Effective Date: July 30, 2026
Last Updated: July 30, 2026

This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, use our mobile app, create an account, place orders, interact with Store Owners, apply to sell on the platform, or otherwise use our services (together, the “Services”).

By using the Services, you agree to the practices described in this Privacy Policy.

This Privacy Policy applies to:

·  The Local Living Project website at locallivingproject.com and its subdomains.

·  The Local Living Project mobile applications for iOS and Android

·  Shopper, Store Owner, community partner, and applicant interactions through the platform

·  Communications related to orders, customer support, marketing, and account administration

This Privacy Policy does not apply to third-party websites, apps, payment processors, delivery providers, or Store Owner websites that may be linked through the Services. It also does not apply to information we handle in an employment or job-applicant context.

A note about Store Owners. Local Living Project is a marketplace. Store Owners are independent businesses and are the merchant of record for their own sales. When you place an order, the Store Owner receives the information needed to fulfill it and handles that information under their own privacy practices. Our agreement with Store Owners requires them to use shopper information only to fulfill and support orders, but we do not control their independent practices.

·  Name

·  Email address

·  Phone number

·  Billing address

·  Delivery address and saved addresses

·  Account login credentials

·  Business name, business address, and Store Owner profile information

·  Product and service listings, business descriptions, pricing, and inventory data

·  Store Owner intake responses, including growing and sourcing practices, chemical use, certifications, and values attestations

·  Messages sent through the platform

·  Customer support inquiries

·  Marketing and communication preferences, including SMS consent

·  Membership and subscription selections

·  Reviews, photos, and other content you post

·  Any other information you voluntarily provide

·  Items ordered

·  Store Owner selected

·  Fulfillment method (pickup, delivery, or shipping)

·  Order status and order history

·  Payment confirmation details returned to us by our payment processor. We do not receive or store your full card number

·  Refunds, cancellations, and dispute information

·  For Store Owners, payout and settlement records

·  IP address

·  Browser type

·  Device type and device identifiers

·  Operating system

·  App version

·  Referring URLs

·  Pages or screens viewed

·  Time spent in the Services

·  Interaction and clickstream data

·  Crash and diagnostic data

·  Push notification tokens

·  Approximate location derived from IP address, used to show you nearby Store Owners and confirm we serve your area

·  Precise device location, only if you grant permission in your device settings. You can turn this off at any time in your device settings without losing access to the Services

·  Saved addresses and default delivery locations

We do not sell precise location data. We do not disclose precise location data to third parties for advertising purposes.

We use cookies, pixels, software development kits, tags, and similar technologies to:

·  Keep you signed in

·  Remember your preferences

·  Analyze traffic and usage

·  Improve performance and diagnose problems

·  Measure the effectiveness of our advertising

·  Support fraud prevention and security

Some of these technologies are operated by our advertising and analytics partners. See Section 5 for your choices.

We do not ask for and do not want government identification numbers, financial account credentials, health information, or other sensitive categories of information from shoppers. Please do not include this kind of information in messages, reviews, or support requests.

We use information to:

·  Create and manage accounts

·  Provide and operate the website and app

·  Process and fulfill orders

·  Route orders to the correct Store Owner

·  Coordinate pickup, delivery, and shipping

·  Send receipts, confirmations, order updates, and push notifications

·  Provide customer support

·  Verify Store Owners and maintain marketplace quality and values standards

·  Process Store Owner payouts

·  Personalize content, recommendations, and local search results

·  Process memberships, subscriptions, vouchers, and promotions

·  Improve product features, usability, and performance

·  Monitor platform safety, prevent fraud, and enforce our terms

·  Send service-related notices

·  Send marketing communications where permitted by law and consistent with your preferences

·  Measure and improve our advertising

·  Comply with legal, tax, and accounting obligations

·  Resolve disputes and investigate complaints

We limit our collection of personal information to what is reasonably necessary for these purposes. If we ever want to use your information for a materially different purpose, we will update this Policy and, where required, ask for your consent first.

We do not sell your personal information for money, and we do not rent or trade customer lists.

We do use advertising and analytics tools that may be considered “sharing” for targeted advertising under some state privacy laws. Section 5 explains this and how to opt out.

We share information in the following circumstances.

When you place an order, we share the information the Store Owner needs to fulfill and support it, such as:

·  Your name

·  Order details

·  Fulfillment selection

·  Delivery or pickup information

·  Contact details when necessary for fulfillment or support

We share information with trusted providers that help us operate the Services. Categories and current examples include:

Category

What they do

Current providers

Payment processing and payouts

Card processing, Store Owner onboarding and settlement

Stripe and Stripe Connect

Cloud hosting and database

Application infrastructure and data storage

[Supabase, and hosting provider]

Delivery and logistics

Routing, driver assignment, and tracking

[Elite Extra and participating local delivery providers]

Email and SMS communication

Transactional and marketing messages

[Brevo or current provider]

Analytics and performance

Usage measurement, crash reporting

[Google Analytics and app analytics provider]

Advertising and measurement

Campaign delivery and conversion measurement

[Meta, Google, and other platforms as used]

Accounting and bookkeeping

Financial records and reconciliation

Digits

Customer support

Ticketing and support communications

[Provider]

Identity verification and fraud prevention

Store Owner verification, risk screening

[Provider, typically via Stripe]

These providers may only use information as necessary to perform services for us, under written contracts that restrict their use of the information.

