United States Privacy Policy

1WHO WE ARE AND WHAT THIS COVERS

1.1 This policy is published by AUTOOL USA, INC., a California corporation at 25551 Whitesell Street, Hayward, CA 94545 (“Autool USA”, “we”,

“us”). Autool USA is a subsidiary of ShenZhen AUTOOL Technology Co., Ltd.

1.2 It covers autoolusa.com, our order, quotation, warranty and returns processes, our dealer and credit applications, our email and marketing,

and the information we collect when you contact us by telephone, email or at a trade show.

1.3 It does not cover websites or storefronts operated by our parent company, by a dealer or by a third-party marketplace. Those are separate

businesses with their own privacy policies and we do not control what they collect. If you bought from a marketplace listing, that

marketplace's policy applies to the information you gave it.

1.4 This policy is governed by California and United States law. Any earlier statement on our site that named the law of another country does

not apply to information we hold about you.

2INFORMATION WE COLLECT

the categories, as California law requires us to list them

CATEGORY EXAMPLES WHEN WE COLLECT IT

Identifiers and contact Name, company name, job title, postal address, When you order, request a quotation, register a warranty, apply for

details email address, telephone number a dealer or credit account, subscribe to email, or contact us

Commercial Products you asked about or bought, order and When you transact with us or make a claim

information invoice history, serial numbers, warranty and return

records, service notes

Payment and financial Bank name, routing and account number for ACH or Only on a dealer or credit application, or where you pay by bank

information wire, resale or exemption certificate, trade transfer. We do not store full payment card numbers — card

references, business financial statements payments are handled by our payment processor

Credit information Business credit reports and trade references Only where you apply for credit terms

obtained with your written authorization on a credit

application

Device and usage IP address, browser type and version, operating Automatically when you visit autoolusa.com

information system, referring page, pages viewed, time and date

of visit

Communications Emails, web form submissions, support tickets, When you contact us or we contact you

notes of telephone calls

2.1 What we do not collect. We do not ask for and do not want your Social Security number, your consumer credit score, your precise

geolocation, biometric data, or information about your health, race, religion, political views, union membership or sexual orientation. Where a

dealer or credit application asks for a personal guarantee or a taxpayer identification number, that information is collected only for that

purpose, only with your written authorization, and is held under section 12.

2.2 A correction to an earlier statement. Our previous published statement said that under no circumstances would we collect payment account

information. That was not accurate — our credit application collects bank, routing and ACH authorization details, because that is how commercial

accounts pay us. This policy states the position correctly.

3WHERE THE INFORMATION COMES FROM

From you, when you order, ask a question, register a warranty, apply for an account or subscribe to email.

Automatically, from your browser and device when you visit our website. Section 5.

From a dealer or distributor, where you bought through one and they pass us your details to register a warranty or arrange service.

From a business credit bureau or trade reference, where you have applied for credit terms and authorized us in writing to make those inquiries.

From a carrier, in the course of arranging or tracing a shipment to you.

4WHY WE USE IT

# PURPOSE WHAT THIS MEANS IN PRACTICE

1 To fill your order Quoting, accepting the order, taking payment, arranging shipment, invoicing, and dealing with damage or

shortage

2 To support the Product Warranty registration, warranty and return claims, technical support, parts, service bulletins and safety

notices

# PURPOSE WHAT THIS MEANS IN PRACTICE

3 To decide a credit application Assessing and setting credit terms, reviewing a limit, and collecting a past-due account

4 To run and improve our Keeping it working, measuring which pages are used, and detecting misuse

website

5 To contact you about Only where you asked us to, or where you are an existing customer. Section 14

products

6 To comply with the law Tax and accounting records, export control screening, product safety reporting, and responding to a lawful

request

7 To protect our rights Preventing fraud, enforcing our terms, and establishing or defending a legal claim

4.1 We do not use your information to make an automated decision that has a legal effect on you without a person reviewing it. A credit decision is

made by a person under AU-FIN-CR-01.

5COOKIES AND SIMILAR TECHNOLOGY

5.1 What we use. autoolusa.com uses cookies and similar technology in three ways:

TYPE PURPOSE CAN YOU TURN IT OFF

Strictly Keeping your session, remembering what is in a cart, security No. The site will not work properly without

necessary them

Analytics Counting visits and seeing which pages and products are looked at, so we can Yes — see 5.2

improve the site

Functional Remembering a preference such as language or region Yes — see 5.2

5.2 How to control them. Every major browser lets you block or delete cookies, and most let you block third-party cookies specifically. Doing so

may stop parts of the site working. You can also install a browser add-on that blocks analytics collection. We do not require you to accept

analytics or functional cookies in order to browse the site, order from us, or make a warranty claim.

