Effective Date: February 17, 2026 Operated by Scurit, LLC, a Florida limited liability company.

YardCRM (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you use the YardCRM platform (the “Service”).

This policy applies to users of the Service, including account holders and authorized users.

1. Information We Collect

1.1 Account Information

When you create or manage an account, we may collect:

• Name
• Email address
• User role
• Dealer or company association
• Billing information (processed through third-party providers)

1.2 Business Data (Customer-Provided Data)

You may enter business-related data into the platform, including:

• Inventory listings
• Company records
• Leads and contacts
• Invoices and transaction data
• Notes and communications
• Support tickets

This data is stored to provide the Service and remains under your control.

1.3 Operational and Technical Data

We automatically collect certain technical information, including:

• Login activity
• IP address
• Browser and device type
• Usage logs
• Error diagnostics
• Security monitoring data

This information is used to maintain performance, security, and reliability.

2. How We Use Information

We use information to:

• Provide and maintain the Service
• Authenticate users and protect accounts
• Process subscriptions and payments
• Send transactional communications (verification, system alerts, billing notices, support updates)
• Monitor system integrity and prevent fraud
• Improve functionality and user experience

We do not sell personal information.

3. Legal Basis for Processing (GDPR Notice)

If you are located in the European Economic Area (EEA) or United Kingdom, we process personal data under the following legal bases:

• Performance of a contract
• Legitimate interests (security, service improvement)
• Legal compliance obligations

Users are responsible for ensuring they have appropriate legal grounds for personal data they upload into the platform.

4. California and U.S. State Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA/CPRA), including:

• Right to access personal information
• Right to request deletion
• Right to correct inaccurate information

We act as a service provider for customer-entered business data.

We do not sell or share personal information for cross-context behavioral advertising.

Residents of other states (including Virginia, Colorado, Connecticut, Utah, and Florida, where applicable) may have similar rights under applicable law.

Requests may be submitted through the contact information below.

5. Cookies and Tracking

YardCRM uses cookies and similar technologies for:

• Authentication
• Session management
• Security
• Core application functionality

Essential cookies are required for operation.

Non-essential cookies, if used, are controlled through the cookie consent mechanism.

6. Data Sharing

We share information only as necessary to operate the Service, including with:

• Payment processors (e.g., Stripe)
• Email delivery providers
• Cloud hosting providers
• Security and infrastructure services

Service providers are contractually required to process data solely for providing services to YardCRM.

We do not sell personal data.

7. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, or misuse.

However, no system can be guaranteed 100% secure.

8. Data Retention

We retain account and business data:

• For the duration of your active subscription
• For a reasonable period following termination for backup, legal, or compliance purposes

Users are responsible for exporting data prior to account closure.

9. Your Responsibilities

If you upload personal data of customers, leads, or third parties into the platform:

• You are responsible for providing required privacy notices
• You are responsible for obtaining necessary consents
• You are responsible for responding to data subject rights requests

YardCRM processes such data solely on your behalf.

10. International Data Transfers

If you access the Service from outside the United States, you acknowledge that information may be transferred to and processed in the United States.

11. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

The updated version will be posted with a revised effective date.

Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or requests, please contact:

[email protected] Or Through the YardCRM support portal