PATHwd™ Privacy Policy

Effective Date: June 23, 2026    |     Last Updated: June 23, 2026

1. Introduction

This Privacy Policy describes how Endao LLC ("Endao," "we," "us," or "our") collects, uses, and protects information in connection with the PATHwd mobile application (the "App") and the PATHwd platform (collectively, the "Services").

PATHwd is a business operations platform built for window and door dealers. The App is available exclusively to existing PATHwd customers. Users must have an active PATHwd account managed by their company to access the App. There is no self-service sign-up within the App.

Please read this policy carefully. By accessing or using the Services, you agree to the terms of this Privacy Policy.

2. Who This Policy Applies To

This policy applies to:

• Employees and authorized users of window and door dealers that have contracted with Endao LLC for access to the PATHwd platform.
• Visitors to pathwd.com who interact with our website contact or inquiry forms.

PATHwd is not a consumer-facing application. All users are business representatives operating within the scope of their employer's agreement with Endao LLC. This policy should be read in conjunction with the service agreement between Endao LLC and your dealer organization.

3. Information We Collect

3.1 Account and Identity Information

When you are provisioned an account by your dealer administrator, we collect:

• Full name
• Work email address
• Job role or title (as configured by your administrator)
• Phone number (optional)

3.2 Business and Operational Data

In the normal course of using PATHwd to run dealer operations, the App processes:

• Job and project records (customer names, addresses, project details, order information)
• Purchase orders, sales orders, invoices, and payment records
• Scheduling and appointment data (delivery and installation records)
• Warehouse and logistics data (bin locations, receiving records, scan activity)
• Service records and field work logs

This operational and business data is owned by and belongs to the dealer organization, not to individual users, as described in the dealer's MSA with Endao LLC. Endao LLC processes this data on behalf of the dealer as a service provider.

3.3 Communications

The App may process and store email content and in-app messages created within the platform for the purpose of job coordination, customer follow-up, and team notifications.

3.4 Photos and Media

Users may upload photos through the App in connection with job documentation, service records, and delivery confirmation. These photos are stored as part of the associated job or service record.

3.5 Usage and Device Data

We may automatically collect limited technical data when you use the App, including:

• Device type and operating system version
• App version
• Error logs and crash reports
• General usage patterns (features accessed, session duration)

This data is collected to maintain and improve the performance and reliability of the Services. It does not identify you personally and is not used for advertising purposes.

3.6 Website Visitors

If you visit pathwd.com and interact with our contact or inquiry forms, we may also collect:

• Name, company name, and email address provided in inquiry forms
• IP address, browser type, and general usage data collected via cookies or similar technologies
• Records of correspondence if you contact us by email

We use cookies and similar tracking technologies on our website to understand visitor behavior and improve the site experience. You may configure your browser to refuse cookies without having an impact on site information access.

4. How We Use Your Information

We use the information collected to:

• Provide, operate, and maintain the PATHwd platform and App
• Authenticate users and manage account access
• Enable dealer workflows including job management, order tracking, scheduling, and service operations
• Facilitate integrations with connected systems (see Section 6)
• Deliver in-app notifications, task reminders, and operational alerts
• Diagnose technical issues, monitor performance, and improve the App
• Respond to support requests and communications from authorized users
• Present our website and its content to visitors
• Provide information, products, or services requested by website visitors
• Send notices about your subscription to the Services, including expiration and renewal notices
• Comply with legal obligations

We never sell your personal information or provide it to third parties for their own marketing or advertising purposes.

5. Data Retention

We retain your information for as long as your dealer's account with Endao LLC remains active, or as necessary to fulfill the purposes described in this policy.

Upon termination of a dealer's contract, Endao LLC will retain the dealer's Application Information, including backup copies, for a period of six (6) months following the termination effective date (the "Retention Period"). During the Retention Period, the dealer may request an export of its Application Information in CSV format at no additional charge; requests for other file formats may be subject to additional fees as described in the applicable Master Services Agreement. Following expiration of the Retention Period, Endao LLC will permanently delete or irreversibly anonymize all Application Information, including backup copies, within thirty (30) days (the "Deletion Window"), and will provide written confirmation of deletion to the dealer upon request.

