AUTONOMY PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

Effective December 13, 2021

This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS (“CA Privacy Notice”) supplements the information contained in the Autonomy Privacy Policy (“we,” “us,” or “our”) and applies solely to visitors, users, and others who reside in the State of California (“California Consumers” or “you”).

I. Information We Collect About Our California Consumers

     A. Types of Information We Collect

NextCar Holding Company, Inc. (“Autonomy”) is a flexible vehicle subscription app that lets you shop, get approved, and pay for your next car. To maintain our groundbreaking standards and technologies, and to provide you with the best possible service, in the past twelve months we may have collected through the course of our business one or more of the following types of information:

Categories of Personal Information

Examples of Personal Information

Collected?

Identifiers

Legal name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.

Yes

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code

§ 1798.80(e))

A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information. Some personal information included in this category may overlap with other categories.

 Yes

Protected classification characteristics under California or federal law

Age (40 years or older), race, color, ancestry, national origin, citizenship, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), veteran or military status.

Yes

Commercial information

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Yes

Internet or other similar network activity

Browsing history, search history, information on interaction with a website, application, or advertisement.

Yes

Geolocation data

Physical location or movements.

Yes

Sensory data

Audio, electronic, visual, olfactory, or similar information.

Yes

Inferences drawn from other personal information

Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Yes

     B. How We Collect Information

We collect information that allows us to tailor our services (the “Services”) and provide you with the best experience possible. Our methods of collecting this information include gathering information through forms, applications, surveys, and other online fields offered throughout our Services; in email, text, and other electronic messages between you and us; and when you interact with our advertising and applications on third-party websites and services.

II. Your Rights as a California Consumer

As a California resident, you have certain rights regarding your personal information.

     A. Opting Out of “Sales” 

We will not sell your personal information such as name, email address, physical address, or phone number unless you give us written permission. However, California law defines “sale” broadly in such a way that the term sale may include using targeted advertising on the Services or other affiliated sites. Like most online publishers and social networks, we use these services, which enable us to provide the Services and relevant offers to you, including at your request.

As such, our use of these services may constitute a California-covered “sale” for the following categories of information to advertising partners: identifiers such as Internet Protocol address, device IDs, cookie IDs, and advertising IDs; demographic information such as age bracket, commercial information such as the types of products or services you are interested in purchasing.

You have the right to direct us not to “sell” your personal information by visiting Autonomy’s Privacy Policy Page.

     B. Your Access Rights

You have the right to request from us the following information: (1) the categories of personal information we have collected about you; (2) the categories of sources from which your personal information is collected; (3) the business or commercial purpose for collecting or selling your personal information; (4) the categories of third parties with whom we share personal information; and (5) the specific pieces of personal information we have collected about you.

To the extent that we sold any of your personal information or used any of your personal information for a business person, you have the right to request that we disclose to you: (1) the categories of personal information that we collected about you; (2) the categories of personal information that we sold about you and the categories of third parties to whom the personal information was sold, by category or categories of personal information for each third party to whom the personal information was sold; and (3) the categories of personal information that we disclosed about you for a business purpose.

     C. Your Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

     D. How to Exercise Your Rights

To exercise any of the rights listed above, please submit a verifiable consumer request to us by submitting the appropriate request form which can be found on our Privacy Policy Page. We will only use personal information provided in a consumer request to verify the requestor's identity or authority to make such a request. Please note you may only make a verifiable consumer request for access or data portability twice within a 12- month period.

Please note that Autonomy must verify the identity of the requestor by requesting your full legal name, email address and phone number associated with your account, and account number. You may designate an authorized agent to make a request on your behalf by providing proof of a valid power of attorney, your valid government issued identification, and the authorized agent’s valid government issued identification. We cannot respond to requests where the identity and authority of the requestor cannot be confirmed.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. If we are unable to comply with a request, we will inform you of the reason why.

     E. Non-Discrimination Policy

California residents that choose to exercise such rights will not be denied any goods or services, charged different prices or rates, or be provided a different level or quality of goods or services unless those differences are related to your personal information.

     F. Shine the Light Disclosure

You may request and obtain from us once a year, free of charge, information about the personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year.

III. Changes to Our Privacy Notice for California Residents

We reserve the right to modify this CA Privacy Notice at any time. If we make changes to this CA Privacy Notice, we will make the modified version available on our Privacy Policy Page. Your continued use of the Services after any modification to this CA Privacy Notice will constitute your acceptance of such modification.

IV. Contact

If you have any questions about this policy, please contact us in any of the following ways: (1) call us at the following phone number: (833) 388-CARS (2277), or (2) send us an email at privacy@autonomy.com

v. 1.0.2112