Express 409A — Privacy Policy

In using the Platform, you may be asked to provide certain information such as your name, email address, company name, and business details relevant to your engagement. This information may be stored in our systems.

We do not sell or license personally identifiable information to third parties. We may use personally identifiable information to deliver our services, to communicate with you regarding your engagement, and to send you information relevant to your account. We engage trusted service providers who assist us by performing certain functions related to the operation of the Platform, including hosting, data storage, payment processing, and email delivery. These service providers access your information only as necessary to perform their obligations to us, are prohibited from using your information for any other purpose, and operate under confidentiality commitments consistent with this Privacy Policy.

You may upload documents and provide company information through the Platform in connection with a professional engagement. This information is used solely to perform the services described in your Engagement Agreement. We do not use your company documents or financial information for any purpose other than delivering the services you have purchased.

We may use anonymized, aggregated data — stripped of all identifying information — for industry benchmarking and statistical analysis. Your company will never be identifiable in any such data.

We use cookies and similar technologies to maintain your authenticated session and to support basic Platform functionality. We do not use third-party advertising cookies or behavioral tracking tools. We do not serve advertisements.

We follow generally accepted industry standards to protect information submitted to us. We use reasonable administrative, technical, and physical safeguards appropriate to the type of information maintained. While we believe we have taken reasonable steps to secure data in our custody, no security system is impenetrable.

You are responsible for maintaining access to the email address associated with your account and for all activity that occurs under your account. Notify us promptly at team@express-409a.com if you believe your account has been compromised.

Except as otherwise provided in this Privacy Policy, we will use commercially reasonable efforts to protect and safeguard all information against unauthorized use, publication, or disclosure, and will not share it with third parties unless such disclosure is necessary to: (a) comply with a court order or other legal process; (b) protect our rights or property; (c) enforce our Terms of Service; (d) take precautions against liability or defend against third-party claims; or (e) assist government enforcement agencies in connection with an investigation or protect the security or integrity of the Platform.

If Express 409A is involved in a business divestiture, change of control, sale, merger, or acquisition of all or a part of its business, we reserve the right to transfer your information.

We retain your information for the duration of your engagement and for a reasonable period thereafter, in accordance with the terms of your Engagement Agreement and applicable law. You may request deletion of your information by contacting us, subject to any legal retention obligations.

The Platform is operated from the United States. If you access the Platform from outside the United States, you consent to the transfer, processing, and storage of your information in the United States, where data protection laws may differ from those in your jurisdiction. This Privacy Policy is governed by the laws of the State of California.

If you seek access to your personal data, or wish to correct, amend, or delete inaccurate data, please contact us at team@express-409a.com and we will respond to your request within a reasonable timeframe.

This section applies only to California residents and is adopted to comply with the California Consumer Privacy Act ("CCPA") and other California privacy laws, as amended.

Express 409A does not sell the personal information we collect, and will not sell it without providing a right to opt out.

You have the following rights under the CCPA: to request information about how we have collected and used your personal information; to request a copy of the personal information we have collected about you; to request that we delete personal information we have collected from you; and to exercise these rights free from discrimination. To make a request, contact us at team@express-409a.com. We will verify your identity before processing any request and will respond within the timeframes required by applicable law.

If we change this Privacy Policy, we will post the updated version on this page. By continuing to use the Platform after changes are posted, you agree to be bound by the updated Privacy Policy.

For questions about this Privacy Policy or to exercise your data rights, contact us at team@express-409a.com.

Express 409A is operated by LYK Consulting LLC, Los Angeles, California.