Privacy Policy

Last Revised: July 22, 2026

1. Introduction and Scope

Developer (“we,” “us,” or “our”) values our users and respects their privacy. This Privacy Policy governs our collection, use, disclosure, and protection of data in connection with our Services (as defined in our Terms of Service), our Platform, and our e-commerce operations. Capitalized terms not defined in this Privacy Policy have the meanings ascribed to them in our Terms of Service (“Terms”) located at https://www.metrodevelopmentgroup.com/terms-of-service.

“Personal Information” (also referred to as “Personal Data”) means information that can be used, alone or in combination with other information, to identify, contact, or locate you, or to identify you in context. Under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), and similar state privacy laws, Personal Information includes specific categories of data as described in Section 3 below. We apply the standards set forth in this Privacy Policy to all users, regardless of location, and we comply with applicable data protection laws including the CCPA, other U.S. state privacy laws, and where applicable, the EU General Data Protection Regulation (“GDPR”).

Please read this Privacy Policy carefully so that you have a clear understanding of how we collect, use, and protect your Personal Information. IF YOU HAVE ANY OBJECTIONS TO THIS PRIVACY POLICY, YOU SHOULD IMMEDIATELY DISCONTINUE USE OF THE SERVICES AND FOLLOW THE PROCEDURES DESCRIBED IN THE SECTION ENTITLED “YOUR PRIVACY RIGHTS.”

Our Platform may include links to third-party websites, blogs, and social media. These third-party sites have their own privacy policies and terms of use and are not controlled by this Privacy Policy. You should carefully review the terms, conditions, and policies of such third-party sites before visiting them or providing them with any personal information. We are not responsible for the privacy or security of any information you provide to a third-party website, and we make no representations concerning the accuracy, privacy, safety, security, or information practices of any third-party site. You may also use social media widgets (e.g., the Facebook “Like” button) on our Platform; these widgets may collect your IP address and identify which page you are visiting, and the information collected by such widgets is controlled by third-party privacy policies.

2. Changes to This Privacy Policy

We may update this Privacy Policy from time to time at our sole discretion. If we make material changes, we will notify you through the Platform, through the Services, or by publishing an updated Privacy Policy with a revised “Last Updated” date. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, you may exercise your rights as described in the “Your Privacy Rights” section below.

3. Categories of Personal Information We Collect

We collect Personal Information from the following categories of sources: (a) directly from you when you provide it (e.g., when you create an Account, place an order, or contact us); (b) automatically when you use our Platform or Services (e.g., through cookies, web beacons, and similar technologies); and (c) from third-party sources (e.g., identity verification services, fraud prevention services, and data aggregators). In the preceding 12 months, we have collected the following categories of Personal Information:

• a. Identifiers: Name, email address, postal address, telephone number, IP address, Account username, payment card information, and other similar identifiers.
• b. Commercial Information: Records of products purchased or considered, order history, order details, shipping address, and other purchasing or consuming histories or tendencies.
• c. Internet or Other Electronic Network Activity Information: Browsing history, search history, click patterns, session ID, device and browser type, operating system, CPU speed, referring or exit webpages, and information regarding your interaction with our Platform and Services.
• d. Geolocation Data: Precise or approximate location information derived from your device when you enable location-based services.
• e. Inferences: Inferences drawn from any of the above categories to create a profile about you reflecting your preferences, characteristics, behavior, and attitudes. We may use Artificial Intelligence, including Large Language Models and Geospatial AI, to process, analyze, and derive such inferences from the information we collect.
• f. Sensitive Personal Information: We may collect payment card information (a subset of financial information) to process transactions. We do not collect other categories of Sensitive Personal Information as defined by the CCPA, such as Social Security numbers, driver’s license numbers, biometric information, precise geolocation for purposes unrelated to the Services, racial or ethnic origin, religious beliefs, or contents of mail, email, or text messages (unless we are the intended recipient).
• g. Aggregated Information: We may also collect general, aggregated information about use of the Services, such as what pages visitors access, the number of visits, and average time spent on the Services. This information is generally collected in aggregate form without identifying any individual User, although IP addresses and session IDs may be tracked as part of our fraud prevention efforts.