If you select delivery, we share the order details, delivery address, and contact information needed with the delivery provider and driver so they can complete the delivery.

We may disclose information if reasonably necessary to:

·  Comply with a law, regulation, subpoena, or court order

·  Respond to lawful government requests

·  Protect the rights, property, or safety of Local Living Project, our users, or the public

·  Investigate fraud, abuse, or security incidents

·  Enforce our contracts or platform rules

If we are involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, information may be transferred as part of that transaction. We will provide notice as required by law.

We share information with others when you ask us to, such as when you post public content or share an order.

We advertise Local Living Project on platforms including Meta (Facebook and Instagram), Google, and similar services. To do this we may:

·  Place advertising pixels and SDKs on our website and in our app

·  Share hashed contact information, such as an email address, with advertising platforms to build custom or lookalike audiences

·  Receive measurement data showing which ads led to app installs, signups, or orders

Some state privacy laws treat this activity as “sharing” personal information for targeted advertising or cross-context behavioral advertising, even though no money changes hands. We want to be clear about it rather than rely on a technicality.

How to opt out:

·  On our website: use the Your Privacy Choices link in the site footer

·  Universal opt-out signals: we honor the Global Privacy Control (GPC) and similar browser-level opt-out preference signals when we detect them

·  In the app: open Settings, then Privacy, then Advertising Preferences

·  On your device: iOS users can decline app tracking when prompted or turn it off in Settings. Android users can reset or delete the advertising ID in Settings

·  By email: write to support@locallivingproject.com and ask to opt out of targeted advertising

Opting out does not stop you from seeing our ads. It limits the use of your information to target them.

Card and digital wallet payments are processed by our third-party payment providers, currently Stripe. We do not receive or store full payment card numbers on our systems. We receive limited details such as the last four digits, card brand, authorization result, and billing postal code.

Store Owner payouts are processed through Stripe Connect. Store Owners provide business and tax information directly to Stripe for identity verification and tax reporting, and Stripe handles that information under its own privacy policy.

Supported payment methods currently include major credit and debit cards and digital wallets such as Apple Pay and Google Pay. If we add additional payment methods in the future, we will update this section to describe how that information is handled.

Please review the privacy policies of our payment providers for details on how they handle payment data.

If you provide your mobile number and opt in, we may send you text messages about orders, delivery status, account activity, and, where you have separately agreed, marketing and promotions.

·  Message frequency varies. Message and data rates may apply

·  Reply STOP to any message to stop receiving texts. Reply HELP for help

·  Consent to receive marketing texts is not a condition of purchase

·  We do not share or sell mobile phone numbers, or the consent you give to receive text messages, with third parties or affiliates for their own marketing purposes. Numbers are shared only with the messaging providers that deliver our messages on our behalf, and with Store Owners and delivery providers where needed to complete your order

Opting out of marketing texts does not stop transactional messages about orders you have placed.

To support fulfillment we collect and use:

·  Delivery addresses

·  Pickup selections and time windows

·  Shipping details

·  Driver assignment and status data

·  Order tracking events

We use this information only as needed to coordinate fulfillment, provide updates, resolve service issues, and maintain records.

We may send:

·  Promotional emails

·  Product announcements

·  Marketplace updates

·  Local Store Owner highlights

·  Membership offers

·  Event invitations

You may opt out of marketing emails using the unsubscribe link in any message or by adjusting your account settings. Transactional and service-related messages, such as order confirmations and account notices, may still be sent when necessary.

Push notifications can be turned off at any time in your device settings.

If you submit reviews, photos, listings, business descriptions, comments, or other content, that content may be publicly visible within the Services and may be displayed with your first name or display name. Please do not post sensitive information in public areas of the platform.

You can request removal of content you posted by contacting us. Copies may remain in backups or where retention is required for legal or safety reasons.

We retain information for as long as reasonably necessary to:

·  Provide the Services and maintain your account

·  Maintain business, tax, and accounting records

·  Comply with legal obligations

·  Resolve disputes

·  Enforce agreements

·  Support safety and fraud prevention

General guidance on how long we keep things:

Information

Typical retention

Active account information

For as long as your account is open

Closed account information

Up to [30] days after deletion, except where longer retention is required

Order and transaction records

[7] years, for tax and accounting purposes

Support communications

[3] years

Marketing preferences and opt-out records

Kept indefinitely so we can continue to honor your opt-out

Device, usage, and analytics data

Typically [26] months, or as configured in each analytics tool

Backups

Overwritten on a rolling [30] to [90] day cycle

Actual retention periods may vary by information type and purpose.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, loss, misuse, or alteration. These include encryption of data in transit, access controls and role-based permissions, row-level security on our database, limiting employee and contractor access to a need-to-know basis, and use of reputable infrastructure and payment providers.

