Let's Resin Privacy Policy

[V1.0]

Last Updated: September 15, 2025

Effective Date: September 15, 2025

Let's Resin understand the importance of your privacy to you and will respect your privacy. Let's Resin Privacy Policy ("this Policy") describes how we might collect, store, us, and/or share personal information when you interact with us. The Policy applies to the products and services that we provide and the extensions thereof, including various products and services that we provide to you through the our official website, App and new forms emerging with technology ("our Platform"). If a separate privacy policy or user service agreement exists for a specific product or service, the privacy policy or user service agreement for that product or service will prevail. If the privacy policy or user service agreement for the product or service is not covered by such product or service, this Policy shall prevail. If one of our affiliated companies uses the products or services provided by us in their products or services but does not set up a separate privacy policy, this Policy shall also apply to such products or services.

Please note that the Policy does not apply to information collected through other means, such as offline channels or any other website operated by any third parties. Additionally, any third-party application or content (including advertisements) that may link to or be accessible from this website is not covered by this Policy. This policy is not intended to override the terms of any contact you have with us, not any rights you may have under other applicable data privacy laws. Please take a moment to familiarize yourself with our privacy protection practices. If you have any questions or concerns, please contact us at support@letsresin.com.

Ⅰ.How We Collect and Use Your Information

Personal information is all kinds of information relating to an identified or identifiable natural person, recorded electronically or by other means, excluding information that has been anonymized. Please note that the definition of "personal information" (or "personal data" and other similar expressions) may vary from country to country or region to region, so please refer to the laws and regulations related to the protection of personal information in your region.

1.1 Information We Collect From You

When you register and login to your account on our Platform via your email address, we need to collect your email address and password. During registration, we will verify your identity by sending a verification code to your email address to confirm your identity. After registering your account, you can choose to provide your nickname, picture, gender, date of birth, location, profile description, background picture. If you refuse to provide the above information, it will not affect your use of our Platform to register an account. You can use a third party account (including Facebook, google and other accounts) to log into our Platform, we will collect your information on third-party platforms (public information, such as profile photo, nickname and other information provided by you), used to generate and access our Platform account, so that you can directly register, log in and use our Platform and related services.

We may use contact information you provide to send you notifications such as changes to our Policy terms, conditions and policies regarding the services.

1.2 Customer Service

When you contact us through our Platform, by email or in any written form, in order to resolve your issue, we need to collect a record of the communication between you and customer service. We will also use the information we collect and use your account information, order information, contents of the communication between you and us, and any other reviews or feedback you provide to facilitate communications with you and to respond to your inquiries.

1.3 Network Security -- Reporting Bugs and Error

When you need to report bugs and provide suggestions to us, in order to contact you, we need to collect information about the problem you need to give feedback on (such as product category, problem type, recurrence steps, recurrence probability, whether you can recover it, etc.) and your name, phone number or email address.

1.4 Other submission

When you choose to upload your text, image and video works (including public post, private post and save into draft box) to our Platform, in order to manage and recommend your work, we need to collect your nickname, profile picture, content you published or to be published, as well as information of device you are using to create the content, the time of creation, and the location.

1.5 Marketing

When you choose to participate in the activities held by us or subscribe to our event information, in order to timely push the event information to you or get in touch with you, we will collect your name, phone number or email address, home address, survey content, etc. on the basis of your consent, you can unsubscribe by contacting us.

2.Information Automatically Generated and Collected

2.1 Accessing our platforms

When you access our platforms, we automatically collects technical data including your Media Access Control (MAC) address, GPS address, screen resolution, operating system and its version, device manufacturer and its model, language, Internet browser and its version, the name of the software you are using and its version and the time it was taken.

2.2 Provision of Our Services

We need to collect information such as log files generated when you use our products and services. The log files include devices and other technical information.

We may use the information for security purposes, including identity verification, detection and prevention of security incidents, and take necessary recording, auditing, analysis and handling measures according to the law to better prevent security risks such as website phishing, fraud, network loopholes, computer virus, network attack, network intrusion and other security risks and to more accurately identify actions in violation of laws and regulations or the relevant product or service agreements. We may combine information we obtain about you for the purposes described above. We may also use the information we obtain for other purposes for which we provide specific notice at the time of collection or otherwise with consent.

For security purposes, we collect may collect URL access records (e.g. device terminal type, device terminal screen resolution, device network operator, etc.), user behavior data, and device data. We may record URLs that we consider risky.

2.3 Cookies and Similar Technologies

We use cookies or similar tacking technology, such as web beacons, clear gifs, pixel tags, and single-pixel gifs, to enhance your experience when visiting our platforms. A cookie is a small file containing small blocks of data which are placed on the hard drive of your computer. They are then sent back to the website on each subsequent visit. Cookies serve useful functions because they enable web servers to recognize a user’s device or to track a user's browsing activity. Let's Resin use cookies primarily to enhance your experience when visiting our Platform or using our Platform Services, to provide you with customized display options, to provide statistical reports on web activity, or to secure software and website security requirements. We also use cookies to preload relevant content. These cookies do not capture personal email addresses or any personal information. You can manage the cookie setting and disable non-essential cookies at any time on our platforms. For more information regarding how we use cookies, please refer to our Let's Resin Cookie Policy.