4. Tracking Technologies and Site Analytics

Our Site and Platform use pixels, cookies, web beacons, and similar tracking technologies to collect information about visitor activity, including browsing behavior, page interactions, and referral sources. This information is used to provide the Services, including identity resolution, audience creation, and data delivery. By using the Site or Platform, you acknowledge that these tracking technologies are an integral part of the Services we provide. You may disable cookies in your browser settings; however, doing so may limit certain functionality of the Site and Platform. PLEASE NOTE THAT DATA COLLECTED THROUGH TRACKING TECHNOLOGIES MAY NOT ALWAYS BE COMPLETE OR ACCURATE, AND WE DISCLAIM ANY AND ALL WARRANTIES RELATED TO SUCH DATA.

5. How We Use Your Information

We collect and use your Personal Information for the following business and commercial purposes:

• a. Providing Services: To enable you to access and use the Services, including fulfilling orders for products, enabling you to create an Account, processing payments, and enabling you to communicate with us.
• b. Business Operations: To conduct routine business operations such as billing, identification, authentication, contact purposes, customer support, and general research.
• c. Personalization and Marketing: To personalize your experience, deliver content and product offerings relevant to your interests, track User preferences, communicate with you about Services, special offers, and other services, and for affiliate marketing (see the Affiliate Marketing Disclaimer in our Terms).
• d. Advertising: To serve targeted advertisements based on your interests and measure the effectiveness of our advertising campaigns.
• e. Analytics and Improvement: To conduct analytics, research, and product development to improve our Platform and Services.
• f. Artificial Intelligence: To utilize Artificial Intelligence, including Large Language Models and Geospatial AI, to provide, personalize, and improve our Services, develop new features, analyze trends, generate recommendations, insights, personalized content, or automated responses, and for research and development purposes. We aim to minimize the use of directly identifiable Personal Information and rely on anonymized or aggregated data where feasible.
• g. Aggregate Reports: To gather product, location, and other contributed information to create reports based on aggregate, anonymized data, which we may use internally or sell to others.
• h. Security and Fraud Prevention: To detect, prevent, and address fraud, security issues, and technical problems.
• i. Legal Compliance: To comply with legal obligations, court and governmental orders, enforce our Terms, and protect our rights and the rights of others.
• j. Consent: When you otherwise consent for us to do so. We may ask for your consent to process your Personal Information for a specific purpose that we communicate to you. When you consent to processing for a specified purpose, you may withdraw your consent at any time, and we will stop processing your data for that purpose.

6. Cookies, Tracking Technologies, and Do Not Track

As described in Section 4, we and our third-party partners use cookies, pixels, and other technologies (collectively, “Cookies”) to collect, record, and share information you provide, as well as information about your interactions with our Site for ad targeting, analytics, personalization, and Site functionality purposes. By using our Platform, you agree to the use of these technologies as described in this Privacy Policy and subject to your settings. A cookie is a small amount of data transferred to your browser by a web server that functions as your identification card, enabling us to record your passwords and preferences. A web beacon is a small transparent image embedded in an HTML page or email used to track when the page or email has been viewed. A pixel is a piece of code that collects information about your activity. Most browsers are initially set to accept cookies. You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether to accept it. If you disable cookies, you may lose some features and functionality of our Platform. We do not currently respond to “Do Not Track” browser signals. For information on opting out of targeted advertising cookies, please refer to the “Your Choices” section below.

We may track your behavior on our Services, either directly or through third parties we engage (including advertising partners), for purposes including User support, analytics, research, product development, fraud prevention, risk assessment, regulatory compliance, and enabling you to use and pay for the Services.

7. Data Security and Retention

We use a variety of security measures, including SSL, encryption, and authentication tools, to help protect your information. Our security measures include standard industry practices, international data protection measures (such as those described in the EU GDPR implementing regulations where applicable), and periodic system-wide password resets with high password strength requirements. We strongly discourage password sharing. Due to the nature of information technology, we cannot be held responsible if you share your login credentials with others. If we learn of a security breach, we will immediately reset your Account password and attempt to notify you as required by applicable law.