In the event of a termination for cause, Endao LLC will make the dealer's Application Information available for export in CSV format for a period of thirty (30) days following delivery of the termination notice, provided that such access does not conflict with applicable law enforcement requirements or court orders. The dealer's right to receive a data export during this period is conditioned on the dealer having no outstanding payment obligations to Endao LLC.

Individual users may not independently request deletion of account data or business records, as this data is owned by and managed on behalf of the dealer organization. Requests related to data deletion should be directed to your dealer administrator or to Endao LLC directly (see Section 13).

During the Retention Period following contract termination, dealer administrators may request that Endao LLC assist in migrating Application Information to a successor platform or system. Such migration assistance is subject to a separate agreement and may be billed at additional fees as described in the Master Services Agreement. Endao LLC will make commercially reasonable efforts to facilitate an orderly transition of dealer data.

The data retention, deletion, and portability obligations described in this Section 5 survive termination or expiration of a dealer's service agreement and continue to bind Endao LLC for the duration of the Retention Period and Deletion Window.

6. Third-Party Integrations and Data Sharing

6.1 Accounting Integration

PATHwd may integrate with QuickBooks and other accounting platforms via a third-party integration platform. Customer records, jobs, invoices, payments, purchase orders, and related financial data may be synchronized between PATHwd and the dealer's accounting system. This data sharing is controlled by and occurs on behalf of the dealer.

6.2 Manufacturer Order Manager Integration

PATHwd connects to manufacturer Order Manager systems to synchronize order and shipment data. This integration imports order, tracking, and truck data into the PATHwd platform on behalf of the dealer.

6.3 Cloud Infrastructure

The PATHwd platform is hosted on Amazon Web Services (AWS). Your data is stored and processed on servers operated by AWS located in the United States (Virginia and Ohio).

6.4 AI-Powered Tools (Internal Use Only)

Endao LLC uses AI-powered productivity tools to support internal business operations, including workflow automation and operational data management. These tools may process limited operational and business contact data solely for internal purposes such as data quality maintenance and process efficiency. This processing is conducted by Endao staff and is not used to make automated decisions about individuals or to build profiles on customers or end users.

6.5 Service Providers

We may share information with third-party service providers who assist us in operating the Services, including hosting, analytics, customer support, and security services. These providers are contractually obligated to use information only as necessary to provide their services to us, and not for their own independent purposes.

A list of our current sub-processors is maintained in Section 6.9 below.

6.6 Legal Disclosures

We may disclose personal information when required to do so by law or in response to valid legal process, including:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request
• To enforce or apply our Terms of Use and other agreements
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Endao LLC, our customers, or others

6.7 Business Transfers

If Endao LLC is involved in a merger, acquisition, sale of assets, or similar transaction, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

6.8 No Sale of Personal Information

We do not sell, rent, or trade personal information to third parties for their own marketing or commercial purposes.

6.9 Sub-processor List

The following sub-processors are currently engaged by Endao LLC to provide or support the Services. All sub-processors are contractually obligated to process personal information solely as directed by Endao LLC and consistent with this Privacy Policy.

7. Security

We implement industry-standard security measures to protect information processed through the PATHwd platform, including:

• Encryption of data in transit using TLS/HTTPS
• Access controls and role-based permissions limiting data access to authorized users
• Secure authentication practices

While we take reasonable precautions to protect your information, no system can be guaranteed to be completely secure. The transmission of information via the internet is not completely secure, and any transmission of personal information is at your own risk. Users are responsible for maintaining the confidentiality of their account credentials and for notifying us promptly if they suspect unauthorized access.

