Karrot Privacy Policy

(Effective Date: 11/27/2025)

Introduction

Karrot Canada Corp. ("Company" or "we") respects your privacy and is committed to protecting it by complying with this privacy policy (this "Policy").

This Policy sets out:

• The types of information we may collect or that users may provide when you download, install, register with, access or use the Karrot mobile application software ("App") or "ca.karrotmarket.com" or "www.karrotmarket.com" or other sites of ours (the "Service Sites", and collectively with the App, "Karrot").

• Our practices for collecting, using, maintaining, protecting, and disclosing that information.

What is Personal Information

"Personal information" is generally understood to mean any information relating to an identifiable individual, including information that can directly or indirectly identify, contact, or locate that individual, and includes information that is considered "personal information" or "personal data" under applicable privacy laws.

Scope

This Policy applies only to personal information we collect through or in connection with Karrot, including through email, text, and other electronic communications sent through or in connection with Karrot. This Policy DOES NOT apply to personal information that you provide to or is collected by any third party.

Please read this Policy carefully to understand how we collect, process, and store your personal information. If you do not agree with our policies and practices, do not download, register with, or use the App or visit the Service Sites.

Information We Collect and How We Collect It

A. Information You Provide to Us

When you download, register with, or use the App or access, use or visit the Service Sites, or otherwise interact with us, you may provide the following types of information:

• Information provided by filling in forms in Karrot. This includes information you provide when registering to use the App and/or Service Sites, subscribing to our service, or requesting further services. This may include identity information, such as your name and username, and contact details like billing address, delivery address, email address, and telephone numbers.
• Records and copies of your correspondence, if you contact us.
• Your responses to surveys.
• Details of transactions you carry out through the App and/or Service Sites, such as financial information like your bank account number and payment card details if provided.
• Your search queries on Karrot.
• Information (including without limitation profile images, photos, videos, or other digital content) you provide for display on public areas of the App and/or the Service Sites as well as conversations with other Karrot users through Karrot chat features (collectively, "User Contributions").
• Information you provide to our customer support team when you report a problem with Karrot.
• Your preferences for receiving marketing communications.

You post and transmit User Contributions to others at your own risk. We cannot control the actions of third parties with whom you may choose to share your User Contributions. Therefore, we are not able to guarantee that your User Contributions will not be viewed or accessed by unauthorized third parties.

B. Automatic Information Collection

When you download, access, or use the App or the Service Sites, we may automatically collect:

• Usage details. When you access or use the App or the Service Sites, we may automatically collect certain details of your access to and use of the App or the Service Sites, including traffic data, location data, logs, and other communication data and the resources that you access and use on or through the App.
• Device information. We may collect information about your mobile device and internet connection, including the device's unique device identifier, IP address, operating system, mobile network information, and the device's telephone number.
• Stored information and files. When you expressly grant the App access to such information, the App also may access the files you select and the metadata and other information associated with such selected files stored on your device. This may include, for example, photographs, audio and video clips, personal contacts, and address book information.
• Location information. With your permission, the App may collect information about the location of your device from time-to-time to determine and authenticate your location.

C. Cookies and Similar Tracking Technologies

We use cookies and similar online tracking technologies (such as pixel tags and web beacons) to:

• Analyze and track usage of the App and Service Sites.
• Conduct marketing and advertising.
• Measure the effectiveness of promotional campaigns.
• Improve performance, security, and functionality.
• Fulfill the purposes otherwise described in this Policy.

These technologies also allow us to collect information such as browser type, time spent on the Service Sites and App, pages visited, language preferences, unique identifiers, content you view, click on, or share, screen gestures or actions, interactions with Karrot and other Karrot users, and other traffic data.

If you do not want information collected through the use of cookies, you may control certain cookies through settings in your web browser and on your device. Additionally, most browsers allow you to automatically decline cookies or be given the choice of declining or accepting a particular cookie (or cookies) from a particular website. You may also wish to refer to

http://www.allaboutcookies.org/manage-cookies/index.html. If, however, you do not accept cookies, you may experience some inconvenience in your use of the Service Sites and App. For more information about how you can opt out of receiving targeted advertising, see Choices About How We Use and Disclose Your Information.

D. Third Party Information Collection

When you use Karrot or its content, certain third parties may collect information about you or your device, including by using cookies and similar technologies. These third parties may include:

• Analytics companies.
• Ad networks, social media providers, or advertising providers.
• Generative AI service providers that process and analyze content to improve user experience.
• Security companies that monitor for fraud, abuse, or unauthorized access, and who verify the identities of users of Karrot.
• Identity verification services that we use to confirm your identity (which may include the collection of sensitive personal information, like biometric data).