When Artificial Intelligence, Large Language Models, or Geospatial AI are used to process your information, we implement appropriate safeguards including data minimization, anonymization, pseudonymization, and access controls. Where appropriate, human oversight is integrated into AI-driven processes to mitigate risks of error or bias. We regularly review our AI systems to ensure compliance with our data protection policies and legal obligations.

Retention. We retain each category of Personal Information for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. The criteria used to determine retention periods include: (a) the length of time we have an ongoing relationship with you and provide Services to you; (b) whether there is a legal obligation to which we are subject (e.g., tax, accounting, or regulatory requirements); and (c) whether retention is advisable in light of our legal position (e.g., applicable statutes of limitations, litigation, or regulatory investigations). When we no longer need your Personal Information, we dispose of it safely.

8. Disclosure of Personal Information to Third Parties

We do not “sell” Personal Information as that term is traditionally understood (i.e., in exchange for monetary consideration). However, under the CCPA’s broad definition, certain disclosures of Personal Information to third-party advertising partners for targeted advertising purposes may constitute a “sale” or “sharing” of Personal Information. In the preceding 12 months, we may have “shared” the following categories of Personal Information with third-party advertising partners for cross-context behavioral advertising purposes: Identifiers; Internet or Other Electronic Network Activity Information; and Inferences. We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age.

Disclosure for Business Purposes. We will not share your Personal Information with third parties without your express consent, except in the limited circumstances described below. In the preceding 12 months, we have disclosed the following categories of Personal Information to service providers and contractors for business purposes: Identifiers; Commercial Information; Internet or Other Electronic Network Activity Information; Geolocation Data; Inferences; and Sensitive Personal Information (payment card information only, to payment processors).

Categories of Third-Party Recipients. Categories of third parties to whom we disclose Personal Information include:

• a. Service providers who perform services on our behalf, including payment processors, shipping and logistics providers, cloud hosting providers, email delivery providers, analytics providers, and fraud prevention services. These service providers are contractually obligated to protect your information and may not use your Personal Information for their own commercial purposes unrelated to providing services to us.
• b. Marketing and advertising partners who assist with targeted advertising and measuring advertising effectiveness.
• c. Identity verification services and fraud prevention services to conduct checks against databases (where legally allowed) and assist with risk assessment.
• d. Government entities when required by law, regulation, or litigation, and as necessary for purposes of national security, law enforcement, or other issues of public importance.
• e. A successor entity in connection with a merger, acquisition, sale of assets, financing, or other corporate transaction. We may provide such entity with User information without obtaining your further consent, and we may provide notice of such transactions.

9. Third-Party Data Processing

If you submit Personal Data about other individuals in connection with the Services (“Third-Party Data”), you are the Data Controller and you appoint us as a Data Processor of such data for the purpose of providing the Services. To the extent that we are a Data Processor for you regarding Third-Party Data, we will:

• a. Implement appropriate technical and organizational measures to safeguard the Third-Party Data against unauthorized or unlawful access, loss, destruction, theft, use, or disclosure. We implement security measures in accordance with United States law; if higher levels of security are required, please contact us.
• b. Limit access to the Third-Party Data only to employees who need it to perform the Services and take appropriate steps to ensure their reliability.
• c. Process the Third-Party Data only as specified by this Privacy Policy and in accordance with your instructions, and not use the Third-Party Data for any purposes other than those related to the performance of the Services.
• d. Upon expiration or termination of these Terms, or upon your request, cease all use of the Third-Party Data and destroy or return it to you.
• e. Not disclose the Third-Party Data to any third party without your prior written consent. Such consent is granted, for example, when you instruct us to share a dashboard with third parties.