No system can be guaranteed to be completely secure. You are responsible for keeping your password and account credentials confidential and for notifying us promptly if you believe your account has been compromised.

If a security incident affects your personal information, we will notify you and applicable regulators as required by law, including Oregon’s data breach notification law.

Depending on where you live, you may have rights regarding your personal information, including the right to:

·  Confirm whether we process your personal information and access it

·  Obtain a copy of your personal information in a portable format

·  Obtain a list of the specific third parties to which we have disclosed your personal information, where required by law

·  Correct inaccurate personal information

·  Delete your personal information

·  Opt out of targeted advertising, sale, or profiling that produces legal or similarly significant effects

·  Opt out of marketing communications

·  Withdraw consent where processing is based on consent

·  Appeal a denial of a privacy request

·  Not be discriminated against for exercising these rights

How to submit a request. Use the Your Privacy Choices link in our website footer, use Settings then Privacy in the app, or email support@locallivingproject.com with the subject line “Privacy Request.”

Verification. We will take reasonable steps to verify your identity before acting on a request, usually by confirming control of the email address or phone number on your account. More sensitive requests, such as a copy of your data, may require additional verification. We do not ask for more information than needed.

Authorized agents. You may use an authorized agent to submit an opt-out request on your behalf. We may ask for proof of the agent’s authority and may require you to verify your own identity directly.

Timing. We will respond within 45 days of receiving a verifiable request. If we need more time, we may extend by an additional 45 days and will tell you why before the first period ends. Your first request in any 12-month period is free.

Appeals. If we deny your request, our response will explain why and how to appeal. To appeal, reply to our decision or email support@locallivingproject.com with the subject line “Privacy Request Appeal.” We will respond to an appeal within 45 days and explain the reasons for our decision. If your appeal is denied, you may contact your state Attorney General to submit a complaint.

Exceptions. We may decline all or part of a request where an exception applies, such as where we must retain information for legal, tax, security, fraud prevention, or dispute resolution purposes, or where honoring the request would adversely affect another person’s rights.

Local Living Project is an Oregon business serving Central Oregon and Southern Oregon communities. Whether or not we currently meet the thresholds that make the Oregon Consumer Privacy Act mandatory for us, we intend to operate consistently with it.

Oregon residents may exercise the rights described in Section 13, including the right to obtain a list of the specific third parties to which we have disclosed personal information. We honor universal opt-out mechanisms such as the Global Privacy Control. We do not sell personal information, we do not sell precise geolocation data, and we do not sell the personal information of anyone we know to be under 16 or process it for targeted advertising or profiling.

Oregon residents may also contact the Oregon Department of Justice at oregonprivacy@doj.oregon.gov or at doj.state.or.us with privacy concerns.

If you are a California resident, you may have additional rights under California law, including the rights to know, access, delete, correct, and limit certain uses of sensitive personal information, subject to legal exceptions.

We do not sell personal information for money. As described in Section 5, our use of advertising pixels and custom audiences may constitute “sharing” personal information for cross-context behavioral advertising under California law. You may opt out using the Your Privacy Choices link in our website footer, through Settings then Privacy in the app, or by sending a Global Privacy Control signal from your browser.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

The Services are intended for adults. We do not knowingly collect personal information from children under 13. If you are under 13, please do not create an account or submit information to us.

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it. A parent or legal guardian who believes a child has provided personal information to us may contact support@locallivingproject.com and we will review and delete the information as appropriate.

We do not knowingly process the personal information of anyone under 16 for targeted advertising or profiling.

You can delete your Local Living Project account and associated personal information at any time.

In the app: open [Settings, then Account, then Delete Account]. Confirm when prompted.

On the web: visit [locallivingproject.com/delete-account] and follow the instructions.

What happens next. We deactivate your account immediately and delete your personal information within [30] days, except where we must keep certain records. Information we typically retain after deletion includes order and transaction records needed for tax, accounting, and Store Owner settlement purposes, records needed to resolve an open dispute or comply with a legal obligation, and a minimal suppression record so we can continue honoring your marketing opt-outs. Deleted information may persist in backups until those backups are overwritten on our normal cycle.

Store Owner accounts with open orders, pending payouts, or unresolved disputes may need those matters resolved before deletion is completed.

The Services may contain links to third-party websites, Store Owner pages, map tools, delivery systems, social media platforms, and payment providers. We are not responsible for the privacy practices of those third parties. Please review their privacy policies separately.

The Services are intended for users in the United States, specifically Oregon. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your location.

Local Living Project
20789 NW Henry Ave, Suite 170, PMB 33
Bend, Oregon 97703

Privacy requests and general support: support@locallivingproject.com
Website: locallivingproject.com

We monitor these addresses actively and will respond to privacy requests within the timeframes described in Section 13.

We may update this Privacy Policy from time to time. When we make changes, we will post the updated version with a revised “Last Updated” date. If the changes are material, we will provide additional notice, such as an email or an in-app notice, and will obtain consent where required by law.

Continued use of the Services after an update means you accept the revised Privacy Policy to the extent permitted by law.