-based administrative access and access logging;
• two-factor authentication and renewed authentication for sensitive account actions;
• session controls, security logging, rate limiting, and monitoring for suspicious activity;
• restricted database and server access;
• segregation of production and testing environments where implemented;
• security review of changes; and
• documented incident-response and backup procedures.

No method of transmission or storage is completely secure. Users are responsible for protecting their credentials, devices, two-factor authentication method, and active sessions. Suspected unauthorized access should be reported promptly to support@intendle.com. intendle will provide legally required breach notifications to affected individuals and authorities when the applicable notification standard is met.

16. Cookies and Similar Technologies

intendle uses cookies or similar storage only as described in the Cookie Policy. This includes strictly necessary cookies for sessions, security, abuse prevention, and storing cookie choices; a preference cookie for the artwork size unit; and, only with consent, analytics cookies of an analytics provider. intendle does not use third-party advertising cookies.

Every visitor receives cookie choices with a genuine Reject all option, and no optional cookie is set before the visitor switches it on. Necessary cookies operate without consent because they are required to provide a requested service or secure the website.

17. Your Privacy Rights

Your rights depend on where you live, the law that applies, the nature of intendle’s relationship with you, and whether a statutory coverage threshold is met. intendle may provide a right voluntarily even when a particular statute does not apply. Rights are subject to lawful exceptions, including protection of other people’s rights, fraud prevention, legal claims, and mandatory retention.

17.1 General Rights and Choices

• Request confirmation of whether intendle processes personal information about you.
• Request access to personal information and information about how it is used.
• Request correction of inaccurate or incomplete information.
• Request deletion of information that intendle is not legally required or otherwise entitled to retain.
• Request a portable copy of eligible information in a commonly used format.
• Object to or request restriction of certain processing where applicable.
• Withdraw consent for processing based on consent.
• Unsubscribe from optional marketing email through the link in the message or account settings.
• Appeal a denied privacy request where applicable.
• Complain to a competent privacy authority.

17.2 Texas Residents

To the extent the Texas Data Privacy and Security Act applies, a Texas consumer may have the right to confirm processing and access personal data, correct inaccuracies, delete eligible personal data, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, or certain profiling decisions. intendle does not currently sell personal data or process it for targeted advertising as described in this Policy.

intendle will respond to a verified Texas request without undue delay and no later than 45 days after receipt, subject to one reasonably necessary 45-day extension with notice. A consumer may appeal a refusal through legal@intendle.com. intendle will respond to the appeal no later than 60 days after receipt and will provide information about contacting the Texas Attorney General if the appeal is denied, where required by law.

17.3 California Residents

Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies, California residents may have rights to know or access categories and specific pieces of personal information, request correction, request deletion, receive information about categories of collection, sources, purposes, and recipients, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service without unlawful discrimination for exercising privacy rights.

intendle does not sell personal information and does not share it for cross-context behavioral advertising. intendle uses sensitive personal information, where collected, only for operational, security, transaction, verification, legal, and other permitted purposes described in this Policy, not to infer characteristics for advertising.

intendle will generally respond to a verified California access, deletion, or correction request within 45 calendar days and may extend the period by an additional 45 days when permitted and after notice. An authorized agent may submit a request subject to proof of authority and identity verification.

17.4 European Economic Area Residents

Where the GDPR applies, you may have the rights of access, rectification, erasure, restriction, data portability, objection, withdrawal of consent, and complaint to a supervisory authority. You may object at any time to processing for direct marketing. You may also object, based on your particular situation, to processing based on legitimate interests; intendle will then stop the processing unless it demonstrates compelling legitimate grounds or the processing is needed for legal claims.

intendle will respond without undue delay and generally within one month after receiving a valid request. The period may be extended by two additional months where permitted because of complexity or number of requests, with notice within the first month. You may lodge a complaint with the supervisory authority in the EEA country of your habitual residence, place of work, or the alleged infringement.

17.5 United Kingdom Residents

Where the UK GDPR and Data Protection Act apply, you may have rights broadly including access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to the Information Commissioner’s Office. intendle will generally respond within one month, subject to lawful extension and identity verification.

17.6 Canadian Residents

Where Canada’s Personal Information Protection and Electronic Documents Act or applicable provincial privacy law applies, you may request access to personal information, an account of its use and disclosure, and correction of inaccurate information. intendle will generally respond to a complete access request within 30 days, subject to a lawful extension and applicable exceptions. You may also complain to the Office of the Privacy Commissioner of Canada or the competent provincial authority.

17.7 Residents of Other U.S. States and Other Jurisdictions

Residents of other jurisdictions may have additional rights concerning access, correction, deletion, portability, opt-out, profiling, consent, complaint, or appeal. intendle will honor applicable rights and will update this Policy or provide a supplemental notice when a material jurisdiction-specific obligation applies.

