Privacy Policy

Effective Date: July 1, 2026

Last Reviewed: September 2, 2026

1. Introduction

This Privacy Policy describes how Razorleaf Corporation, including its Razorleaf Government Solutions division (together, “Razorleaf,” “we,” “us,” or “our”), collects, uses, discloses, and safeguards information collected through www.razorleaf.com (the “Site”) and through our other usual business, marketing, and sales interactions with you.

Razorleaf primarily serves business customers, suppliers, and prospective business contacts rather than individual consumers; the majority of information we hold relates to business dealings and contracts rather than to consumers directly. This Policy nonetheless applies to any personal data we collect from individuals who visit the Site or interact with us, and is intended to address the requirements of the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) and the EU/UK General Data Protection Regulation (“GDPR”). It does not constitute legal advice; counsel should review this Policy prior to publication.

For purposes of the GDPR, Razorleaf is the data controller.

This Privacy Policy works together with our separate Cookie Policy, which lists the specific cookies and tracking technologies used on the Site and explains how to manage your preferences.

2. Information We Collect

2.1 Information You Provide Directly

• Contact and lead-generation information submitted through forms (name, email address, phone number, company, job title)
• Information submitted in connection with marketing communications, webinars, or content downloads, processed through Salesforce Pardot
• Communications sent to us directly

2.2 Information Collected Automatically

When you visit the Site, our servers automatically recognize your domain name and, where provided, your email address, and log the pages you visit. We do not disclose your email address to anyone outside Razorleaf’s employees and contractors who need it to do their jobs. Beyond this server-level logging, additional information is collected automatically through cookies and similar tracking technologies. For the specific cookies in use, what each does, and how to manage your preferences, see our separate Cookie Policy.

3. How We Use Information

• To operate and maintain the Site
• To respond to inquiries and provide sales/customer support
• To comply with legal obligations
• To provide you with the services and news which you request
• To provide you with billing information in relation to our Company
• To carry out our obligations arising from any contracts entered into between you and us
• To notify you about changes to our Company
• To deliver (explicit) opt-in marketing communications and manage lead-nurturing campaigns (Pardot)
• To identify and qualify business visitors for sales purposes (ZoomInfo)
• To analyze Site usage and improve content and functionality (Analytics cookies)
• To measure and, where consented, deliver advertising (Advertisement cookies)
• In a collective way not referable to any particular individual, for the purpose of quality control and improvement of our Site

4. Third Parties and Service Providers

We use the following categories of third-party service providers; for the specific cookies each uses, see our Cookie Policy:

• YouTube / Google (embedded video, security, and rollout functionality)
• Google Analytics (site-usage analytics)
• Google Ads / DoubleClick and Google Tag Manager (advertising measurement)
• ZoomInfo (visitor/lead identification)
• Salesforce Pardot (marketing automation)
• LinkedIn (advertising and consent-related cookies from embedded share/ad tags)
• Cloudflare (bot management/security)
• CookieYes (consent management)

We do not sell contact or lead information for monetary consideration. Analytics, advertising, and visitor-identification identifiers may constitute a “sale” or “share” as broadly defined under the CCPA/CPRA; see Section 6 for your opt-out rights.

5. Links to Other Websites

The Site may contain links to websites operated by our partners and affiliates. Those websites have their own, separate privacy policies, and we are not responsible for their content or practices. We encourage you to review a linked site’s privacy policy before submitting any personal data to it.

6. Your Privacy Rights

6.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information
• Limit the use of sensitive personal information
• Not receive discriminatory treatment for exercising these rights

Categories of personal information we collect are summarized below:

We recognize the Global Privacy Control (GPC) as a valid opt-out-of-sale/share signal for browsers that transmit it.

To exercise these rights, contact us at privacy@razorleaf.com or mail us at 3732 Fishcreek Rd, Suite 291, Stow, OH 44224, Attn Privacy Manager.

6.2 EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, we process personal information on the following legal bases: performance of a contract or pre-contractual steps (responding to sales inquiries), consent (for analytics and advertising cookies), and legitimate interests (marketing to business contacts, and securing and improving the Site).

You have the right to access, correct, delete, restrict or object to processing, and port your personal information, and to withdraw consent at any time. For EEA/UK visitors, non-essential cookies (Analytics and Advertisement categories) are set to opt-in by default and will not fire until you consent — see our Cookie Policy for details.

The EEA (comprising the EU member states, Norway, Iceland, and Liechtenstein) applies a harmonized standard of data protection; countries outside the EEA do not generally offer the same level of protection. We may need to transfer personal information outside the EEA in limited circumstances, such as where our trade partners and suppliers must hold data in connection with maintenance contracts, and we take steps to confirm such partners have appropriate safeguards in place, relying on Standard Contractual Clauses or another approved transfer mechanism.

7. Data Retention

We retain contact and lead information for three years since last user engagement unless a longer retention period is required by law or you request earlier deletion. Analytics and advertising identifiers are retained per each provider’s default retention window, as configured in our tag management and consent tools.

8. Data Security

We use reasonable administrative, technical, and physical safeguards to protect the personal information we collect, including firewalls and industry-standard security on our servers, and we limit access to personal data to employees, contractors, and agents who need it to do their jobs, all of whom are bound by confidentiality obligations. No method of transmission or storage is completely secure, and you are responsible for keeping your own account credentials confidential and for logging out of shared devices.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by an updated Effective Date at the top of this Policy, and where appropriate we will notify you by email or by posting a prominent notice on the Site. Continued use of the Site after changes are posted constitutes acknowledgment of, and consent to, the updated Policy.

10. Contact Us

Razorleaf Corporation

Corporate Headquarters: 3732 Fishcreek Road, Suite 291, Stow, OH 44224 — 330-676-0022

Razorleaf Government Solutions: 3732 Fishcreek Rd, Suite 292, Stow, OH 44224 — 330-208-2428

Razorleaf Holding: 3732 Fishcreek Rd, Suite 295 Stow, OH 44224

European Offices — UK: +44 (0) 1327 304878 · The Netherlands: +31 73 7810781 · Switzerland: +41 79 6239065 · India: +91 9373764247

Privacy inquiries: privacy@razorleaf.com