Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy explains how Stock Solution, Inc., doing business as MADE ON SITE (“MADE ON SITE,” “we,” “us,” or “our”), collects, uses, and shares information. It covers:

• The website at madeonsite.co and its pages (the “Site”).

• The customer portal at my.madeonsite.co and any related apps (the “Portal”).

• Our mobile apps for iOS and Android (the “Apps”).

• The MOS System we install at customer properties, along with related services such as concentrate box ordering, support, and reporting (together with the Site, Portal, and Apps, the “Services”).

Our Services are built for businesses, mainly hotels and other hospitality operators. They are not intended for personal, family, or household use.

If your organization has a signed agreement with us, such as a customer, supply, or services agreement, that agreement governs how we handle your organization’s data in connection with those services. If that agreement conflicts with this policy, the agreement controls.

By using the Services, you acknowledge this Privacy Policy and our Terms of Use.

2. Information we collect

Information you give us

• Contact and inquiry information. When you book a call, fill out a form, email us, or meet us at an event: your name, job title, company or property name, email address, phone number, property details such as room count, and anything else you choose to share.

• Account information. When you or your organization use the Portal: your name, business contact details, login credentials, role, and preferences.

• Transaction information. Order history, billing contacts, and shipping addresses. Payment card details are handled by our payment processors, not stored by us.

• Communications. Messages, support requests, feedback, survey responses, and call notes.

Information collected automatically

• Device and usage information. When you visit the Site or Portal: IP address, browser and device type, pages viewed, referring pages, time spent, and approximate location based on your IP address. Some of this is collected through cookies and similar technologies (see Section 5).

• Equipment data. Each MOS System records operational data such as fills, dispense events, product selected, concentrate box scans, usage levels, filter and maintenance status, alerts, quality records, and network connectivity. This data describes how the equipment operates at a property. It generally does not identify individual people, though it may be linked to the staff account or property that used the equipment

Information from the Apps

When you use the Apps, we may collect the following. Data that depends on a device permission is collected only if you grant that permission.

• Device information. Device model, operating system, app version, language, and device and advertising identifiers.

• Push notification tokens, so we can send you service alerts.

• Crash and diagnostic data, such as performance logs and error reports.

• Location, if you allow it. We use it to find nearby properties or equipment, confirm installations and service visits, and support deliveries.

• Camera, if you allow it. We use it to scan QR codes on concentrate boxes, bottles, or equipment, and to capture photos you choose to share, such as for support.

• Bluetooth and local network, if you allow it. We use them to find, connect to, set up, and diagnose a MOS System.

• Photos and files, if you allow it. We use them only for items you choose to upload.

• Contacts, if you allow it. We use them only to help you invite colleagues you select.

Information from others

• From your organization, such as when a colleague adds you as a Portal user.

• From business partners, referral sources, event organizers, data providers and leadgeneration services, advertising and social media platforms, and publicly available professional sources such as company websites, industry directories, and professional networking sites. This can include business contact details, job titles, company information, and whether a visitor’s company or device has interacted with our ads or Site.

We do not knowingly collect sensitive personal information, such as government ID numbers, health information, or precise geolocation, through the Services. Please don’t send it to us.

3. How we use information

We use information to:

• Provide the Services. That includes installing, operating, monitoring, and maintaining the MOS System, managing Portal accounts, processing orders, recommending reorders, and generating usage, quality, and sustainability reports.

• Support customers. We answer questions, provide 24/7 hardware support, send service and administrative messages, and diagnose and fix issues.

• Improve and develop. We analyze how the Site, Portal, and equipment perform, and develop new features, products, formulas, and services.

• Market our business. We identify and reach prospective customers. That includes sending business emails, calls, and invitations to professional contacts, showing ads on other websites and platforms (including retargeting), building audiences for advertising, recognizing which organizations visit our Site, and measuring how our marketing performs. You can opt out at any time (see Sections 5 and 7).

• Protect our business and customers. We secure the Services, prevent fraud and misuse, enforce our agreements, and protect our rights and property.

• Meet legal obligations. We comply with laws, regulations, legal process, and reasonable requests from authorities.

We may also use information for other purposes we explain when we collect it, or with your consent.

4. How we share information

We share information as follows:

Our property. MADE ON SITE or its licensors own the Services and everything in them. That includes:

• Service providers. Companies that help us run our business, such as hosting, analytics, scheduling, email, CRM, payment processing, shipping, manufacturing, and installation partners. They may use the information only to provide services to us.

• Advertising and marketing partners. Ad networks, social media platforms, analytics providers, and data enrichment providers that help us advertise, build audiences, measure campaigns, and find prospective customers. They may collect information through cookies and pixels on our Site, and may combine it with information they already hold. Under some state laws, this kind of sharing for advertising can count as a “sale” or “sharing” of personal information. See Section 7 for how to opt out.

• Your organization. If you use the Portal or the MOS System on behalf of a hotel, management company, or owner, that organization and its authorized users can see account, order, and equipment data for its properties.

• Business partners at your request. For example, when you ask us to convert an existing amenity brand, we may share relevant information with that brand or its manufacturer.

• Corporate transactions. If we go through a merger, acquisition, financing, reorganization, or sale of assets, or take steps toward one, information may be transferred as part of that transaction.

