Effective May, 2026

1. Introduction

This Privacy Policy describes how Nas Technologies LLC (“Nastech,” “we,” “us,” or “our”) collects, uses, shares, and protects personal data when you use our marketplace and auction platform (the “Platform”).

Nastech provides technology infrastructure to marketplace operators (“Clients”), such as auction houses and similar businesses. When you interact with a marketplace powered by Nastech, you may be interacting with both Nastech and the Client operating that marketplace.

Nastech does not itself act as the seller, auctioneer, or consignor of items listed on the Platform. Those roles are performed by the Client operating the marketplace, which is responsible for the underlying transactions and listings.

This Policy applies to all individuals who access or use the Platform, including buyers, bidders, sellers, consignors, and other users (“you” or “End Users”).

The Platform is not directed to children under the age of 16, and Nastech does not knowingly collect personal data from children. If Nastech becomes aware that it has collected personal data from a child under 16, it will take reasonable steps to delete such information.

2. Who Controls Your Data

Depending on how you interact with the Platform, different parties may be responsible for your data.

When you use a marketplace operated by a Client, that Client is typically the data controller for personal data collected in connection with that marketplace, and Nastech acts as a data processor on behalf of that Client to provide the Platform and related services.

Nastech may act as an independent data controller when processing aggregated, de-identified, or derived data for analytics, product improvement, artificial intelligence development, and platform optimization that does not identify you or a Client and cannot reasonably be re-identified.

If you have questions about your data, you may contact the Client operating the marketplace through which you interacted and, where applicable, Nastech using the contact details in Section 14.

3. Information We Collect

We collect personal data to provide and improve the Platform. The types of information we collect depend on how you use the Platform.

Account and Identity Information

We collect personal information such as your name, e-mail address, username, phone number, and account credentials. We also collect account preferences and authentication information needed to securely access the Platform.

Transaction and Marketplace Activity

We collect information related to your activity on the Platform, including bids, bid amounts, maximum bids, timestamps, items viewed, watchlists, participation patterns, purchases, invoices, and delivery selections. This data is essential to facilitate auctions and transactions.

Payment Information

Payments are processed by third-party payment providers. Nastech does not collect or store full payment card numbers, CVV codes, or bank account details. Instead, we receive limited information such as billing name, billing address, payment tokens, the last four digits of a payment card, card type, expiration date, transaction identifiers, and payment status. This information is used for operational purposes such as reconciliation and support.

Shipping and Delivery Information

We collect shipping details such as delivery address, recipient name, phone number, and parcel information in order to facilitate delivery of purchased items.

User-Generated Content

We collect content you provide, including images, descriptions, messages, and other materials submitted through the Platform.

Usage and Device Information

We collect technical information such as IP address, browser type, device information, and usage data to understand how users interact with the Platform and to improve performance and security.

Information from Clients and Third Parties

We may receive information from Clients operating marketplaces and from third-party service providers such as payment processors, shipping providers, and identity verification services.

Certain information associated with your account or activity may be visible to Clients or other users as part of the operation of the marketplace, such as bidding activity, participation in auctions, or publicly displayed listing information, to the extent necessary to facilitate marketplace transparency and functionality.

4. How We Use Your Information

We use your personal data to provide, operate, and improve the Platform. This includes facilitating auctions, processing transactions, managing accounts, and providing customer support.

We use personal data to enable marketplace transactions between users and Clients, including facilitating bidding activity, processing purchases, confirming winning bids, generating invoices, coordinating payment and delivery, and maintaining transaction records. This includes sharing relevant transaction details with buyers, sellers, consignors, and the Client operating the marketplace in order to complete and administer transactions.

We use data to communicate with you, respond to inquiries, and provide updates about transactions or platform activity. We also use data to enhance platform functionality, develop new features, and improve performance.

We may use personal data to detect, prevent, and investigate fraud, abuse, or other harmful activity, including monitoring bidding patterns, transaction behavior, and account activity to protect the integrity of the marketplace.

We may use your personal data to send service-related communications, including bid confirmations, transaction updates, account notifications, and customer support messages. Where permitted by applicable law, we may also send promotional or marketing communications on behalf of Clients or relating to Platform features, and you may opt out of such communications at any time.

Nastech uses personal data to generate analytics, insights, and automated outputs, including through artificial intelligence systems, only to the extent necessary to provide, secure, improve, and operate the Platform. Where feasible, Nastech uses aggregated, de-identified, or transformed data for these purposes, and does not use personal data for independent model training or unrelated secondary purposes unless permitted by law, disclosed in this Policy, and supported by appropriate contractual safeguards.

We also process personal data to comply with legal obligations, prevent fraud, enforce agreements, and protect the security of the Platform.

Where applicable, Nastech relies on one or more of the following legal bases for processing: performance of a contract, compliance with legal obligations, and legitimate interests in operating, securing, and improving the Platform and, where required, user consent.

5. Aggregated and Derived Data

Nastech may create aggregated, de-identified, and anonymized data from Platform activity. This data does not identify, and cannot reasonably be used to identify, any individual, Client, or specific transaction, and may be used for analytics, benchmarking, product development, artificial intelligence, and platform optimization. Nastech implements reasonable measures designed to prevent re-identification of aggregated or derived data.