We may provide access to a subcontractor processor if we reasonably consider such access necessary to perform the Services. Before such access, we will ensure an agreement is in place requiring the third party to treat Personal Data in accordance with this Privacy Policy and applicable law. You authorize us to subcontract the provision of technology and commercial services to members of our corporate group. You represent and warrant that you have obtained all necessary consents from data subjects whose Personal Data you submit to us.

10. International Transfers

If you are visiting our Platform or using our Services from a country other than the United States, your Personal Information may be transferred to, stored, and processed in the United States or other countries where our servers are located or where our service providers operate. These countries may not have data protection laws deemed as adequate as those in your country. By using our Services, you consent to the transfer of your Personal Information to the United States and other countries as described in this Privacy Policy. We implement appropriate safeguards, such as Standard Contractual Clauses or other legally recognized mechanisms, to ensure your data is protected during such transfers, where applicable.

While our Services are primarily intended for users in the United States, we acknowledge that users from other jurisdictions may access our Platform. If you do not agree to such transfers and processing, you should not use our Services.

11. Your Privacy Rights

We are committed to ensuring that you can exercise your rights regarding your Personal Information. Depending on your jurisdiction, you may have some or all of the following rights. We extend these rights to all users as our standard practice:

• a. Right to Know/Access. You have the right to request that we disclose to you: (a) the categories of Personal Information we have collected about you; (b) the categories of sources from which your Personal Information was collected; (c) the business or commercial purpose for collecting, selling, or sharing your Personal Information; (d) the categories of third parties to whom we have disclosed your Personal Information; (e) the specific pieces of Personal Information we have collected about you; and (f) if we sold or shared your Personal Information, the categories of Personal Information sold or shared and the categories of third parties to whom such information was sold or shared.
• b. Right to Delete. You have the right to request that we delete Personal Information we have collected from you, subject to certain exceptions permitted by law (e.g., to complete a transaction, detect security incidents, comply with legal obligations, or for certain internal uses compatible with the context in which you provided the information).
• c. Right to Correct. You have the right to request that we correct inaccurate Personal Information that we maintain about you, taking into account the nature of the Personal Information and the purposes of the processing.
• d. Right to Opt-Out of Sale or Sharing. You have the right to opt out of the “sale” or “sharing” of your Personal Information for cross-context behavioral advertising purposes. To exercise this right, you may click the “Do Not Sell or Share My Personal Information” link on our Site, or submit a request as described below.
• e. Right to Limit Use of Sensitive Personal Information. If we use or disclose Sensitive Personal Information for purposes beyond what is necessary to provide the Services, you have the right to limit such use or disclosure. Currently, we use Sensitive Personal Information (payment card information) only as necessary to process your transactions and for fraud prevention purposes.
• f. Right to Data Portability. You have the right to receive your Personal Information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
• g. Right to Withdraw Consent. Where your Personal Information has been collected and processed based on your consent, you may withdraw your consent at any time without affecting the lawfulness of processing conducted before your withdrawal. Note that your withdrawal of consent may prevent us from providing the Services to you.
• h. Right to Object. You have the right to object to the processing of your Personal Information where it has been collected and processed based on our legitimate interests. You also have the right to object to automated individual decision-making, including profiling, where such decisions produce legal effects concerning you or similarly significantly affect you.
• i. Right to Non-Discrimination. You have the right not to receive discriminatory treatment for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices or rates, provide you a different level or quality of goods or services, or suggest that you may receive a different price or rate or different level or quality of goods or services because you exercised a privacy right.

12. Your Choices

Marketing Communications. If at any time you are uncomfortable with our use of your Personal Information for internal marketing purposes, you may opt out by emailing us at Privacy@metrodg.com. You may similarly opt out of receiving communications from us, although we may continue to communicate with you regarding your use of the Services. Note that if you opt not to provide us with certain mandatory information, our products and Services may be unavailable to you.

Cookies. We and our third-party partners use cookies, pixels, and other technologies to collect and share information about your interactions with our Site. You may set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of our Platform may be inaccessible or not function properly. For more information about how we use cookies and your choices, please see Section 6 (Cookies, Tracking Technologies, and Do Not Track) above.