3.Information From Third Parties

If you upload content from third-party platforms, such as you social media account, to our platform, we will access and collect relevant information, including your third-party account details, usernames, and any content you choose to upload from the third-party platform. This also applies when you choose to link your social media account to our platform.

Ⅱ. How We Share Your Information

1.Third-Party Service Providers

We may disclose or share your information with third-party service providers that support the provision of our products and services. These may include third-party professional service providers, cloud hosting providers, and customer service providers, who process your personal information on our behalf. We will only share personal information that is necessary for the provision of our products and services. We will also enter into strict confidentiality agreements with the companies, organizations and individuals with whom we share personal information, requiring them to process personal information in accordance with our instructions, this Policy and any other relevant confidentiality and security measures.

Where the sharing of your data is based on consent, you have the right to refuse to consent to the sharing of your personal information with third parties. Please note that if you refuse to consent to the sharing of information with third parties, you may not be able to use the specific corresponding features.

For further details on the circumstances under which we share personal information with third parties, you can send email support@letsresin.com to request further disclosure.

2.Business Transfers

We may transfer your data to a buyer or other successor in the event of a merger, acquisition, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Let's Resin's asset, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us may be among the assets transferred.

3.Compliance

We may share your personal information in certain circumstances, including:

• To law enforcement authorities, government or public agencies or officials, regulators, and/or any other person or entity with appropriate legal authority or justification for receipt of such information, if required or permitted to do so by law or legal process;
• When we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity;
• When the information is required for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, or for the enforcement of civil law claims.

4.Information You Disclose

Please note that any information (including personal information) you upload to the public areas of our Platform may be seen, collected and used by other visitors. You are solely responsible for any personal information you choose to upload to the public areas of our Platform.

Ⅲ. Notice for Data Subjects in California

This section is for users in California.

1.Data Collection

The table below sets out the categories of personal information we collect from users within the last twelve (12) months. Some information included in different categories may overlap.

“Do Not Track” (DNT) signals

We do not track its Users over time and across third party websites to provide targeted advertising and therefore does not respond to Do Not Track (DNT) signals. However, some third- party sites do keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you. If you are visiting such sites, your browser may include controls to block and delete cookies, web beacons and similar technologies, to allow you to opt out of data collection through those technologies.

2.Your Rights

Users enjoy certain rights under the California Consumer Privacy Act of 2018 (CCPA) and its amendments. This section describes your rights and how you may exercise them. Please note that for security reasons, we may have to verify your identity before processing your requests.

Right to Know and Access

You have the right to access your personal information and request us to disclose certain information to you about our processing of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or sharing that personal information.
• Whether we share or sell your personal information, and if so, the categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).
• If we disclose your personal information for a business purpose, we will identify the personal information categories that each category of recipient obtained.

If you wish to access and edit your personal information in your account, you may do so by logging into your account on our website or App and accessing the relevant pages for personal information, changing your password, changing your email address, etc.

Right to Data Portability

You have the right to obtain a copy of your personal information and you can do so at any time by contacting our customer service and we will respond to your request within 15 business days. Provided that it is technically feasible for us to do so, for example by matching data interfaces, we can also transfer a copy of your personal information directly to the third party you specify at your request.

Right to Rectification of Personal Information

If you discover that we have processed your personal information incorrectly, you have the right to request that we make corrections. You may contact us at any time through the contact information provided on the website or in the App, or send email to support@letsresin.com.

Right to Erasure/Deletion

You have the right to request that the Company delete any of your personal information that we collected from you and retained, subject to certain exceptions. You may make a request to us to delete personal information in the following cases:

• We collect and use personal information in violation of laws and regulations;
• Our processing of personal information is in breach of the agreement with you;
• We collect and process your personal information without your consent;
• You no longer use our products or services, or you cancel your account;
• We no longer provide products or services to you;
• You request the deletion of your account.

You can exercise your right by contacting our customer service. If we respond to your request for deletion, we will also simultaneously notify the entities (if any) from which we obtained your personal information to request its prompt deletion, unless otherwise required by law or regulation, or unless such entities have your independent authorization. If immediate deletion is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

Right to Opt-out of the Selling or Sharing of Personal Information

California Consumers have the right to opt-out of the “sale” of your Personal Information for monetary or other valuable consideration. If you are a California Consumer and would like exercise your Right to Opt-Out of Sale or Sharing, please submit your request at support@letsresin.com

Sensitive Information

We do not process or disclose any sensitive information for purposes beyond providing you with the services you requests, which may include the provision of our goods and services, optional features you may choose to enable, and any programs you choose to participate in.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for like-goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you with a different level or quality of like-goods or services.

California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our websites, other products, services and platforms that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. You can submit the request by contacting our customer service.

