Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

Account Information: When you create an account, we collect your name, email address, company name, and billing information.

Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, session duration, and device/browser information.

Payment Information: Payment card details are processed by our PCI-DSS certified payment processors. We do not store full card numbers on our servers.

Communications: If you contact our support team, we retain records of those communications to improve our service.

User-Generated Content: Files, templates, workflows, and other content you create or upload within our platform.

Cookies and Tracking: We use cookies and similar technologies as described in Section 6 of this policy.

2. How We Use Your Information

We use the personal information we collect to:

• Provide, operate, and improve our Services • Process transactions and manage your subscription • Communicate with you about your account, support requests, and service updates • Send product news, feature announcements, and promotional materials (you may opt out at any time) • Analyze platform usage to identify improvements and optimize performance • Detect, prevent, and respond to fraud, security incidents, and misuse • Comply with legal obligations and enforce our Terms of Service • Fulfill any other purpose disclosed at the time of collection with your consent

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

Contract Performance: Processing necessary to fulfill our contractual obligations to you, including providing Services and processing payments.

Legitimate Interests: Improving our platform, preventing fraud, and ensuring security.

Legal Obligation: Compliance with applicable laws, including Canadian tax regulations and privacy legislation.

Consent: For marketing communications and non-essential cookies. You may withdraw consent at any time.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

Service Providers: We share information with trusted third-party vendors who assist us in operating our platform (e.g., cloud hosting, payment processors, email delivery). These vendors are contractually required to protect your information and may only use it for specified purposes.

Legal Requirements: We may disclose information when required by law, court order, or government authority, or when necessary to protect our rights, property, or the safety of our users.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent: We may share information with third parties with your explicit consent.

5. Data Retention

We retain your personal information for as long as necessary to provide the Services and fulfill the purposes described in this policy, unless a longer retention period is required by law.

Account data is retained for the duration of your subscription plus 90 days following account closure, after which it is securely deleted. We may retain anonymized or aggregated data indefinitely for analytics purposes.

You may request deletion of your personal information at any time, subject to legal retention requirements.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform. These include:

Essential Cookies: Necessary for the platform to function, including session management and security.

Performance Cookies: Used to analyze platform usage and improve performance (e.g., page load times, error tracking).

Functional Cookies: Remember your preferences and settings.

Marketing Cookies: Used to deliver relevant advertising and measure campaign effectiveness. These are only set with your consent.

You may control cookie preferences through your browser settings or our cookie consent tool. Note that disabling essential cookies may impair platform functionality.

7. Data Security

We implement industry-standard security measures to protect your personal information, including:

• TLS 1.3 encryption for all data transmitted between your device and our servers • AES-256 encryption for data stored at rest • Regular security audits and penetration testing • Access controls limiting employee access to personal data on a need-to-know basis • Multi-factor authentication for internal systems • Regular backup and disaster recovery procedures

While we employ these measures, no method of transmission or storage is 100% secure. We encourage you to use strong, unique passwords and to notify us immediately of any suspected unauthorized access.

8. Your Privacy Rights

Under Canadian privacy law, you have the right to:

Access: Request a copy of the personal information we hold about you.

Correction: Request correction of inaccurate or incomplete information.

Deletion: Request deletion of your personal information, subject to legal obligations.

Withdrawal of Consent: Withdraw consent for processing based on consent, including marketing communications.

Portability: Request your data in a structured, commonly used format.

To exercise any of these rights, contact us at contact@pyramidsolutions.digital. We will respond within 30 days. We may require verification of your identity before processing requests.

9. International Data Transfers

Pyramid Digital Solutions is headquartered in Canada. If you access our Services from outside Canada, your information may be transferred to and processed in Canada.

For Business plan and above subscribers, data is stored in Canadian data centers by default. Enterprise customers may specify geographic data residency requirements in their service agreement.

When we transfer data across borders, we ensure appropriate safeguards are in place in accordance with applicable law.

10. Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a minor, we will promptly delete it. If you believe we have collected information about a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our website and, where required by law, by sending you an email notification. Your continued use of our Services after such changes constitutes acceptance of the updated policy.

12. Contact and Complaints

If you have questions, concerns, or complaints about our privacy practices, please contact us:

Pyramid Digital Solutions — Privacy Officer 2967 Dundas St. W. #372D Toronto, ON M6P 1Z2 Canada Email: contact@pyramidsolutions.digital

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.