Privacy policy

Collection of your personal information

In order to better provide you with products and services offered, the Company may collect personally identifiable information, such as your:

• First and last name
• Mailing address
• Email address
• Phone number

If you purchase the Company's products and services, we collect billing and credit card information. This information is used to complete the purchase transaction.

Except for the information our website collects automatically, which is described below, we do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services. These may include: (a) registering for an account; (b) entering a sweepstakes or contest sponsored by us or one of our partners; (c) signing up for special offers from selected third parties; (d) sending us an email message; (e) submitting your credit card or other payment information when ordering and purchasing products and services. To wit, we will use your information for, but not limited to, communicating with you in relation to services and/or products you have requested from us. We also may gather additional personal or non-personal information in the future.

Use of your personal information

The Company collects and uses your personal information in the following ways:

• to operate and deliver the services you have requested
• to provide you with information, products, or services that you request from us
• to provide you with notices about your account
• to carry out the Company's obligations and enforce our rights arising from any contracts entered between you and byMae
• to notify you about changes to our Www.byMae.com or any products or services we offer or provide
• in any other way we may describe when you provide the information
• for any other purpose with your consent.

The Company may also use your personally identifiable information to inform you of other products or services available from the Company and its affiliates.

Sharing information with third parties

The Company does not sell, rent, or lease its customer lists to third parties.

The Company may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. Apart from the exceptions described below, all such third parties are prohibited from using your personal information except to provide these services to the Company, and they are required to maintain the confidentiality of your information.

The trusted partners we use include:

• Shopify, which runs our store, checkout, payments and your account
• Super Subscriptions, which runs subscription renewals
• Klaviyo, which sends our emails and runs our sign-up forms
• Google, which runs our email (Google Workspace) and measures visits to our site (Google Analytics)
• Triple Whale, which shows us which ads led to orders
• Judge.me, which sends review requests and shows reviews
• UpPromote, which runs our affiliate program, including affiliate applications and payouts
• Amazon Web Services, which sends some order and account emails
• Ahrefs, which counts visits to our pages
• the AI company that writes the answers in the chat on our site, which receives what you type in the chat
• the service that delivers our contact form to our inbox
• the company that hosts our website, and the services that block spam and fraud
• the company that packs and ships your order, and shipping carriers

If you use Shop Pay or the Shop app, Shopify also uses your information under its own privacy policy. Any other payment service you pick at checkout also uses your payment details under its own privacy policy.

Meta (Facebook and Instagram), Google (including Google Ads and YouTube) and Pinterest also collect information about your visits through cookies, pixels and similar tools on our site. They may use it for their own purposes, including advertising on other sites and over time. Some state privacy laws treat this as a “sale” or “sharing” of personal information. To opt out, use the Your privacy choices link at the bottom of any page.

The Company may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on the Company or the site; (b) protect and defend the rights or property of the Company; and/or (c) act under exigent circumstances to protect the personal safety of users of the Company, or the public.

Tracking user behavior

The Company may keep track of the websites and pages our users visit within the Company, in order to determine what the Company services are the most popular. This data is used to deliver customized content and advertising within the Company to customers whose behavior indicates that they are interested in a particular subject area.

Some web browsers send a “Do Not Track” signal. There is no common standard for how a website should respond to it, so we do not respond to Do Not Track signals. We respond to Global Privacy Control signals instead, as described in the state privacy sections below.

Automatically collected information

The Company may automatically collect information about your computer hardware and software. This information can include your IP address, browser type, domain names, access times, and referring website addresses. This information is used for the operation of the service, to maintain quality of the service, and to provide general statistics regarding the use of the Company's website.

Use of cookies

The Company's website may use "cookies" to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the web server that you have returned to a specific page. For example, if you personalize the Company's pages, or register with Company's site or services, a cookie helps the Company to recall your specific information on subsequent visits. This simplifies the process of recording your personal information, such as billing addresses, shipping addresses, and so on. When you return to the same website, the information you previously provided can be retrieved, so you can easily use the Company's features that you customized.

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Company's services or websites you visit. You can also accept or decline our analytics and advertising cookies with the Cookie preferences link at the bottom of any page.

Security of your personal information

The Company secures your personal information from unauthorized access, use, or disclosure. The Company uses the following methods for this purpose:

• SSL Protocol

When personal information (such as a credit card number) is transmitted to other websites, it is protected through the use of encryption, such as the Secure Sockets Layer (SSL) protocol.

We strive to take appropriate security measures to protect against unauthorized access to or alteration of your personal information. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet that are beyond our control; and (b) the security, integrity, and privacy of any and all information and data exchanged between you and us through this site cannot be guaranteed.

