Privacy Policy

1. Who we are

This website (the "Site") is operated by Cybeats Technologies Inc., 65 International Blvd., Suite 103, Toronto, ON, Canada M9W 6L9 ("Cybeats", "we", "us"), part of the Cybeats Technologies Corp. group. Cybeats is the data controller responsible for the personal data collected through the Site and processed in our customer relationship management (CRM) systems. This policy does not apply to any information Cybeats receives as a service provider to its customers, which is subject to the privacy policies of those organizations.

This Privacy Policy explains what personal data we collect, why and how we use it, who we share it with, and the rights you have — including the rights granted to individuals in the European Economic Area (EEA), Switzerland, and the United Kingdom under the General Data Protection Regulation ("GDPR") and UK GDPR, and the rights of individuals in Canada under the Personal Information Protection and Electronic Documents Act ("PIPEDA") and applicable provincial privacy laws.

If you have any questions about this Policy or how we handle your personal data, contact our Privacy Officer at privacy@cybeats.com or by post at the address in Section 13 below.

2. Personal data we collect

We collect personal data in three ways:

• Data you give us. When you request a demo, subscribe to our newsletter, submit an investor inquiry, download resources, contact us, or apply for a job, we collect the information you provide, such as your name, company, job title, email address, telephone number, and, for applicants, your resume and related career information.
• Data collected automatically. When you visit the Site we collect technical information through cookies and similar technologies (see Section 5), such as your IP address, browser type, device information, pages visited, and how you interacted with the Site.
• Data from our communications. If you correspond with us by email or through the Site, we keep a record of that correspondence.

You are under no obligation to provide personal data to us. However, if you choose not to, we may be unable to respond to your request or provide the service you asked for.

3. How we use your data and our legal bases

We use your personal data only for the purposes below and when we have your consent, which may be implied or express depending on the circumstances, unless otherwise permitted or required. Where the GDPR applies, we rely on the legal basis indicated for each purpose:

• Responding to your requests (demo requests, inquiries, resource downloads) — performance of a contract or steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR), or our legitimate interest in responding to the people who contact us (Art. 6(1)(f)).
• Sending newsletters and marketing communications — your consent (Art. 6(1)(a)). You can withdraw consent at any time using the unsubscribe link in every message or by contacting us.
• Operating, securing, and improving the Site — our legitimate interest in maintaining a safe, functional, and improving website (Art. 6(1)(f)); analytics, personalization, and advertising cookies are used only with your consent (Art. 6(1)(a)).
• Processing job applications — steps taken at your request prior to entering into an employment contract (Art. 6(1)(b)) and our legitimate interest in evaluating candidates. Applications may be shared within the Cybeats group of companies for recruitment purposes.
• Complying with legal obligations — compliance with laws, court orders, or lawful requests from public authorities (Art. 6(1)(c)).

4. Sharing your data

We share personal data only in the following circumstances:

• Service providers (processors). Companies that host, support, or provide services for our business — such as website hosting, form processing, email delivery, customer relationship management, and analytics — acting on our documented instructions.
• Cybeats group companies. Related entities within the Cybeats Technologies Corp. group, for the purposes described in this Policy.
• Safety and legal reasons. Where necessary to protect the safety of users of Cybeats products and services, the Site, or the public, or where required by applicable law, court order, or government authority.
• Business transfers. In connection with a sale, assignment, merger, or other transfer of our business, subject to appropriate confidentiality protections.

5. Cookies and similar technologies

The Site uses cookies and similar technologies. When you first visit, a consent banner lets you accept or decline each optional category, and you can change your choices at any time via the "Cookie settings" link:

• Strictly necessary — required for basic website functionality, including recording your cookie preferences. These are always active (legitimate interest / necessity).
• Analytics — help us understand how the Site performs and how visitors interact with it. Set only with your consent.
• Personalization — allow the Site to remember choices you make, such as language or region. Set only with your consent.
• Marketing — first- and third-party remarketing cookies (including Google Ads, YouTube, LinkedIn, and X/Twitter) used to show you relevant Cybeats advertising across those networks. Set only with your consent.

You can also opt out of interest-based advertising by third-party ad networks at aboutads.info/choices, adjust your Google advertising preferences at adssettings.google.com, and configure your browser to refuse cookies. Declining optional cookies does not affect your ability to browse the Site.

6. International data transfers

We are based in Canada, and your personal data is primarily processed in Canada and may also be processed in other countries where our service providers operate (including the United States). While stored in another jurisdiction your personal information may be subject to the jurisdiction of foreign laws. Canada benefits from a European Commission adequacy decision for data protected under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), meaning transfers from the EEA to Canada are permitted without additional safeguards. Where personal data of EEA, Swiss, or UK residents is transferred to countries without an adequacy decision (such as the United States), we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum or International Data Transfer Agreement where applicable). You may request a copy of the relevant safeguards by contacting us.

7. How long we keep your data

We keep personal data only as long as necessary for the purposes described in this Policy: for as long as needed to handle your request or manage our relationship with you, for as long as you remain subscribed to our communications, and afterwards for a limited period where required for legitimate business records or by law. Job applicant data is retained for the duration of the recruitment process and for a period of up to two (2) years thereafter to allow consideration for future opportunities, unless you ask us to delete it sooner or applicable law requires a different period. When personal data is no longer needed, we delete or anonymize it.

8. Your rights

Subject to applicable law, and in particular if you are in the EEA, Switzerland, or the UK (under GDPR/UK GDPR) or in Canada (under PIPEDA and applicable provincial laws), you have the right to:

To exercise any of these rights, contact our Privacy Officer at privacy@cybeats.com. For requests under GDPR/UK GDPR, we will respond within one month (this period may be extended by two further months for complex or numerous requests, in which case we will inform you). For requests under PIPEDA, we will respond within 30 days, with an extension available in limited circumstances upon notice. We may need to verify your identity before acting on your request. Exercising your rights is free of charge except in the case of manifestly unfounded or excessive requests.

9. Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, taking into account the nature of the data and the risks involved in its processing. No method of transmission over the Internet is completely secure, so we cannot guarantee absolute security; if we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where required, the affected individuals in accordance with applicable law.

10. Children

The Site is intended for business audiences and is not directed to children. We do not knowingly collect personal data from anyone under the age of eighteen (18). If you believe a child has provided us personal data, please contact us and we will delete it.

11. Links to other websites

The Site may link to third-party websites that we do not control. We are not responsible for the privacy practices, security, or content of those websites, even where an affiliation exists. Each linked site maintains its own privacy policy, which you should review before providing any personal information.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date, and material changes will be highlighted on the Site. Your continued use of the Site after changes take effect constitutes acceptance of the revised Policy.

13. Contact us