Privacy Policy

KnowIdea Inc. ("KnowIdea", "we", "our") is committed to maintaining the privacy of its users ("user", "you"). The following information describes how KnowIdea collects and processes information about you when you use our website (the "Website") and Platform (as defined below).

Our Privacy Policy explains:

• What information we collect and why we collect it.
• How we use that information.
• Your rights with regard to the collection of such information.

By using our Website and Platform, you agree to this Privacy Policy.

KnowIdea provides a cloud-based decision intelligence platform ("Platform") to its customers ("Customer/s") which collects data from the Customer's systems, automatically and through integrations and manual uploads, for AI-based deep data insights and providing decision-grade recommendations for executives ("Services"). The Website provides information about KnowIdea, the Platform and Services and enables its users to log in to the Platform and contact KnowIdea with respect to the Services.

If you have entered into a separate agreement with us, such as the KnowIdea Master Subscription Agreement, that separate agreement shall control, and only those terms within this Notice that do not conflict with such separate agreement shall apply.

KnowIdea serves as a "data processor" when:

• KnowIdea Customers use our commercial products and services ("Services"), and collect Personal Information, and
• When we collect and process Personal Information on behalf of our Customers in connection with the Services.

Our Customers, not KnowIdea, are the data controllers with respect to all Personal Information collection from our Customers and our Customers' authorized users, and are responsible for complying with all laws, rules, and regulations that require providing notice and/or obtaining consent prior to collecting and using such Personal Information in connection with their use of the Services.

Please note that with regard to information collected when providing our Services to Customers, any notification requirements towards employees and authorized users shall apply on the respective Customer, and all to the extent required under the applicable law.

Customer: any entity, including all users belonging to the entity, that uses KnowIdea's Services pursuant to a commercial agreement with KnowIdea. Please refer to the Master Subscription Agreement regarding obligations and policies relating to KnowIdea processing Customer personal information.

Authorized Users: individuals authorized by a Customer to access and use the Platform on behalf of the Customer.

Personal Information: information from which you can be personally identified, as detailed in this Privacy Policy.

Cookies: small text files that are placed on your hard drive by a web server when you access our Sites or Services. Cookies may either be first party cookies (placed by us) or third-party cookies (placed by third party vendors).

Third-Party Services: software services that integrate with KnowIdea Services. Each Customer can permit its Authorized Users to enable and disable these integrations in accordance with the Customer's needs.

Please note that the scope of this Privacy Policy is limited only to information collected by KnowIdea through your use of its Website and Platform. Some information may be automatically collected, and some is collected when you interact with our Website and Platform.

3.1 Account Information

If you wish to register to receive the Services and create an account with KnowIdea ("Account"), we will collect your Personal Information such as your full name and email address.

3.2 Profile Information

When we set your Account, you will be required to choose a username and password so we can create your user profile. We will also collect any feedback you submitted or comments posted.

3.3 Log-In to the Platform

If you wish to log-in to your Account to use the Platform via the Website, we may also use a Single Sign-On account ("SSO") such as Google or other available SSO services. Signing in via the SSO will provide us with access to information these SSO services obtain about you, and all in accordance with your specific SSO's privacy settings.

3.4 Third-Party Services Information

Typically, Third-Party Services are software services that integrate with KnowIdea Services. Each Customer can permit its Authorized Users to enable and disable these integrations in accordance with the Customer's needs. KnowIdea may also develop and offer KnowIdea applications that connect the Platform with a Third-Party Service. Once enabled, the provider of a Third-Party Service may share certain information with KnowIdea. Please note that Authorized Users should check the privacy settings and notices in these Third-Party Services to understand what data may be disclosed to KnowIdea.

3.5 Contact Information

If you wish to contact us for support regarding our Services, Website, Platform, this Privacy Policy or any other matter, we will collect your name, email address, company, position and the content you submitted to facilitate your inquiry.

3.6 Newsletter

If you wish to register to our newsletter and to be provided with information on the Services, subject to your consent, we will collect your email address, and will send you the required materials.