Right to deletion

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

• Delete your personal information from our records; and
• Direct any service providers to delete your personal information from their records.

Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:

• Complete the transaction for which the personal information was collected, fulfill the terms;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity;
• Debug to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech;
• Comply with the California Electronic Communications Privacy Act;
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest;
• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship;
• Comply with an existing legal obligation; or
• Otherwise use your personal information, internally, in a lawful manner that is compatible with the context

Children under thirteen

The Company does not knowingly collect personally identifiable information from children under the age of 13. If you are under the age of 13, you must ask your parent or guardian for permission to use this website.

Email communications from time to time

The Company may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication. In order to improve our services, we may receive a notification when you open an email from the Company or click on a link therein.

If you would like to stop receiving marketing or promotional communications via email from the Company, you may opt out of such communications by clicking on the unsubscribe button Or emailing support@bymae.com.

External data storage sites

We may store your data on servers provided by third-party hosting vendors with whom we have contracted.

Data retention

We keep personal information for as long as we need it for the purposes described in this Policy, such as filling orders, running subscriptions, answering your requests and meeting our legal, tax and accounting obligations. When we no longer need it, we delete it or de-identify it.

Changes to this statement

The Company reserves the right to change this Policy from time to time. For example, when there are changes in our services, changes in our data protection practices, or changes in the law. When changes to this Policy are significant, we will inform you. You may receive a notice by sending an email to the primary email address specified in your account, by placing a prominent notice on our byMae, Inc, and/or by updating any privacy information. Your continued use of the website and/or services available after such modifications will constitute your: (a) acknowledgment of the modified Policy; and (b) agreement to abide and be bound by that Policy.

California privacy rights

The California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020, provides you with specific rights regarding your personal information. This section describes the rights that California consumers have and explains how to exercise those rights. For the purposes of this section, personal information does not include: (i) information that is lawfully made available from federal, state or local government records; (ii) de-identified or aggregated data; or (iii) information excluded from the scope of the CCPA. To be clear, these rights are granted only to the extent that you are a California consumer and we are acting as a “business” under the CCPA with respect to your personal information. The rights in this section are not intended to grant you additional rights, but only your rights under the CCPA.

Information We Collect; How We Collect It; How We Use It:

General information regarding our collection, use, and disclosure of personal information is set forth in the Privacy Policy above. To help consumers make informed privacy decisions, the CCPA defines personal information by discrete categories. Information about our data practices pertaining to these categories of personal information can be found below (some types of personal information may apply to multiple categories).

How We Collect Your Personal Information. Below is a list of the categories of personal information we may collect, how we use and disclose such information for business purposes, whether and to whom we disclose such information and whether we “sell” or “share” such information and for what purpose:

• Personal identifiers (e.g., a real name, postal address, online identifier, Internet Protocol address, email address, account name)
  • Business or Commercial Purposes for Collecting: Account creation, reward program registration, sales, order fulfillment and customer service, marketing and advertising, Sweepstakes, contests and promotional programs, Surveys and polls, Legal obligations
  • Disclosed in the Prior Twelve (12) Months for the Following Business Purposes: Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors; Undertaking internal research for service optimization; Marketing and advertising; Auditing related to counting ad impressions to unique visitors; For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.
  • “Sold” or “Shared” in the Prior Twelve (12) Months for the Following Purposes: Marketing and advertising
  • Categories of Third Parties With Whom We Disclose, Sell or Share Personal information: Service providers; Marketing, Analytics & Advertising partners
• Commercial Information (e.g., Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies):
  • Business or Commercial Purposes for Collecting: sales, order fulfillment and customer service, Legal obligations
  • Disclosed in the Prior Twelve (12) Months for the Following Business Purposes: Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors; Undertaking internal research for service optimization; For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.
  • “Sold” or “Shared” in the Prior Twelve (12) Months for the Following Purposes: Marketing and advertising
  • Categories of Third Parties With Whom We Disclose, Sell or Share Personal information: Service providers; Marketing, Analytics & Advertising partners
• Internet or other similar network activity (e.g. Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement)
  • Business or Commercial Purposes for Collecting: Marketing and advertising
  • Disclosed in the Prior Twelve (12) Months for the Following Business Purposes: Undertaking internal research for service optimization; For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services; Marketing and advertising
  • “Sold” or “Shared” in the Prior Twelve (12) Months for the Following Purposes: Marketing and advertising
  • Categories of Third Parties With Whom We Disclose, Sell or Share Personal information: Service providers; Marketing, Analytics & Advertising Partners

The categories of personal information described above are retained and stored as described in the section of the Privacy Policy above titled Data Retention.

