KNTRCTR Privacy Policy

Effective Date: August 24, 2026

Operator: Lexington Springs Holding Corp. ("Company", "we", "us", or "our")

Platform Name: KNTRCTR or KNTRCTR.COM (the "Platform")

At KNTRCTR, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

1. Information We Collect

We collect information you provide directly and information collected automatically:

a. Information You Provide:

Account Information: Name, email address, password, and business category
Profile Information: Company name, contact numbers, address, roles, licenses, certifications
Payment Information: Credit card data, billing address (collected and processed via secure third-party payment processors)
Communications: Messages sent via our platform, support requests, feedback
Review and Reputation Information: Performance scores, written comments, whether you would work together again, the job the review belongs to, company names, visibility choices, and messages you send when you dispute a review or ask support to unlock it (see Section 4)

b. Automatically Collected Information:

Usage Data: Pages visited, features used, time spent, links clicked
Device Information: IP address, browser type, device model, operating system
Cookies and Tracking (see Section 8)

2. How We Use Your Information

We use your data to:

Deliver, maintain, and enhance the functionality of our services
Facilitate payments and issue receipts/invoices
Send transactional messages (e.g., updates, confirmations, security notices)
Improve our platform through analytics and user behavior insights
Respond to inquiries and support requests, including review disputes and requests to unlock a locked review
Operate the review system (double-blind display, lock and unlock, sharing with the other company, and Market Reviews)
Provide bid analysis that may include past review history, including through Rex AI
Enforce our Terms of Service and protect against misuse or fraud
(Future) Provide relevant offers or promotions based on your usage preferences (with appropriate opt-outs)

3. Sharing and Disclosure of Information

We do not sell your personal information for money. If you are in California, advertising cookies with Google may count as a "share" under state law. You can opt out anytime using Do not sell or share in the footer, by turning Advertising off in Cookie settings, or with a browser Global Privacy Control (GPC) signal. We may share data only under the following circumstances:

With your consent, when you use public features or request contact with other companies
Reviews you keep internal, share with the company you reviewed, or mark public, as described in Section 4
With service providers, such as cloud hosting, payment processors, analytics, or email delivery services (bound by strict data handling agreements)
Data may be stored on servers in the United States via MongoDB Atlas / AWS.
For legal compliance, such as responding to subpoenas or enforcing our legal rights
In the event of a business transaction, such as a merger, sale, or restructuring

4. Reviews, Reputation, and Related Data

Reviews are a core part of KNTRCTR. After a job end date, both companies may be asked to review each other. A review can include scores (ten performance categories and whether you would work together again), written comments, the job it belongs to, company names, and the visibility choices you make. That is personal and business information about the people and companies on the job.

Visibility

You choose how a completed review is shown:

Internal: it stays with your company. It can still appear as Your Reviews on later bids your company sees for that company.
Shared: you can share the written review with the company you reviewed, after both sides have submitted. Sharing with them is not the same as publishing to the network.
Public (Market Reviews): if you mark a review public, the scores can appear as a network average that other companies on KNTRCTR may see at bid time. Written comments are not published with those public scores.

Nothing is public unless you mark it public. You can keep a review internal, share it, publish the scores, or any combination of those choices.

Double-blind, lock, and reopen

Neither company can see the other company's review until both have submitted (double-blind).
You can edit until both parties submit, or until 90 days have passed from the review request, whichever comes first. After that, the review is locked.
A locked review is not a public comment thread. If both companies agree the record should change, you can ask KNTRCTR support to unlock it for a limited edit window. Support may also receive dispute notices at admin@kntrctr.com. Unlocking is handled by our support team after that agreement, not as an automatic public argument on the network.

Use, analysis, and retention

We store reviews as a business record of the job. We use them to show Your Reviews and Market Reviews on bids and company profiles, to notify a company when a review is shared with them, to include past review history in in-product bid analysis (including Rex AI), and to process edit requests and disputes.

Reviews are tied to the job and the companies on it. They may remain after an individual user account is closed, because they are the counterpart's record and, where published, the network record. A legal company rebrand should go through KNTRCTR so reviews stay attached to the right company. To request access, correction, or to discuss a locked review, contact admin@kntrctr.com.

5. Data Security

We use industry-standard administrative, technical, and physical safeguards to protect your data. These include encrypted transmissions (HTTPS), secure storage, access controls, and routine audits.

6. Your Rights and Choices

You have the right to:

Access your personal data
Correct or update inaccurate data
Delete your information (where allowed by law). Reviews that were shared with another company or published as Market Reviews may need to stay as that company's or the network's record; we will discuss what we can change or withhold when you contact us
Object to processing for certain purposes
Withdraw consent (e.g., from marketing emails)
Port your data to another service

To exercise these rights, contact us at admin@kntrctr.com. We will respond within applicable legal timeframes.

7. Additional Notice for Canadian Users (PIPEDA)

If you are located in Canada, we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

Purpose and Consent: We collect, use, and disclose personal information for the purposes described in this policy and with your knowledge and consent, except where otherwise permitted or required by law.
Cross-Border Processing: Personal information may be stored or processed in the United States via MongoDB Atlas / AWS and may be subject to lawful access by U.S. courts, law enforcement, and regulatory authorities.
Safeguards: We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information.
Access and Correction: You may request access to your personal information and request corrections where information is inaccurate or incomplete.
Retention: We retain personal information only as long as needed for business or legal purposes and then securely delete or anonymize it.
Questions and Complaints: You may contact us at admin@kntrctr.com. If concerns are not resolved, you may contact the Office of the Privacy Commissioner of Canada.

7a. Additional Notice for Quebec Users (Law 25)

If you are in Quebec, we also handle personal information in accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25).

Consent for optional cookies: Analytics, advertising, and functional cookies stay off until you accept them. Essential cookies are required to run the site (sign-in, security, and remembering this choice).
Privacy officer: Questions, access, correction, or complaints: admin@kntrctr.com. If we cannot resolve a concern, you may contact the Commission d'accès à l'information du Québec.
Confidentiality incidents: If a confidentiality incident presents a risk of serious injury, we will notify the Commission and affected individuals as required by law.

7b. Additional Notice for California and Other U.S. Users

If you are in California (or another U.S. state with similar privacy laws), you may request access, correction, or deletion of personal information, and you may opt out of the sale or sharing of personal information for cross-context advertising.

Do not sell or share: Use the footer link "Do not sell or share my personal information." That turns advertising cookies off. The same choice is available in Cookie settings.
Global Privacy Control: If your browser sends a GPC signal, we treat that as an opt-out of sale/share and keep advertising cookies off.
To exercise other rights, email admin@kntrctr.com. We will not discriminate against you for exercising these rights.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain session state and secure login
Analyze traffic patterns and improve UX (if you accept analytics cookies)
Measure advertising and, where you accept, support Google Ads remarketing

Analytics and advertising cookies are off until you accept. Change your choice anytime from Cookie settings in the footer, or opt out of advertising with Do not sell or share. See our Cookie Policy. You can also opt out of some third-party tracking through tools like YourAdChoices or the Network Advertising Initiative.

9. Children's Privacy

Our platform is intended for individuals aged 18 and older. We do not knowingly collect or solicit data from minors. If we become aware of such data being submitted, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominently within our app. The "Effective Date" at the top of this page will reflect the latest version.

11. Contact Information

For questions, concerns, or to exercise your privacy rights:

admin@kntrctr.com
Lexington Springs Holding Corp.