3.7 Interactions

KnowIdea may receive other Personal Information when submitted to our Websites or Platform or in other ways, such as if you participate in a focus group, contest, activity or event, apply for a job, request support, interact with our social media accounts or otherwise communicate with KnowIdea.

3.8 Usage Information

Log Data: As with most technology services delivered over the Internet, our servers automatically collect information when you access or use our Websites or Platform and record it in log files. This log data may include the Internet Protocol (IP) address, the address of the web page visited before using the Website or Platform, browser type and settings, the date and time the Platform or Website were used, information about browser configuration and plugins, language preferences and cookie data.

Device Information: KnowIdea collects information about devices accessing the Platform or Website, including type of device, what operating system is used, device settings, application IDs, unique device identifiers and crash data. Whether KnowIdea collects some or all of this information often depends on the type of device used and its settings.

Location Information: KnowIdea receives information from Authorized Users, Customers and other third parties that may help KnowIdea approximate user location. KnowIdea may, for example, use a business address submitted by a Customer, or an IP address received from the Authorized User browser or device to determine approximate location.

We use the Personal Information we collect from you for a range of different business purposes according to different legal bases of processing. We may use or process your Personal Information for the following purposes. One or more purposes may apply simultaneously.

4.1 Providing the Requested Services

• We collect Personal Information of Authorized Users to enable them to operate the Platform and facilitate the Services for the Customer who authorized them to use the Platform on its behalf.
• We collect the Personal Information included in your Account and Profile to enable you to use the Platform.
• We will collect your Personal Information when you contact us to facilitate your inquiry regarding KnowIdea, the Platform, Website or Services.
• We may collect the Personal Information of Customer's employees or other individuals whose Personal Information is included in the systems and files that KnowIdea is provided access to when providing its Services.

Such collection of information will enable us to provide you with the Services as well as technical and professional assistance. We process the Personal Information where it is necessary for the adequate performance of the contract we have with our Customers.

4.2 Improvement and Development of the Services

• We collect Personal Information to improve and develop our Services and understand feedback on KnowIdea Website and Platform.
• We collect Personal Information for ongoing review and improvement of the information provided on our Website and Platform to ensure it is user friendly.
• We conduct surveys and research, test features in development, and analyze the information we have to evaluate and improve our Website and Platform, develop new features, and conduct audits and troubleshooting activities.

We process this information in light of our legitimate interest in improving the Website and Platform, to allow our users to have the best experience.

4.3 Maintain a Safe and Secure Environment

We may use your information to detect and prevent fraud, abuse and security incidents in the following ways:

• Verify and authenticate your identity and prevent unauthorized or illegal activity;
• Enhance the safety and security of our Website and Platform;
• Conduct security investigations and risk assessments;
• Prevent or take action against activities that are, or may be, in breach of our terms of service or applicable law.

4.4 Marketing and Communications

We may use your Personal Information to send you marketing communications, service information, and other information about KnowIdea, our products and services that we think you may be interested in, subject to your consent where required by applicable law.

4.5 Legal Compliance

We may use your Personal Information to comply with legal obligations, enforce our agreements, and protect our rights and the rights of our users.

We may share your Personal Information in the following circumstances:

• Service Providers: We may share your Personal Information with third-party service providers who perform services on our behalf, such as hosting providers (Vercel, Supabase, Snowflake), email service providers, analytics providers (Vercel Analytics), and customer support tools. See our list of Sub-Processors below.
• Business Transfers: We may share or transfer your Personal Information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal Requirements: We may disclose your Personal Information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• Protection of Rights: We may disclose your Personal Information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation in which we are involved.

We do not sell any Personal Information to third parties.

KnowIdea uses standard automated data collection tools, such as cookies and similar tools, to collect information about how people use our Sites and improve customer experience. We utilize Vercel Analytics to perform these functions for KnowIdea.