18. How to Exercise a Privacy Right

Submit a privacy request through one of these channels:

• Account privacy controls: https://intendle.com/help/
• Email: legal@intendle.com
• Postal mail: available on request via legal@intendle.com
• Appeal channel: legal@intendle.com

Your request should identify the right you wish to exercise and provide enough information to locate the relevant records. intendle may ask for information reasonably necessary to verify identity, authority, account ownership, or residency. Verification information collected for the request will be used only to process and document the request.

intendle will not require you to create an account solely to submit a privacy request. Where permitted, an authorized agent may act for you, but intendle may require signed authority and direct identity confirmation. Requests are generally free. A reasonable fee may be charged, or a request may be refused, only where applicable law permits because the request is manifestly unfounded, excessive, repetitive, or technically disproportionate.

Deletion requests cannot erase information that intendle must retain for legal obligations, completed purchases, seller payout and tax records, fraud prevention, security, exercise or defense of legal claims, or the protection of other people’s rights. intendle will explain any material denial and any available appeal or complaint process.

19. Children

The Services are not directed to children under 13, and intendle does not knowingly collect personal information from a child under 13. A person must be at least 13 to maintain an account and at least 18 to become a seller, or at least 14 with the consent of a parent or legal guardian, who then holds the payout account and receives the payouts. A User who has not reached the age of legal majority where the User lives needs the verified consent of a parent or legal guardian before the User's profile and content become visible to others. For that consent intendle stores the parent's or guardian's name, relationship, email address and optional phone number, the permissions chosen, and the date, time, IP address and browser of the consent as proof, and sends the parent or guardian the notices described in the Parental Consent Rules. If intendle learns that a child under 13 has provided personal information, intendle will take reasonable steps to delete the account and information, subject to legal preservation requirements.

A parent or legal guardian who believes that a child under 13 has provided personal information, or who wants to review, change or withdraw a consent, should contact legal@intendle.com or use the link in the consent email. Local law may require a higher age or parental involvement for particular features; intendle may restrict those features accordingly.

20. Discover, Recommendations, Rule-Based Processing, and Automated Decisions

Discover and eligible recommendation surfaces organize content using rule-based systems. intendle does not use artificial intelligence or machine learning to operate Discover.

Rule-based organization may use content category, publication status, recency, relationship signals, engagement signals, quality or trust rules, location or language settings, declared interests, and the limited Traffic Source signals described in Section 4.9. Traffic Source may help intendle understand whether content was discovered through the Feed, Marketplace, Marketplace Search, an artist profile, a direct visit, or an external website. Where the source is external, only the hostname is used by the Traffic Source feature.

These signals may be used to measure Marketplace performance, improve seller analytics, organize recommendations, rank eligible content, improve discovery, and evaluate how users find content. They are not used for third-party behavioral advertising.

Discover placement or recommendation ranking may affect visibility but does not, by itself, make a decision that produces legal or similarly significant effects concerning a user. Verification, moderation, suspension, and termination decisions are made or reviewed by a human administrator, and affected users receive the notice and appeal process described in the applicable policy.

21. Third-Party Websites and External Merchants

intendle may link to websites operated by sellers, publishers, galleries, shipping carriers, payment providers, regulators, or external merchants. intendle does not control those websites or their privacy practices. The separate editorial catalog of recommended books links to third-party merchants; information provided to or collected by an external merchant is governed by that merchant’s privacy policy, not this Policy.

22. Changes to This Privacy Policy

This Policy displays a version number and Last Updated date. intendle may revise it to reflect changes in the Services, service providers, law, or processing practices. Material changes will be communicated through the account interface, email, a prominent website notice, or another method appropriate to the change and applicable law.

Where renewed consent or acceptance is legally required, intendle will request it and record the date, time, account identifier, acceptance method, and document version. The previously accepted version remains recorded. A change will not retroactively authorize processing that required consent at the time it occurred.

23. Contact and Complaints

intendle asks that you contact us first so the matter can be reviewed. This does not limit your right to complain to a competent regulator or seek another remedy. EEA residents may complain to the supervisory authority in their habitual residence, workplace, or place of the alleged infringement. UK residents may complain to the Information Commissioner’s Office. Canadian residents may complain to the Office of the Privacy Commissioner of Canada or a competent provincial authority. California and Texas residents may contact their competent state privacy authority where applicable.

Appendix A — California Notice at Collection

This Notice at Collection supplements the Privacy Policy for California residents where California law applies. The table describes categories of personal information intendle may collect, representative examples, business or commercial purposes, and retention criteria. intendle does not sell personal information or share it for cross-context behavioral advertising.

Sources include you, your device, Stripe, a buyer or seller in your transaction, users who submit reports, publicly accessible professional sources used for verification, and lawful authorities. Recipients are described in Section 11. Retention is described in Section 14 and depends on the category, transaction, and legal obligation.

How to reach us

Legal notices: legal@intendle.com. For everything else, use the contact page.