Privacy Rights Notice (U.S.)

Updated and Effective Date: August 10, 2026

Prior Versions: Available upon request at privacy@plume.com)

Plume Design, Inc. and its subsidiaries and affiliates (collectively, Plume or we) provide this U.S. State Privacy Rights Notice (Notice) as a supplement to the Plume Customer Privacy Policy (Plume Privacy Policy) and any other Plume privacy policy, notice or statement in which this Notice is linked or referenced. This Notice applies to Users and Customers who live in the United States.

See the Plume Customer Privacy Policy for any capitalized terms that we use but not define in this Notice.

This Notice also serves as our Notice at Collection for purposes of CCPA.

I. WHEN DOES THIS NOTICE APPLY?
Our privacy notices apply to how we process your data at the time it was collected. We may change our Notice and privacy practices. We will publish new notices on our website. If this Notice conflicts with the Plume Customer Privacy Policy, this Notice will govern as to Consumers residing in the United States, unless we explicitly state otherwise. If Plume’s processing materially changes between updates to this Notice, we will provide you with a supplemental notice when or before the changes apply.

II. HOW DO WE DISCLOSE YOUR PERSONAL INFORMATION?

The table above identifies the categories of personal information we have collected about Consumers in the preceding 12 months and the categories of recipients to which we disclose that information for a business purpose, share it for targeted advertising, or sell it. The purposes for which we collect and use each category of personal information, and the criteria we use to determine how long we retain it, are described in the Plume Customer Privacy Policy. We may also disclose deidentified information. We do not try to reidentify the information unless we need to evaluate our deidentification methods.

III. WHAT PRIVACY RIGHTS ARE AVAILABLE AND HOW CAN YOU EXERCISE THEM?
1. Privacy Rights Depending on where you live, you may have the following rights. For residents of states without privacy rights, we will consider requests but will determine in its sole discretion how to process those requests.

(a) Right to Access/Know
You may request access to your personal information or confirm that we have personal information about you. In certain limited cases, you may ask to receive access to your personal information in a portable, machine-readable form.

(b) Right to Delete
You may ask us to delete your personal information. If required by law, we will grant such a request, but note that in many cases, we must keep your personal information to comply with legal obligations, resolve disputes, enforce agreements, or for other business purposes.

(c) Right to Correct Personal Information
You have the right to request that we correct inaccuracies that you find in the personal information about you maintained by us. You can also make certain changes to your online account (e.g., name and password) in the account settings section of the account. Changing your account settings will not, however, change your personal information that exists in other places.

(d) Right to Obtain a List of Third-Party Recipients
You may have a right to request a list of specific third parties to which we have disclosed your personal information. Some areas also allow you to obtain a list of the categories of the third parties to which we disclose your personal information. You can find this information in the table in Section II above.

(e) Do Not Sell / Share / Target
Plume may sell or share your personal information and/or use your personal information for targeted advertising, as these terms apply under applicable U.S. privacy laws. Plume does, however, provide you with an opt out of sale/sharing/targeting that is intended to combine these state opt-outs into a single opt-out available regardless of state of residency.

Opt-out for non-cookie personal information: If you want to limit our processing of your non-cookie personal information (e.g., your email address) for targeted advertising or opt-out of the sale/sharing of such data, make an opt-out request as described below.

Opt-out for cookie personal information: If you want to limit our processing of your cookie-related personal information for targeted advertising or opt-out of the sale/sharing of that personal information, you need to exercise a separate opt-out request on our cookie management tool by clicking on the “Cookies” link in the footer of www.plume.com. This is because we use different technologies to apply preferences for opting out of cookie personal information vs. non-cookie personal information. Our cookie management tool enables you to exercise an opt-out request and enables certain cookie preferences on your browser / device. You must exercise your preferences on the Plume Services that you use and from each browser you use and on each device that you use. Since your browser opt-out is designated by a cookie, if you clear or block cookies, your preferences are no longer effective and you must enable them again by clicking on the “Cookies” link in the footer of www.plume.com.

We do not knowingly sell or share the personal information of Consumers under age 18.

(f) Automated Decision Making/Profiling (if/when applicable)
If Plume engages in processing that may constitute Automated Decision Making or Profiling under applicable U.S. privacy laws, you have the right to opt-out of certain types of Automated Decision Making or Profiling processing. Currently, Plume does not engage in these activities.

(g) California Shine the Light Law
Plume does not share “personal information,” as defined by California’s “Shine the Light” law, with third parties for those third parties own direct marketing purposes. California residents may opt-out of this sharing by contacting us at privacy@plume.com or 325 Lytton Ave, Palo Alto, CA 94301 (Attn: Privacy).

Please add the statement “Shine the Light Request” in the subject line and in the body of your correspondence. Please also attest to the fact that you are a California resident and provide a current California address for your response. This right is available in addition to CCPA rights and requires a separate request. The Do Not Sell/Share/Target opt-out is broader and will limit our sharing with third parties for their own direct marketing purposes without the need to make a separate Shine the Light request.

Plume will not accept Shine the Light Requests by telephone or by fax and is not responsible for Shine the Light Requests not properly labeled or sent or that are incomplete.

2. How to Exercise Privacy Rights
To submit a request to exercise your Consumer privacy rights or to submit a request as an authorized agent, visit Plume’s U.S. Privacy Request Form, call us at 408-498-5512 or email us at privacy@plume.com. Please check for and respond to any follow-up inquiries we make. Please be aware that we do not accept or process requests through other means (e.g., via fax). We will not discriminate against you if you exercise a privacy right.

3. Verification of Privacy Rights Requests
We may ask you to provide verifying information, such as your name, email, telephone number, and/or account information, before we act on your request. We will review the information provided and may request additional information. We will not fulfill your Right to Know (Categories), Right to Know (Specific Pieces), Right to Delete or Right to Correction request unless you have provided sufficient information for us to verify you are the Consumer about whom we collected personal information. We do not verify opt-outs of sell/share/target requests unless we suspect fraud.

4. Agent Requests
You may use an authorized agent to make a privacy rights request for you. Before you can authorize an agent, Plume requires that you complete and submit this Authorized Agent Authorization Form or call us at 408-498-5512. We also may require you to directly confirm that you authorized the agent to submit the request.

5. Appeals
You may appeal Plume’s decision regarding a request by email at legal@plume.com. Please use the same email address that you used to submit the initial privacy rights request to submit your Request to Appeal and please add “Request to Appeal” in the subject line of the email. If you do not use the same email address, Plume cannot link your Request to Appeal to your initial privacy rights request.

IV. HOW TO CONTACT PLUME
If you have any questions, comments or concerns about our privacy practices, or if you need to access this Plume Customer Privacy Policy in a different form due to a disability, please contact us by email at privacy@plume.com, call us at 408-498-5512 or visit HERE. (Email communications are not necessarily secure so please do not include sensitive information in an email.)