In the event of a confirmed security incident involving unauthorized access to personal information, Endao LLC will notify affected dealer administrators without undue delay and in accordance with applicable law. Dealers are responsible for any required notification to their own employees or end customers. The specific notification procedures and timelines governing dealer relationships are set forth in the applicable Master Services Agreement.

8. State Privacy Rights

8.1 California Privacy Rights (CCPA / CPRA)

If you are a California resident, you may have certain rights regarding your personal information under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what categories of personal information we collect about you and for what purposes
• The right to access the specific pieces of personal information we have collected about you
• The right to request deletion of your personal information, subject to certain exceptions
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information
• The right to non-discrimination for exercising your privacy rights

As noted in Sections 4 and 6.8, we do not sell or share personal information with third parties for cross-context behavioral advertising purposes. Because PATHwd operates exclusively in a business-to-business context, many CCPA/CPRA rights apply to the dealer as the contracting entity rather than to individual end users. To the extent CCPA/CPRA rights apply to you as an individual, you may exercise them by contacting us as described in Section 13.

Endao LLC processes dealer data as a service provider under CCPA/CPRA, acting on behalf of the dealer organization, which is the data controller responsible for receiving, validating, and routing individual deletion requests. Endao LLC will cooperate with dealers to fulfill verified deletion requests within the timeframes required by applicable law. See the Master Services Agreement for the contractual obligations governing this arrangement. Individual users wishing to exercise deletion rights should direct their request to their dealer administrator in the first instance.

California Civil Code Section 1798.83 also permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at the address listed in Section 13.

Because we do not sell or share personal information for cross-context behavioral advertising, we do not offer a "Do Not Sell or Share My Personal Information" link. California residents who wish to submit a privacy rights request may do so by contacting us directly as described in Section 13.

8.2 Other U.S. State Privacy Rights

Residents of certain U.S. states, including Virginia, Colorado, Texas, Connecticut, and others, may have rights under applicable state privacy laws regarding their personal information, such as the right to access, correct, delete, or obtain a copy of personal information, and the right to opt out of certain processing activities.

Because PATHwd operates exclusively in a business-to-business context, the personal information we process about individual users is limited primarily to business contact and account data. We do not sell personal information, and we do not process personal information for targeted advertising purposes.

To the extent these rights apply to you, you may submit a request by contacting us as described in Section 13. We will respond in accordance with applicable law. Note that many of these rights apply to the dealer as the contracting organization rather than to individual end users; requests from individual users may be coordinated through your dealer administrator.

9. Children's Privacy

The PATHwd App is not directed at children under the age of 13 and is designed exclusively for use by business professionals in a commercial dealer context. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly. If you believe we might have any information from or about a child under 13, please contact us at the address in Section 13.

10. Your Choices

10.1 Account Information

Authorized users can review and update certain account information by accessing their profile within the App. For changes that cannot be made directly, please contact your dealer administrator or Endao LLC support.

10.2 Communications

If you do not wish to receive promotional communications from us, you may opt out by following the unsubscribe instructions in any promotional email, or by contacting us at the address in Section 13. Note that transactional and operational communications related to your use of the Services (such as account notifications) cannot be opted out of while your account is active.

10.3 Cookies and Tracking

You can set your browser to refuse all or some cookies, or to alert you when cookies are sent. If you disable or refuse cookies, please note that some parts of the website may be inaccessible or not function properly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will update the "Last Updated" date at the top of this document. Material changes will be communicated to dealer administrators via email or in-App notice. Your continued use of the Services following notice of changes constitutes your acceptance of the updated policy.

12. Governing Law

This Privacy Policy and any disputes arising out of or relating to it are governed by the laws of the State of Texas, without regard to its conflict of law principles. Any legal action or proceeding relating to this policy shall be brought exclusively in the state or federal courts located in Travis County, Texas, and you consent to the jurisdiction of such courts.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Endao LLC
3616 Far West Blvd, Suite 117-435
Austin, TX 78731
Email: privacy@pathwd.com