Disclosure of Personal Information: BYMAE, Inc. may disclose your personal information to a third party for a business purpose, or sell or share your personal information, subject to your right to opt out (see Right to Opt-Out of Selling or Sharing Your Personal Information, below). The information above under Information We Collect; How We Collect It; How We Use It describes the entities with which we may disclose your personal information.

Rights to Your Information:

Right to Know. As a California consumer, you have the right to request that we disclose certain information to you about our collection, use, or disclosure of your personal information. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights, below), and subject to certain limitations that we describe below, we will disclose such information. You have the right to request any or all of the following:

• The categories of personal information we collected about you.
• The categories of sources from which the personal information is collected.
• Our business or commercial purpose for collecting, selling, or sharing that personal information.
• The categories of third parties with whom we disclose personal information.
• The specific pieces of personal information we collected about you (see Data Portability Rights below).

Right to Delete. You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights, below), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. However, we may retain personal information that has been de-identified or aggregated. Furthermore, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) in order to perform certain actions set forth under the CCPA, such as detecting security incidents and protecting against fraudulent or illegal activity.

Right to Data Portability. You have the right to request a copy of personal information we have collected and maintained about you. The CCPA allows you to request your information from us up to twice during a 12-month period. We will provide our response in a readily usable (and usually electronic) format.

Right to Correct. You have the right to request the correction of any personal information we maintain about you.

Right to Opt-Out of Selling or Sharing Your Personal Information. You have the right to opt out of the sale or sharing of your personal information, along with the right to opt in to the sale or sharing of such information. We do not sell or share the personal information of consumers we actually know are less than 16 years of age, unless we receive affirmative authorization (the "right to opt-in") from either the consumer who is less than 16 (but greater than 13) years of age, or the parent or guardian of a consumer less than 13 years of age. To our knowledge, we do not sell or share the personal information of minors under 18 years of age. To exercise the right to opt out, you (or your authorized representative) may submit a request to us by visiting the following Internet Web page: Your privacy choices. Alternatively, you may submit an opt-out request by emailing: support@bymae.com. We will also treat Global Privacy Control browser signals as valid opt-out requests. You may change your mind and opt back in to personal information sales at any time by emailing support@bymae.com.

Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights, including but not limited to, by:

• Denying you goods or services.
• Charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Providing you a different level or quality of goods or services.
• Suggesting that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Exercising Your Rights. To exercise the rights described above, please contact us by emailing support@bymae.com. After submitting a request, other than an opt-out request, we will take steps to verify your identity in order for us to properly respond and confirm that it is not a fraudulent request. To opt out, we only need enough to find your information. In order to verify your identity, we will ask, at a minimum, that you provide your name, email address and relationship to us, so that we can seek to match this information with the information existing in our systems. When providing us this information, you represent and affirm that all information provided is true and accurate. If we are unable to verify that the consumer submitting the request is the same individual about whom we have collected personal information, we may contact you for more information, or we may not be able to meet your request. Only you, or an agent legally authorized to act on your behalf, may make a verifiable request related to your personal information. If you are making a request as the authorized agent of a California consumer, we will ask you to also submit reliable proof that you have been authorized in writing by the consumer to act on such consumer’s behalf. We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, the CCPA allows us up to 90 days to respond. We will still aim to contact you within 45 days from when you contacted us to let you know we need more time to respond.

Notice of Financial Incentive. We may offer you financial incentives, including discounts, coupons, gift cards, or other rewards, for sharing personal information through programs that we may provide from time to time (collectively, our “Programs”). For example, we may offer you free products or discount codes for your participation in surveys or sweepstakes, for making reviews on our products, as part of invitations to events, or in relation to other offers. When we offer our Programs to you, we believe that the value of the different pricing or services you receive exceeds the cost of providing your personal information. Your participation in these Programs is completely optional and subject to the terms provided to you at the time you sign up.

You may withdraw from participation in a Program at any time by contacting us using the designated method set forth in the applicable Program rules. Visit the terms and conditions of each Program to view full details, including how to join. You may also withdraw from or opt out of our Programs at any time by contacting us at support@bymae.com.

California “Shine the Light”. In addition to the above rights, under California Civil Code Section 1798.83 (“Shine the Light”), California residents may have the right to request in writing from businesses with whom they have an established business relationship: (a) a list of the categories of personal information, as defined under Shine the Light, such as name, email address, and mailing address, and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes; and (b) the names and addresses of all such third parties. To request the above information, please contact us by email at support@bymae.com. If you do not want your personal information shared with any third party who may use such information for direct marketing purposes, then you may opt out of such disclosures by sending an email to us at support@bymae.com.