5.3 We do not use cookies to build an advertising profile of you and we do not place advertising cookies that follow you to other websites for

our own marketing.

6WHO WE SHARE IT WITH the categories of third parties, as California law requires

CATEGORY OF THIRD PARTY WHAT THEY RECEIVE WHY

ShenZhen AUTOOL Technology Co., Ltd., Serial numbers, fault descriptions, Warranty, engineering and product support. Parts

our parent company, in the People's photographs, and the contact details and root-cause review come from the factory. Section

Republic of China needed to resolve a claim 11 covers the transfer

Carriers and freight forwarders Name, delivery address, telephone To deliver your order and to trace or claim on a

number, shipment contents shipment

Payment processors and our bank Payment details and the amount To take payment. We do not store full card numbers

Business credit bureaus and trade Business name, address and the fact of an Only on a credit application, with your written

references inquiry authorization

Accountants, auditors and tax authorities Transaction records Tax, accounting and audit obligations

Lawyers, insurers and collection Only what the matter requires To establish, defend or collect a claim

agencies

Information technology and software Access to systems holding the above, Email, file storage, customer records, website hosting

providers under contract and analytics

Authorized dealers and service providers Your name, contact details and the Product Only where needed to deliver, install or service the

record Product you bought

A buyer of our business The records transferring with the business Only in connection with a merger, acquisition or sale of

assets, and subject to this policy

Government and regulators What the law requires Including product safety reporting under AU-OPS-RC-

01, export control screening, and response to a

subpoena or court order

6.1 We require service providers to use the information only for the service they provide us, to keep it confidential, and to protect it. We do

not authorize them to use it for their own purposes.

7WE DO NOT SELL PERSONAL INFORMATION

7.1 Autool USA does not sell, rent or trade personal information, and has never done so. We do not share it with data brokers, list brokers

or advertising networks for their own use.

7.2 A note on the California Consumer Privacy Act. The CCPA and CPRA apply to a business that meets at least one of three tests: annual

gross revenue above the inflation-adjusted threshold, the personal information of 100,000 or more California consumers or households in a year,

or fifty percent or more of annual revenue from selling or sharing personal information. Autool USA meets none of them, so the CCPA's

consumer-rights framework does not currently apply to us.

7.3 We give you the main rights anyway. Section 9 lets you see, correct and delete what we hold, and section 14 lets you stop marketing email,

whether or not the statute compels it. If Autool USA later crosses a CCPA threshold we will publish a compliant notice and the rights that

go with it before relying on this section.

8DO NOT TRACK AND CROSS-SITE TRACKING

the disclosure California law requires

8.1 How we respond to Do Not Track signals. Some browsers can send a “Do Not Track” signal. There is no common industry standard for

what a website must do when it receives one. Autool USA does not currently respond to Do Not Track signals. California law requires us to

disclose that clearly rather than to act on the signal, and this section is that disclosure.

8.2 What you can do instead. The controls in section 5.2 work regardless of the Do Not Track setting, and section 9 lets you ask us to delete

what we hold.

8.3 Whether other parties can track you across sites through ours. We do not permit third-party advertising networks to collect

information about your activity across other websites through autoolusa.com. Our analytics provider collects usage information about our

own site only, for us. If we ever change that, we will update this section and tell you under section 15 before the change takes effect.

9REVIEWING, CORRECTING AND DELETING YOUR INFORMATION

our process

9.1 How to ask. Email [email protected] or write to Privacy, AUTOOL USA, INC., 25551 Whitesell Street, Hayward, CA 94545. Tell us

what you want — a copy, a correction, or deletion — and give us enough detail to find your record, such as the email address or order number you

used.

9.2 What happens next. We confirm receipt within ten (10) business days and respond within thirty (30) days. Where a request is complex we

may take a further thirty days and will tell you why. There is no charge.

9.3 Verification. We will ask you to confirm your identity before we release or change information, so that we do not disclose your details to

someone else. For a business account we may ask you to confirm you are authorized to act for the account.

9.4 What we can and cannot delete. We will delete what we can. We must keep some records even after a deletion request — transaction

and tax records, warranty and product safety records, credit decision records, and anything needed for an active claim or a legal obligation.

Section 10 states how long. Where we keep a record on that basis, we will tell you which category and why.

9.5 Authorized agent. You may ask someone to make a request for you. We will ask for written proof that you authorized them.