Nastech may also generate derived data, including insights, models, recommendations, and predictive analytics, provided such outputs do not identify, and cannot reasonably be used to identify, any individual, Client, or specific transaction. Nastech may retain and use such derived data on an ongoing basis to improve the Platform and related services.

6. How We Share Your Information

We share personal data in order to operate the Platform and fulfill transactions.

In connection with marketplace activity, certain information may be shared between participants in a transaction, such as between buyers and sellers or consignors, including information necessary to complete a purchase, arrange delivery, or resolve disputes. The Client operating the marketplace may also access and use this information to manage auctions and transactions.

We share data with the Client operating the marketplace through which you interact, as that Client controls the underlying transaction environment.

Nastech requires its service providers to process personal data only to provide services to Nastech and not for their own independent purposes. However, in limited cases, certain providers, particularly those offering artificial intelligence or image processing services, may retain or use limited de-identified, non-identifiable data for purposes such as service improvement or model training. In such cases, Nastech limits the data shared, avoids sharing identifiable personal data where feasible, and ensures such use is contractually restricted and consistent with applicable law.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Platform, maintain sessions, authenticate users, remember preferences, analyze performance, and improve functionality. These technologies may collect information such as IP address, device identifiers, and browsing activity.

Some cookies are essential for the Platform to function, while others support analytics, security, and performance. Third-party providers may also use cookies in connection with the services they provide.

Where required by law, we obtain consent for non-essential cookies. You may manage cookie preferences through browser settings or platform tools, where available.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the Platform to comply with legal obligations, resolve disputes, enforce agreements, and support the purposes described in this Policy.

Account, identity, transaction, and support data are retained for the duration of the Client relationship and for a reasonable period thereafter. Payment-related records retained by Nastech are limited to operational and compliance records and do not include full payment card credentials.

Aggregated, de-identified, and derived data may be retained on a persistent basis, as such data does not identify individuals.

9. International Data Transfers

Your information may be transferred to and processed in countries outside your jurisdiction, including the United States. Where required, Nastech uses appropriate safeguards for such transfers in accordance with applicable law.

10. Your Rights

Depending on your location and the role Nastech is playing with respect to your data, you may have rights regarding your personal data, including the right to access, correct, delete, restrict, or object to processing, and the right to data portability where applicable.

Where processing is based on consent, you may withdraw that consent at any time. You may also have the right to lodge a complaint with a data protection authority.

Where Nastech acts as a processor, requests should be directed to the Client acting as controller.

11. California Privacy Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (as amended by the CPRA), including the right to know what personal information is collected, the right to request deletion or correction, and the right to opt out of the sale or sharing of personal information. Where applicable, you may also have the right to limit the use and disclosure of sensitive personal information.

California residents have the right to request that Nastech disclose the categories and specific pieces of personal information collected about them, the categories of sources from which the information is collected, the purposes for which the information is used, and the categories of third parties to whom the information is disclosed.

For purposes of the California Consumer Privacy Act, the categories of personal information Nastech collects include identifiers (such as name, e-mail address, and account information), commercial information (such as transaction history, bids, and purchases), internet or electronic network activity (such as browsing activity and platform interactions), geolocation data (such as IP address or general location), and inferences derived from such information (such as analytics and usage patterns). This information is collected directly from users, from Clients operating marketplaces, and from third-party service providers such as payment processors and shipping providers.

Nastech collects and uses personal information for the following business and commercial purposes: to operate and provide the Platform, facilitate marketplace transactions, process payments and deliveries, communicate with users, improve platform performance, detect and prevent fraud, comply with legal obligations, and develop analytics, insights, and product features.

Nastech may disclose personal information to the following categories of third parties: Clients operating marketplaces, payment processors, shipping and logistics providers, cloud hosting providers, identity and authentication providers, analytics providers, and service providers supporting Platform functionality. Such disclosures are made for business purposes and subject to contractual restrictions.

Nastech does not sell personal information in exchange for monetary consideration. However, certain disclosures of personal information to service providers or technology partners may be considered “sharing” under California law, particularly where data is used for analytics or platform optimization. In such cases, Nastech provides users with the ability to opt out of such sharing where required by law.

Nastech will not discriminate against users for exercising their rights under applicable data protection laws.

You may exercise your rights by contacting Nastech at legal@merxtechgroup.com or using the contact information provided in Section 14. Where Nastech processes personal data on behalf of a Client, requests should be directed to the applicable Client.

At or before the time of collection, Nastech provides notice of the categories of personal information collected and the purposes for which it is used.

12. Security

We use administrative, technical, and organizational measures designed to protect personal data, including access controls, encryption in transit and at rest where appropriate, logging, monitoring, and secure infrastructure. We take commercially reasonable measures; however, no system is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on the Platform with an updated effective date.

14. Contact Us

Nas Technologies LLC
1309 Coffeen Ave
STE 1200
Sheridan, WY 82801
legal@merxtechgroup.com

Privacy requests relating to Client-controlled marketplaces should also be directed to the applicable Client where appropriate.