Other U.S. state privacy rights

The Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and similar laws in other U.S. states ("State Privacy Laws") provide consumers in those states with specific rights regarding their personal data. To the extent that you are a resident of one of these states, this section describes your rights under the State Privacy Laws and explains how you may exercise these rights.

The categories of personal data we process, our purposes for processing your personal data, the categories of personal data that we share with third parties, and the categories of third parties with whom we share it are set forth in the terms of the Privacy Policy above.

Rights to Your Information. In addition to the rights set forth in our Privacy Policy, the State Privacy Laws provide you with the following rights:

Right to Know. You have the right to know whether we process your personal data and to access such personal data.

Right to Data Portability. You have the right to obtain a copy of your personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means. You may request such personal data up to twice annually, subject to certain exceptions.

Right to Delete. You have the right to delete personal data that you have provided by or that we have obtained about you. Please note that we may deny such request if the requested deletion falls under an exception as set forth in the State Privacy Laws. Additionally, if you request deletion of your personal data and we have obtained such information from a third-party source, we may retain such data by keeping a record of the deletion request and the minimum data necessary to ensure that your personal data remains deleted from our records and that such retained data is not used for any other purpose, or we may opt you out of the processing of such personal data for any purpose except for those allowed under the State Privacy Laws.

Right to Opt-Out. You have the right to opt out of the processing of your personal data for purposes of: (i) targeted advertising; (ii) the sale of personal data; or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. As of the latest date of the Privacy Policy:

• We process personal data for the purposes of targeted advertising;
• We let advertising partners collect personal data through cookies and pixels on our site, which may count as a “sale” under the State Privacy Laws; and
• We do not engage in profiling decision based on your personal data that produce legal or similarly significant effects concerning you.

We do not collect, use or sell personal data to train large language models.

If you wish to opt out of the processing of your personal data for any of the above purposes, please visit Your privacy choices or email support@bymae.com. Wherever you live in the U.S., we will also treat opt-out preference signals, such as Global Privacy Control, as valid opt-out requests.

Right to Correct. You have the right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes for which we process it.

Right to Non-Discrimination. You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights. Unless permitted by the State Privacy Laws, we will not:

• Deny you goods or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you a different level or quality of goods or services; or
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

How to Exercise Your Rights; Verifying Your Identity. To exercise any of your privacy rights, or if you have any questions about your privacy rights, you may contact us by emailing us at support@bymae.com. After submitting a request, other than an opt-out request, we will take steps to verify your identity in order for us to properly respond and/or confirm that your request is not fraudulent. To opt out, we only need enough to find your information. We may contact you for additional information as reasonably necessary to authenticate your request, but if we are ultimately unable to authenticate your request using commercially reasonable efforts, then we may not be able to comply with it. Only you may make a verifiable request related to your personal data. If you are making a request as the parent or legal guardian of a known child regarding the processing of that child’s personal data, we may ask you to submit reliable proof of your identity.

Response Time; Your Right to Appeal. We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, State Privacy Laws allow us up to 90 days to respond. We will contact you within 45 days from when you contacted us to inform you of the need for additional time and the reason for such extension. We may charge you a reasonable fee to cover administrative costs if your requests are manifestly unfounded, excessive, or repetitive. If we decline to take action on a request that you have submitted, we will inform you of our reasons for doing so, and provide instructions for how to appeal the decision. You will have the right to appeal within a reasonable period of time after you have received our decision. Within 60 days (45 days for residents of Colorado) of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, we will provide you with a method for contacting your state attorney general’s office to submit a complaint.

If you are a resident of Nevada, you have the right to opt out of the sale of certain personal information that we have collected (or may collect) from you to data brokers or other third parties. You can exercise this right by emailing us at support@bymae.com with the subject line “Nevada Do Not Sell Request.”

If you live in Washington or Nevada, our Consumer health data privacy policy explains how we handle consumer health data and your rights under those states’ consumer health data laws.

Changes to this policy

We reserve the right, at our discretion, to change, modify, add, or remove portions from this Privacy Policy at any time, provided that any such modifications will only be applied prospectively. We encourage you to periodically review the Website for the latest information on our privacy practices. Your continued use of the Services following the posting of any changes to this Privacy Policy means you accept such changes.

Contact information

The Company welcomes your questions or comments regarding this Policy. If you believe that the Company has not adhered to this Policy, please contact the Company at:

byMae, Inc

Email Address: support@bymae.com

Effective as of October 3, 2026