These automated data collection tools provide our Sites with necessary, functional, and performance duties. For instance, necessary cookies provide security and compliance with data privacy regulations. Vercel Analytics collects anonymous usage data to help us understand how visitors interact with our platform.

Any Sites visitor has the ability to opt out of the use of these data collection tools through their browser settings. However, by rejecting the Cookies, you may be unable to fully access the offerings on our Website and Platform. To find out more about Cookies, visit www.allaboutcookies.org.

At the present time our Sites do not respond to "Do Not Track" signals or similar mechanisms.

To learn more about Vercel Analytics and privacy, please visit Vercel's Analytics Privacy Policy.

Security is critical to KnowIdea's objectives, and KnowIdea takes security of data seriously and as a priority item. KnowIdea uses good industry-standards and practices to protect Personal Information from loss, misuse, and unauthorized access or disclosure. These steps take into account the sensitivity of the Personal Information KnowIdea collects, processes, and stores, and the current state of technology.

Your data is stored securely using industry-leading cloud infrastructure providers including Vercel, Supabase, and Snowflake. These providers maintain SOC 2 Type II compliance and implement robust security measures including encryption at rest and in transit.

Given the nature of communications and information processing technology, KnowIdea cannot guarantee that Personal Information in our care will be absolutely safe from intrusion by others during transmission through the Internet or while stored on our systems or otherwise. When you click a link to a third-party site, you will be leaving our site and KnowIdea doesn't control or endorse what is on third-party sites in any way whatsoever.

KnowIdea will retain Personal Information in accordance with applicable laws, regulations, and contractual agreements. Generally, KnowIdea does not retain information longer than necessary to provide its Services and for its reasonable business and lawful needs. This may include keeping information for the period of time needed for KnowIdea to pursue legitimate business interests, conduct audits, comply with legal obligations, resolve disputes, and enforce our agreements.

When we no longer require the Personal Information we have collected from you, we will either delete or anonymize it or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

We may also retain your information indefinitely in the following secondary data stores:

• Database backups
• Log files
• Reports that were generated using the information

Your Personal Information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside Canada and choose to provide information to us, please note that we transfer the data, including Personal Information, to Canada and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Depending on your location, you may have certain rights regarding your Personal Information, including:

• Access: You have the right to request access to the Personal Information we hold about you.
• Correction: You have the right to request that we correct inaccurate or incomplete Personal Information.
• Deletion: You have the right to request deletion of your Personal Information, subject to certain exceptions.
• Objection: You have the right to object to our processing of your Personal Information.
• Restriction: You have the right to request that we restrict the processing of your Personal Information.
• Data Portability: You have the right to receive your Personal Information in a structured, commonly used format.
• Withdraw Consent: Where we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at data@knowidea.dev. You must verify your identity and request before further action is taken. As a part of this process, government identification may be required.

You are always in control of your data, and if you choose to receive information from us, or others, you can change your mind later. If, at any time, you would like to stop receiving such information or opt out of a feature, you may notify us by writing to data@knowidea.dev.

You can opt out of our marketing communications at any time by using the unsubscribe link provided in our emails. If you opt-out, we may still send you non-promotional communications, such as those about your account, our ongoing business relations, or important service updates.

You should be aware, however, that it is not always possible to completely remove or modify information in our databases and servers, although we will always make reasonable efforts to do so upon your request.

IF YOU ARE UNDER THE AGE OF 16 YOU MAY NOT USE THE WEBSITE AND PLATFORM, UNLESS PARENTAL CONSENT IS PROVIDED.

Our Services are not directed to individuals under the age of 16. We do not knowingly collect Personal Information from children under 16. If you become aware that a child has provided us with Personal Information, please contact us at data@knowidea.dev. If we become aware that we have collected Personal Information from children without verification of parental consent, we take steps to remove that information from our servers.

This Website and/or Platform may provide links to other websites. Please be aware that these other websites are not covered by our Privacy Policy. This Privacy Policy does not cover the information practices exercised by other providers of products or services, advertisers or other websites, companies or individuals, which are not owned or controlled by KnowIdea.

