Privacy Policy

Effective Date: March 15, 2026 | Version 1.0

ExuraBio website is owned by ExuraBio, LLC, which is a data controller of your personal data.

Scope: This Privacy Policy applies to all personal information collected by ExuraBio through the Platform, including information provided by Buyers, Sellers, and site visitors. ExuraBio is committed to transparency, data minimization, and compliance with applicable U.S. state privacy laws.

Information We Collect

Information You Provide Directly

• Account registration data: name, business name, email address, phone number, business address, and tax identification information.

• Payment information: billing address and payment method details provided in connection with payments owed to ExuraBio (processed and stored by PCI-DSS compliant third-party processors; ExuraBio does not store full payment card data).

• Transaction data: order history, listings, communications with other Users, and dispute records.

• Identity verification documents submitted during Seller onboarding.

• Communications with ExuraBio support, feedback submissions, and survey responses.

Information Collected Automatically

• Log data: IP addresses, browser type, operating system, referring URLs, and pages visited.

• Device identifiers and usage analytics via cookies and similar tracking technologies.

• Geolocation data derived from IP address.

Information from Third Parties

• Identity and business verification data from third-party verification services.

• Fraud prevention and risk scoring data from analytics partners.

• Publicly available business registry and regulatory information.

How We Use Your Information

ExuraBio uses collected information for the following purposes:

• To provide, operate, and improve the Platform and related services.

• To verify User identity and Seller eligibility.

• To support transactions on the Platform and process payments owed to ExuraBio.

• To communicate with Users regarding accounts, orders, disputes, and policy updates.

• To detect, investigate, and prevent fraud, abuse, and violations of our policies.

• To comply with legal obligations, including tax reporting, regulatory requirements, and law enforcement requests.

• To conduct analytics and improve User experience.

• To compile, analyze, and commercialize aggregated, anonymized transactions and platform data as part of ExuraBio’s proprietary market intelligence products and services, provided such data is handled in a manner intended not to identify any individual User, organization, or specific transaction and designed to avoid constituting personal information under applicable privacy law.

• To send promotional communications, subject to User preferences and applicable opt-out rights.

Sharing and Disclosure of Information

ExuraBio does not sell personal information to third parties. We may share information in the following circumstances:

• With Sellers and Buyers: Buyer shipping and contact information is shared with the applicable Seller as needed to fulfill the relevant transaction. Seller business and product information is displayed on the Platform in accordance with the Seller’s listing.

• With service providers: We share information with vendors providing payment processing, identity verification, fraud prevention, cloud hosting, analytics, and customer support services, subject to data processing agreements.

• For legal compliance: We may disclose information in response to valid legal process, court orders, or government authority requests, or where necessary to protect the rights and safety of ExuraBio, its Users, or the public.

• In connection with corporate transactions: Information may be transferred as part of a merger, acquisition, or sale of substantially all assets, subject to standard confidentiality protections.

• With User consent: For any other disclosures, we will obtain your prior consent.

State Privacy Law Compliance

California (CCPA/CPRA)

California residents have the following rights under the California Consumer Privacy Act (as amended by the CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.

• Right to Delete: You may request deletion of your personal information, subject to applicable exceptions.

• Right to Correct: You may request correction of inaccurate personal information.

• Right to Opt Out of Sale/Sharing: ExuraBio does not sell or share personal information for cross-context behavioral advertising as described in this Privacy Policy.

• Right to Limit Use of Sensitive Personal Information: Where applicable, you may limit our use of sensitive personal information to purposes permitted by law.

• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a verifiable consumer request, contact privacy@exurabio.com or call our toll-free number listed on the Platform. We will respond within 45 days, with a 45-day extension available where reasonably necessary.

Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and Other States

ExuraBio extends the following rights to residents of states with applicable comprehensive privacy laws, to the extent required by law:

• Right to access and portability of personal data.

• Right to deletion of personal data.

• Right to correct inaccurate personal data.

• Right to opt out of targeted advertising and the sale of personal data.

• Right to appeal denied privacy requests.

Residents of these states may exercise their rights by contacting privacy@exurabio.com. ExuraBio will respond within the timeframes mandated by applicable state law.

Cookies and Tracking

ExuraBio uses strictly necessary, functional, and analytics cookies. We do not use advertising or tracking cookies for third-party behavioral advertising. You can manage cookie preferences in your browser settings or through our cookie preference center. Turning off certain cookies may affect Platform functionality.

Data Retention

ExuraBio retains personal information for as long as necessary to fulfill the purposes described in this Policy, including compliance with legal, tax, and regulatory obligations. Transaction records are retained for a minimum of seven (7) years following the transaction date. Account information is retained until account deletion, subject to applicable retention obligations.

Data Security

ExuraBio employs industry-standard technical, administrative, and physical safeguards to protect personal information, including encryption in transit (TLS) and at rest, role-based access controls, and regular security assessments. No method of transmission or storage is completely secure; in the event of a data breach, we will notify affected Users as required by applicable law.

Contact and Privacy Requests

For privacy inquiries, requests, or complaints, contact:

ExuraBio Privacy Team | privacy@exurabio.com | exurabio.com | 919-283-9490