Ⅳ. Children’s Data

We define “children” as individuals (i) under the age of 16 residing in the EU/EEA, (ii) anyone under 13 residing in all other regions, or (iii) individuals who qualifies as “children” under the applicable data protection laws of their respective jurisdiction. We do not knowingly collect personal information from children. Children may not register for an account on our Platform or send us personal information such as their names, address, phone numbers, email address, etc., unless permitted by local law and their guardians have given their consent. We will only use or publicly disclose personal information collected from children with the consent of their guardians as permitted by law, with the consent of the guardian, or as necessary to protect the child. We do not sell or share children’s data under the definition of the California Consumer Privacy Act (CCPA) and its regulations.

If we become aware that we have collected personal information from a child without the consent of the child's guardian, we will delete the data as soon as we are aware of it. If you believe that we may improperly hold personal information from or about a child, please contact us.

Ⅴ. Data Retention and Security

1.Data Retention

We will only store your personal information for as long as necessary for the purposes described in this Policy and for as long as required by law, regulation and supervision, unless there is a mandatory retention requirement by law. If we terminate the service or operation, we will promptly stop the activities of continuing to collect your personal information, and, unless otherwise required by applicable laws and regulations, delete or anonymize your personal information. Where the immediate deletion is not possible, for example, because your Personal Information has been stored in backup archives, then we will securely store your Personal Information and isolate it from any further processing until deletion is possible. If we anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.

2.Account Cancellation

You may cancel your previously registered account through the means set forth in our Platform or by contacting us. When you contact our customer service to cancel, we will complete your request within 15 business days; after canceling your account, we will stop providing you with products or services and delete your personal information upon your request, except as otherwise provided by laws and regulations.

3.Data Security

We have taken reasonable and practicable security measures, consistent with industry standards, to protect your information from unauthorized access, disclosure, use, modification, damage or loss of personal information. We take the following steps to keep your data secure:

• Using encryption technology to improve the security of personal information, protected by SSL protocol encryption when exchanging data between your browser and the server, providing HTTPS protocol for secure browsing;
• Use of trusted protection mechanisms to prevent malicious attacks on personal information;
• Deploy access control mechanisms and make every effort to ensure that only authorized personnel have access to personal information;
• Conducting security and privacy training courses to enhance employees' awareness of the importance of protecting personal information;
• Specialized data compliance management systems, processes and organizations are in place to safeguard information. For example, we strictly limit the scope of people who access information, require them to comply with confidentiality obligations, and conduct audits.

We will take all reasonably practicable steps to ensure that no unrelated personal information is collected. We will retain your personal information only for the shortest period necessary to achieve the purposes described in this Policy, unless otherwise required by the laws and regulations of your location.

The Internet environment is not 100% secure and we will endeavor to ensure or warrant the security of any information you send us. If our physical, technical, or administrative safeguards are compromised, resulting in unauthorized access, public disclosure, tampering, or destruction of information, resulting in damage to your legal rights and interests, we will assume appropriate legal liability. After the unfortunate occurrence of personal information security events, we will strictly follow the requirements of the laws and regulations of your location and inform you in a timely manner of: the basic situation and possible impact of the security event, the disposal measures we have taken or will take, the suggestions you can independently prevent and reduce the risk, the remedial measures for you, etc. We will promptly inform you of the event-related situation by email, letter, telephone, push notification, etc. When it is difficult to inform the subject of personal information one by one, we will take a reasonable and effective way to issue an announcement. At the same time, we will also take the initiative to report the disposal of personal information security incidents and fulfill the obligations stipulated in other laws and regulations in accordance with the requirements of regulatory authorities.

Notwithstanding that we have taken reasonable and necessary security measures, we shall not be liable for any disclosure, loss, alteration, or unauthorized use of personal information caused by force majeure events or circumstances not attributable to us.If we are required to assume liability due to reasons attributable to us, you agree that our total liability shall be limited to the actual amount you have paid to us for using this platform within the preceding twelve (12) months, and in no event shall it exceed USD 100.

Ⅵ. Updates to the Privacy Policy

This Policy may be updated to provide you with better service and as our business evolves. However, we will not reduce your rights under this Policy without your consent. We will notify you of updates to this Policy by posting updated versions on our website and mobile devices and by appropriate means before they become effective, and we invite you to visit our Platform to keep up to date with the latest Privacy Policy.

We will also provide more prominent notice of material changes (we will provide specific notice of changes to our Policy, including, but not limited to, a special notice on the viewing page).

Material changes within the meaning of this Policy include, but are not limited to:

• Significant changes in our service model, such as the purpose of processing personal information, the type of personal information processed, and the way personal information is used;
• Significant changes in our ownership structure, organizational structure, etc. such as changes in ownership due to business restructuring, bankruptcy and mergers, etc;
• Changes in the primary recipients of personal information sharing, transfer or public disclosure;
• Significant changes in your rights to participate in the processing of personal information and how they are exercised;
• In the event of a change in the department responsible for handling the security of personal information, our contact information and complaint channels;
• When the personal information security impact assessment report indicates a high risk.

We will also keep an older version of this Policy on file for your review.

Ⅶ. Contact Information

If you have any questions, comments or complaints about our Privacy Policy, or wish to contact us, you can e-mail us at support@letsresin.com.