How We Use Your Information

We use each of the above categories of information that we collect about you, including any personal information:

• To verify accounts and your activity.
• To provide you with the App and Services Sites, their contents, and other Company services, including to personalize your experiences, to provide convenience features, and to offer you recommendations.
• To provide you with information, products or services that you request from us, including to provide customer support, which may be supported by our AI tools.
• To fulfill the purposes for which you provided it or that were described when it was collected or any other purpose for which you provide it.
• To determine your "neighbourhood" market (which is generally a maximum of a 50 KM radius surrounding your location) for purposes of the App and the Services Sites and to determine the local bulletin board that you can post and transact on.
• To carry out our obligations and enforce our rights in any contracts with you, including to comply with legal requirements.
• To notify you when App updates are available, and of changes to any products or services we offer or provide through it or through the Services Sites.
• To improve Karrot, our products and services, and our customer relationships and experiences, including by using content you provide when you interact with Karrot (including User Contributions) to train our AI models that power these interactive features.
• To store information about your preferences and customize Karrot according to your individual interests, to speed up your searches, and to recognize you when you use Karrot.
• To detect and remedy violations of our terms or policies.
• To respond to user inquiries and otherwise correspond with you.
• To combat harmful conduct and detect and prevent fraud (including by verifying your identity), suspicious activity, spam and other bad experiences.
• To maintain the integrity of our App and Services Sites, and promote safety and security on and off of our App and Service Sites (including via video surveillance if you visit our premises).
• For online and offline marketing purposes, including to deliver content and advertisements to you specific to your location, to measure or understand the effectiveness of the advertising we serve to you and others, and to deliver relevant advertising to you (which may be supported by our AI tools).
• To allow you to participate in interactive features, social media, or other features on Karrot,.
• For any other purpose with your consent.
• As otherwise required or permitted by law.

Sharing of Personal Information

We may transfer or disclose (as applicable) each of the above categories of personal information that we collect for the purposes described in this Policy to the following categories of recipients:

• To our subsidiaries and affiliates.

• To service providers who process personal information on behalf of us for the operation of our business, including Company affiliates.

• According to applicable law, to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Karrot Canada Corp.'s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Karrot Canada Corp. about our customers and users is among the assets transferred.
• To other entities :
  • for any other purpose we disclose when you provide the information with your consent;
  • to comply with any court order, law, or legal process, including to respond to any government or regulatory request, according to applicable law;
  • to enforce our rights arising from any contracts between you and us, including our terms and conditions;
  • if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Karrot Canada Corp., its affiliates, our customers, or others (this includes exchanging information with other companies and organizations for fraud prevention and credit risk reduction); and
  • as otherwise required or permitted by law.

Transferring Your Personal Information and Foreign Transfers

We may transfer personal information that we collect or that you provide us to contractors, service providers, and other third parties we use to support Karrot, our business, our other services, and our operations (such as payment card processors, technical support providers, hosting services providers, and other AI service providers, data storage and processing service providers, and analytics providers that assist us with Karrot improvement and optimization).

We may process, store, and transfer your personal information in and to other jurisdictions with different privacy laws that may or may not be as comprehensive as those in your country or region of residence. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of such other jurisdictions may be able to access your personal information.

Your Rights and Choices

A. Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information, in each case subject to applicable law:

• Location Information. In order to deliver our services, the App may collect and use real-time information about your device's location. If you block the use of location information, the App may be inaccessible or not function properly.

• Promotional Offers from the Company. If you have opted in to receive certain emails and/or push notifications from us but no longer wish for us to use your contact information to promote our own or third parties' products or services, you can opt-out by sending us an email stating your request to help@karrotmarket.com or by opting out of receiving promotional push notifications in the App. If we have sent you a promotional email, you may unsubscribe by clicking the unsubscribe link we have included in the email. This opt-out does not apply to information provided to us as part of a product purchase, warranty registration, product service experience, or other transactions. You can also always opt out by logging into the App and adjusting your user preferences in your account profile by checking or unchecking the relevant boxes or by sending us an email stating your request to help@karrotmarket.com.

B. Accessing and Correcting your Personal Information

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes. By law you may have the right to request access to and to correct the personal information that we hold about you in certain jurisdictions.

You can review and change your personal information by logging into your account and visiting your account profile page.

You may also send us an email at help@karrotmarket.com to request access to, correct, or delete any personal information that you have provided to us, in addition to requesting information about the uses and disclosures related to your personal information. We will accommodate your requests to the extent required by applicable law. For example, applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, erased, or made your personal information anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal information, we will inform you of the reasons why as required and permitted by applicable law.

We may request specific information from you to help us confirm your identity to fulfill your request.

If you delete your User Contributions from the App, copies of your User Contributions may remain viewable in cached and archived pages or might have been copied or stored by other Karrot users. Acceptable use of information provided on Karrot, including User Contributions, is governed by our terms of use at https://ca.karrotmarket.com/policy/terms.