Targeted Advertising. For targeted advertising cookies, you can opt out through industry self-regulation programs like the Digital Advertising Alliance (DAA) at www.aboutads.info/choices or the Network Advertising Initiative (NAI) at www.networkadvertising.org/choices. Opting out of interest-based advertising does not mean you will no longer see advertisements, but rather that the ads you see may be less relevant to your interests. You may also exercise your Right to Opt-Out of Sale or Sharing as described in the “Your Privacy Rights” section above.

13. State-Specific Privacy Rights

California Residents. This Privacy Policy is designed to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (CCPA). The rights described in the “Your Privacy Rights” section above reflect the rights afforded to California residents under the CCPA. Additionally, under California Civil Code Section 1798.83 (the “Shine the Light” law), California residents who have an established business relationship with us may request information regarding whether we have disclosed Personal Information to any third parties for the third parties’ direct marketing purposes. We do not share your Personal Information with third parties for their own direct marketing purposes without your consent.

Financial Incentives. We do not currently offer any financial incentives (such as price or service differences) in exchange for the retention or sale of your Personal Information. If we offer any such programs in the future, we will provide you with the material terms of the program, obtain your opt-in consent before enrolling you, and allow you to opt out at any time.

Other State Privacy Laws. In addition to California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with certain privacy rights. The rights described in the “Your Privacy Rights” section above generally cover the rights afforded under these state laws. The exact scope of these rights may vary by state. For example, the Right to Correct may not apply in Iowa and Utah, and certain opt-out rights may be limited in some states.

Nevada Residents. Nevada provides its residents with a limited right to opt out of certain personal information sales. Residents who wish to exercise this sale opt-out right may do so by sending a written notice to Privacy@metrodg.com. However, please know we do not sell your Personal Information for monetary consideration. Only in the case of a merger, sale, financing, acquisition, or other transaction involving all or part of us may your information be involved in such a transaction.

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Florida and the United States of America, without regard to conflict of laws principles. Where applicable, the laws of the countries where our servers are located may also apply. By using our Services, you consent to the application of United States law and Florida law to the use and disclosure of your information in accordance with this Privacy Policy.

15. How to Submit a Request; How to Contact Us

If you have any questions regarding this Privacy Policy, our privacy practices, or if you wish to exercise any of your privacy rights, you may contact us or submit a request by:

• Emailing us at: Privacy@metrodg.com
• Calling us at: 813-288-8078
• Mailing us at: 2502 North Rocky Point Dr., Suite 1050 Tampa, FL 33607

Verification Process. When you submit a request, we will take steps to verify your identity before processing your request. We will ask you to provide certain information to match with information we have on file about you. The verification process may vary depending on the type of request and the sensitivity of the Personal Information involved. For requests to know specific pieces of Personal Information or requests to delete, we will apply a higher level of verification. If we cannot verify your identity to a sufficient level of certainty, we will not be able to fulfill your request, and we will notify you accordingly.

Authorized Agents. You may designate an authorized agent to submit a request on your behalf. To designate an authorized agent, you must provide the agent with written permission signed by you to act on your behalf. We may require that you verify your own identity directly with us and confirm that you have authorized the agent. If an authorized agent submits a request on your behalf, we may require proof of authorization, such as a power of attorney or other written authorization signed by you.

Response Timing. We will respond to verifiable requests within 45 days of receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing. If you have an Account with us, we will deliver our written response to that Account. If you do not have an Account with us, we will deliver our written response by mail or electronically, at your option. To appeal a decision regarding a consumer rights request, please send a written appeal notice to Privacy@metrodg.com.

EU Residents. If you are a resident of the European Union, you may also file a complaint with a competent data protection authority regarding the processing of your Personal Data. While we suggest that you contact us first, you may contact the competent data protection authority directly.

We take our users’ privacy concerns seriously. If you believe that we have not complied with this Privacy Policy with respect to your Personal Information, please write to us at the address above, and we will investigate and attempt to resolve any complaints or disputes.