10HOW LONG WE KEEP IT

RECORD RETENTION WHY

Order, invoice and tax records 7 years Federal and California tax and accounting requirements

Warranty, service and return records 7 years from the claim The express warranty runs 3 years and a product liability claim

can arrive later

Product safety, incident and recall 5 years minimum, longer where a Consumer Product Safety Act record requirements, AU-OPS-

records matter is open RC-01

Credit application and credit decision 7 years from the decision Equal Credit Opportunity Act and Fair Credit Reporting Act

records record requirements

Marketing contact details and consent Until you unsubscribe, then 3 years To show we honored your request

records

Website analytics 26 months Beyond that it is no longer useful

General business correspondence 3 years Operational need

10.1 Where a legal claim, audit, investigation or recall is open, we keep what relates to it until the matter closes, whichever period above would

otherwise apply.

11INTERNATIONAL TRANSFER we say this plainly because it matters

11.1 Some of your information goes to China. Our parent company, ShenZhen AUTOOL Technology Co., Ltd., is in the People's Republic of

China. Warranty review, parts supply and engineering support come from the factory, which means that for a warranty or service matter we send

the serial number, the fault description, photographs, and the contact details needed to resolve it.

11.2 What we send and what we do not. We send what is needed to resolve the matter. We do not send payment details, bank information,

credit files or financial statements to our parent or to any other affiliate.

11.3 What this means for you. The data protection laws of the People's Republic of China are different from those of the United States

and of California, and a government there may have rights of access that a United States authority would not have. We tell you this so that

the decision to send us information is an informed one. If you would prefer your warranty matter handled without transfer to the factory, email

[email protected] and we will tell you what we can resolve in the United States — which, for most claims, is the whole of it.

11.4 Other locations. Some of our software providers process information in other countries. We require them by contract to protect it to the

standard this policy describes.

12SECURITY

12.1 What we do. Access to systems holding personal information is restricted to the people who need it for their job. Accounts require individual

credentials, and two-factor authentication is required where the system supports it. Company data is kept in approved systems only. Payment card

data is handled by our payment processor and is not stored on our systems.

12.2 Especially sensitive information. Bank details, taxpayer identification numbers and anything on a completed credit application are stored

in a restricted location, not in general shared folders, and not circulated by ordinary email. A completed application is filed to the individual

account record and removed from any template or working copy.

12.3 What no one can promise. No method of transmission or storage is completely secure. Please do not send us a Social Security number,

a full payment card number or a password by email. If you need to send sensitive information, email [email protected] and we will tell

you a safe way.

12.4 If something goes wrong. Where a breach affects your personal information and the law requires notice, we will notify you and the relevant

authority as that law requires, without unreasonable delay.

13CHILDREN

13.1 Our products are professional automotive service equipment and our website is not directed to children. We do not knowingly collect

personal information from anyone under thirteen (13), and we do not knowingly sell a Product to a minor.

13.2 If you believe a child has given us personal information, email [email protected] and we will delete it.

14MARKETING EMAIL

14.1 When we email you about products. Only where you asked us to, or where you are an existing customer and the message relates to the

kind of product you bought.

14.2 How to stop it. Every marketing email carries an unsubscribe link. It works, and we act on it within ten (10) business days, which is the

federal CAN-SPAM requirement. You can also email [email protected].

14.3 What unsubscribing does not stop. Messages about an order you placed, a warranty claim, a safety notice or recall, an invoice, or your

account are not marketing and will still reach you. A safety notice will always be sent, whatever your marketing preference.

15CHANGES TO THIS POLICY

our process for telling you

15.1 Effective date. This policy is effective 7 October 2026. The effective date of the current version always appears at the top of the published

page and in the footer of this document.

15.2 How we notify you of a material change. Where we change this policy in a way that materially affects how we collect, use or share your

personal information, we will:

Post the new version at autoolusa.com with a new effective date, and keep a note of what changed;

Display a notice on the website home page for at least thirty (30) days after the change;

Email the people we hold an address for, at least thirty (30) days before the change takes effect, where the change concerns information we

already hold about them.

15.3 Minor changes — correcting a contact detail, clarifying wording without changing meaning — are made by posting the revised version with

a new effective date.

15.4 Your continued use. We do not treat your continued use of the website as agreement to a material change. Where a change needs your

agreement, we will ask for it.

16HOW TO CONTACT US

REASON WHERE TO WRITE

Any privacy question or request [email protected]

By post Privacy, AUTOOL USA, INC., 25551 Whitesell Street, Hayward, CA 94545

Orders, quotations and invoices [email protected]

Warranty and returns [email protected]

16.1 If you are not satisfied with how we have handled a privacy request, you may contact the California Attorney General's Office, which

enforces the California Online Privacy Protection Act.

AU-LEG-PP-01 Rev. A, effective 7 October 2026, published by AUTOOL USA, INC., 25551 Whitesell Street, Hayward, CA 94545. This policy supersedes every earlier

privacy statement published on autoolusa.com. It is written to satisfy the California Online Privacy Protection Act, Business and Professions Code sections 22575 to

22579, and describes the practices of Autool USA only.