• Legal and safety reasons. When we believe it is needed to comply with the law or legal process, enforce our agreements, or protect the rights, property, or safety of MADE ON SITE, our customers, or others.

• With your consent or at your direction.

Aggregated and de-identified data. We may create aggregated or de-identified information from the data we collect, including equipment data, so that it no longer reasonably identifies any individual or property. We may use and share that information for any lawful purpose, including industry benchmarks, sustainability research, product development, and marketing. Examples include total water shipping avoided across all properties, or average amenity use per room. We will not try to re-identify de-identified data, except as the law permits.

5. Cookies, analytics, and your choices

We and our service providers use cookies, pixels, local storage, and similar technologies to:

• run the Site and Portal and keep you signed in

• remember your preferences

• understand how visitors use the Site

• measure the results of our marketing, show you our ads on other websites and platforms, and recognize which organizations visit our Site

Your choices:

• Browser settings. Most browsers let you block or delete cookies. If you block them, some parts of the Site or Portal may not work properly.

• Ad opt-outs. You can limit interest-based ads through each platform’s ad settings (such as Google, LinkedIn, and Meta), and through the industry opt-out tools at optout.aboutads.info and optout.networkadvertising.org.

• Opting out does not stop all ads. It means the ads you see may be less relevant.

• Your Privacy Choices. Use the “Your Privacy Choices” link in the Site footer to opt out of targeted advertising and any “sale” or “sharing” of your personal information.

• Global Privacy Control. Where required by law, we treat a Global Privacy Control signal from your browser as a request to opt out of targeted advertising and any “sale” or “sharing” of personal information for that browser.

• Do Not Track. Some browsers send “Do Not Track” signals. There is no common standard for these signals, so we do not respond to them.

• App permissions and notifications. You can turn location, camera, Bluetooth, photos, contacts, and push notifications on or off at any time in your device settings. If you turn some off, parts of the Apps may not work.

• No cross-app tracking in the Apps. The Apps do not track you across apps and websites owned by other companies for advertising. They also do not share App data with data brokers. Our online advertising runs through the Site, as described above.

6. Retention, security, children, and international users

Retention. We keep information as long as we need it for the purposes in this policy. That includes:

• providing the Services

• keeping business and tax records

• resolving disputes

• enforcing our agreements

• meeting legal obligations

Equipment data and quality records may be kept for the life of the equipment and any warranty, product-safety, or regulatory period that applies.

Security. We use reasonable administrative, technical, and physical safeguards, including encryption in transit, to protect information. No system is completely secure, and we cannot guarantee the security of any information. Please keep your Portal credentials confidential.

Children. The Services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

International users. We are based in, and store information in, the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

7. Your privacy rights and choices

Marketing emails. You can stop marketing emails at any time by clicking “unsubscribe” in any of them or by emailing us. We will still send administrative and service messages, such as order, support, and account notices.

Calls and text messages. We may call business contacts about our Services. We send marketing text messages only to people who have given us their consent. Reply STOP to any text to opt out. Message and data rates may apply. Calls with our team may be recorded for quality and training purposes, where the law allows and with any notice the law requires.

State privacy rights. Some U.S. states give their residents rights over their personal information, where those laws apply to us. Depending on where you live, these rights may include:

• Access: confirming whether we process your personal information, and getting a copy of it.

• Correction: fixing personal information that is inaccurate.

• Deletion: asking us to delete personal information.

• Opt-out: opting out of targeted advertising, sales, and certain profiling.

We use and disclose personal information for targeted advertising, as described in Sections 4 and 5. Some state laws may treat this as a “sale” or “sharing.” You can opt out at any time through the “Your Privacy Choices” link in the Site footer, with a Global Privacy Control signal, or by emailing us. We do not sell personal information for money.

How to make a request. Email info@madeonsite.co with the subject “Privacy request.” Here is how requests are handled:

• Verification. We will verify your request using information we already hold.

• Authorized agents. An authorized agent may submit a request for you if they provide proof of their authority.

• Legal limits. We may decline a request where the law allows, for example when we need the information to provide services to your organization or to comply with our legal obligations.

• Appeals. If we deny your request, you can appeal by replying to our decision. If you are not satisfied with the outcome, you can contact your state attorney general.

• Equal treatment. We will not discriminate against you for exercising your rights.

Business customers. Requests about data your organization controls, such as Portal users or equipment data for its properties, may be passed to that organization or handled under its agreement with us.

Deleting your account. You can delete your account in the Apps under Settings, or request deletion at madeonsite.co/delete-account or by emailing info@madeonsite.co. When your account is deleted, we delete or de-identify your personal information. We may keep information we need for legal, security, and record-keeping purposes, along with records that belong to your organization, such as orders and equipment data for its properties.

8. Changes and contact

Changes. We may update this Privacy Policy from time to time. When we do, we will post the new version on this page and change the effective date above. If we make material changes, we will also give notice another way, such as an email or a notice on the Site or Portal. If you keep using the Services after an update takes effect, the updated policy applies to you.

Contact

Stock Solution, Inc. (MADE ON SITE) 40 West 25th Street, Floor 9 New York, NY 10010 info@madeonsite.co · (917) 426-3212

© 2026 Stock Solution, Inc. All rights reserved.