C. Withdrawing Your Consent

We may collect, use, and disclose your personal information with your consent. How we obtain your consent, including whether it is express or implied, will depend on the circumstances and the sensitivity of the personal information in question, as well as applicable law. Generally, we will seek your consent at the time we collect your personal information, either orally, electronically, or in writing, to the extent required under applicable law.

You may have the legal right to withdraw your consent to the collection, use, or disclosure of your personal information under certain circumstances. To request a withdrawal of your consent, contact us at help@karrotmarket.com. Please note that if you withdraw your consent we may not be able to provide you with a particular product or service. We will explain the specific impact to you at the time you make your request to help you make your decision.

In certain circumstances, we may collect, use, and disclose your personal information without your consent to the extent permitted or required by law.

Data Security

The security of your personal information is very important to us. We use physical, electronic, and administrative measures designed to secure your personal information from loss, theft and from unauthorized access, use, and disclosure.

The safety and security of your information also depends on you. If you have been given (or have chosen) authorization to access your account or certain features within Karrot, you are responsible for keeping it confidential. We ask that you not to share your account or confidential information with anyone.

We urge you to be careful about giving out information in public areas of Karrot like message boards, which any user can view. Certain services include social networking, chat room or forum features. Ensure when using these features that you do not submit any personal information that you do not want to be seen, collected or used by other users.

We have put in place procedures to deal with breaches of security safeguards and will notify you and any applicable regulator when we are legally required to do so.

Unfortunately, the transmission of information via the Internet and mobile platforms is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted through Karrot. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any Karrot privacy settings or security measures.

Data Retention

Except as otherwise permitted or required by applicable law or regulation, we will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Under some circumstances we may anonymize or aggregate your personal information so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent, as permitted by applicable law.

Third-Party Websites and Services

We may provide links to third-party websites for your convenience and information. We may also make opportunities available to you to purchase, subscribe to, or use other products or services from third parties with different privacy practices. Those other websites, products, or services are governed by the privacy policies of the respective third party. This Policy does not extend to any websites, products, or services provided by third parties. We do not assume responsibility for the privacy practices of third parties not acting on our behalf and we encourage you to review all third-party privacy policies prior to using third-party websites, products, or services.

Children's Privacy

Our App is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on this App or on or through any of its features/register on the App, make any purchases through the App, use any of the interactive or public comment features of this App, or provide any information about yourself to us, including your name, address, telephone number, email address, or any user name you may use.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. It is our policy to post any changes we make to this Privacy Policy on this page and such changes become immediately effective upon posting, unless otherwise noted. If we make material changes to how we treat our users' personal information, we will update this Policy and notify you by posting it on our website and with an in-App alert the first time you use the App after we make the change.

We include the date this Policy was last revised at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting this Policy to check for any changes.

Contact Information And Challenging Compliance

We welcome your questions, comments, and requests regarding this Policy and our privacy practices. Please contact us at:

Privacy Officer Karrot Canada Corp.

119 Spadina Avenue, Suite 701, Toronto, ON M5V 2L1, Canada help@karrotmarket.com

We have procedures in place to receive and respond to complaints or inquiries about our handling of personal information and our compliance with this Policy and with applicable privacy laws. To discuss our compliance with this Policy please contact our Privacy Officer using the contact information listed above.

Supplemental Notice for Residents in Certain US States

This Supplemental Notice for Residents in Certain US States (this "Supplemental Notice") applies to consumers in states that have a state-level comprehensive privacy law that applies to us and addresses personal information we collect online and offline. As discussed above, certain third parties may process "sensitive data" as defined under applicable law. We do not knowingly process personal information of minors under the age of 13. Additionally, our disclosure of personal information, including your identifiers, internet usage information, and inferences collected through cookies and similar online tracking technologies, may be considered "targeted advertising" under applicable law.

You may have the following privacy rights, in each case to the extent set out in applicable law:

• The right to confirm whether we process personal information about you and request access to such personal information (including, if applicable, in a portable and readily usable format or certain additional information about to whom we disclose your personal information)
• The right to correct inaccuracies in certain personal information we may hold about you.

• The right to delete personal information we have collected about you.

• The right to opt-out of "sale" of personal information to third parties, and/or the processing of personal information for "targeted advertising" purposes.

You have a right to be free from discrimination based on your exercise of your privacy rights, and may have a right to appeal our decision not to process your one of the above-listed privacy rights.

We do not process your personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

To exercise your rights pursuant to this Supplemental Notice, please use this request form or contact us at:

Privacy Officer Karrot Canada Corp.

119 Spadina Avenue, Suite 701, Toronto, ON M5V 2L1, Canada help@karrotmarket.com

As required under applicable law, we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. Under applicable law, you may have the right to designate an authorized agent to make a request on your behalf. We may require the agent to provide proof of written permission to act on your behalf. To the extent permitted by law, we may require you to verify your own identity in response to a request, even if you choose to use an agent. If you are an authorized agent submitting a request on behalf of a consumer, please contact us at help@karrotmarket.com.