Privacy Policy

SpaceLeadX Inc. ("we", "our", "us") is committed to protecting the privacy of your personal information. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our SpaceLeadX service (the "Service"). This policy complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

We collect the following types of information: **Account Information:** • Full name • Email address • Password (encrypted) • Company information (name, address, phone) **Usage Data:** • IP address • Browser and device type • Pages visited and actions taken • Date and time of access • Referral data (where you came from) **Lead Data:** • Information submitted through your forms • This data is collected on your behalf and you are the data controller **Payment Information:** • Processed by secure third-party processors • We do not store complete card numbers

We use your information to: • Provide and maintain the Service • Create and manage your account • Process transactions and send notifications • Respond to your support requests • Improve and personalize the Service • Analyze usage and trends • Detect and prevent fraud • Comply with our legal obligations • Send marketing communications (with your consent)

We process your personal data on the following legal bases: • **Contract Performance**: To provide the Service you subscribed to • **Consent**: For marketing communications and certain cookies • **Legitimate Interests**: To improve the Service and prevent fraud • **Legal Obligation**: To comply with applicable laws

We may share your information with: **Service Providers:** • Cloud hosting (secure servers in Canada) • Payment processors (Stripe) • Analytics services • Email services **Other Parties:** • With your explicit consent • To comply with legal obligations • To protect our rights or those of others • In case of merger, acquisition, or asset sale We never sell your personal data to third parties.

If you choose to sign in via Google: • We receive your name, email address, and profile picture • We do not access your Google account or other data • This login is secured by the OAuth 2.0 protocol • You can revoke access from your Google account We use this information only to create and authenticate your SpaceLeadX account.

We use cookies for: **Essential Cookies:** • Authentication and session security • Language preferences **Analytics Cookies:** • Understanding Service usage • Improving user experience You can control cookies through your browser settings. Disabling certain cookies may affect Service functionality.

We take your data security very seriously: • SSL/TLS encryption for all transmissions • Password encryption with robust algorithms • Restricted access to personal data • Regular monitoring and auditing • Servers hosted in Canada in certified data centers • Regular backups and recovery plans No system is infallible. We encourage you to use strong passwords and protect your credentials.

We retain your data as follows: • **Account Data**: As long as your account is active, then 2 years after deletion • **Lead Data**: According to your retention settings (you control) • **Access Logs**: 12 months • **Billing Data**: 7 years (legal requirement) You can request deletion of your data at any time, subject to legal retention requirements.

Under Canadian privacy laws, you have the right to: • **Access**: Obtain a copy of your personal data • **Rectification**: Correct inaccurate data • **Deletion**: Request deletion of your data • **Portability**: Receive your data in a structured format • **Objection**: Object to certain processing • **Withdraw Consent**: Withdraw your consent at any time To exercise these rights, contact us at privacy@spaceleadx.ai. We will respond within 30 days.

Your data is primarily stored and processed in Canada. If we need to transfer data to other countries, we ensure adequate protections are in place in accordance with Canadian laws.

The Service is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us so we can delete it.

We may update this policy from time to time. Material changes will be notified by: • Posting on the Service • Email notification We encourage you to review this policy regularly.

For any questions about this Privacy Policy or your personal data: **Privacy Officer** SpaceLeadX Inc. Email: privacy@spaceleadx.ai Address: Montreal, Quebec, Canada To file a complaint with a supervisory authority, you may contact the Office of the Privacy Commissioner of Canada (OPC).