We suggest that when linking to another website, you always read that website's privacy policy before volunteering any personally identifiable information. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

The California Consumer Privacy Act of 2018 ("CCPA") permits users who are California residents to request certain information about our practices with respect to Personal Information. If you are a California resident, the CCPA grants you the right to request certain information about our practices with respect to your Personal Information. In particular, you can request to receive information on the following:

• The categories and specific pieces of your Personal Information that we have collected.
• The categories of sources from which we collected your Personal Information.
• The business or commercial purposes for which we collected your Personal Information.
• The categories of third parties with which we shared your Personal Information.

You can be rest assured that we do not sell your Personal Information. If you choose to exercise your rights, we will not charge you different prices or provide different quality of our Services, unless those differences are related to your provision of your Personal Information.

We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. To exercise your CCPA rights, please contact us at: data@knowidea.dev.

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you with a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

CalOPPA requires commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require any person or company in the United States (and conceivably the world) that operates websites collecting Personally Identifiable Information from California consumers, to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared.

According to CalOPPA, we agree to the following:

• Once this Privacy Policy is created, we will add a link to it on the first significant page after entering our Website and Platform.
• Our Privacy Policy link includes the word 'Privacy' and can easily be found on the Website and Platform.
• You can request to change your Personal Information by emailing us.

The CAN-SPAM Act is a Federal US law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.

To be in accordance with CAN-SPAM, we agree to the following:

• Not use false or misleading subjects or email addresses.
• Identify the commercial message sent to you as an advertisement when required.
• Include the physical address of our business or site headquarters.
• Monitor third-party email marketing services for compliance, if one is used.
• Honor opt-out/unsubscribe requests quickly.
• Allow users to unsubscribe by using the link at the bottom of each email.

If at any time you would like to unsubscribe from receiving future emails, you can email us at data@knowidea.dev and we will promptly remove you from ALL correspondence.

If you are located in the EEA or UK, you have certain rights under the General Data Protection Regulation (GDPR), including:

• The right to access your Personal Information.
• The right to rectify inaccurate Personal Information.
• The right to erase your Personal Information.
• The right to restrict processing of your Personal Information.
• The right to data portability.
• The right to object to processing.
• The right to lodge a complaint with a supervisory authority.

To exercise these rights, please contact us at data@knowidea.dev.

Electronic Marketing

Individuals may voluntarily sign up on our Sites to receive marketing materials electronically, including event invitations, product updates, and other marketing material. From time to time we may send electronic marketing materials to individuals with whom we have an existing business relationship.

Each electronic marketing communication will include a link to unsubscribe from any further marketing communications. To unsubscribe from all electronic marketing materials, you can email data@knowidea.dev.

Legal Grounds

KnowIdea will obtain consent for the collection, use, and disclosure of Personal Information. There are some circumstances when we rely on privacy legislation to collect Personal Information without consent.

We may also use or disclose Personal Information in the absence of consent if we are required or authorized by law to do so. When we receive Personal Information from our Customers or third parties, we rely on the party providing it to us having obtained the information lawfully and in accordance with applicable privacy legislation.

KnowIdea uses the following sub-processors to provide our Services:

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the "Last Updated" date at the top of this Notice.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your Personal Information. Your continued use of our Sites and Services after any changes to this Privacy Policy constitutes your acceptance of such changes.

This Privacy Policy will be governed and interpreted pursuant to the laws of the Province of Ontario, Canada without giving effect to its choice of law rules. You expressly agree that the exclusive jurisdiction for any claim or action arising out of or relating to this Privacy Policy shall be to the competent courts in the Province of Ontario only, to the exclusion of any other jurisdiction.

If you would like to contact us to discuss any queries or concerns about this Privacy Policy or KnowIdea's data protection practices, or if you are seeking to exercise any of your statutory rights, contact us at data@knowidea.dev. KnowIdea will respond within a time frame that is compliant with all applicable regulations.

KnowIdea Inc.
Ontario, Canada