Privacy Policy

Effective date: May 1, 2026
Last updated: May 1, 2026

Syzl Inc. ("Syzl", "Company," "we," or "us") respects your privacy. Syzl provides an online marketplace providing a cloud-based portal for connecting the owners of commercial kitchens for rent with food makers seeking certified kitchen space. This Privacy Policy ("Policy") governs your access to and use of the Syzl website, including any subdomains thereof, and any other websites through which Syzl makes its services available ("Website"), our mobile, tablet and other smart device applications, and application program interfaces (the "Application") and all services offered through the Website and Application ("Services"). The Website, Application and Services together are hereinafter collectively referred to as the "Platform."

The Policy describes how we collect, use and disclose your personal information in relation to your use of the Platform, any Syzl accounts created by you, and any and all use of the Services provided through the Platform. This Policy does not apply to information that you submit directly to third parties, including any organization or individual with whom you connect through your use of the Platform. This Privacy Policy should be read in accordance with the Terms of Service, Payment Terms, as well as any other agreement entered into between you or the organization you work for and Syzl.

Please read this Policy carefully. Your use of our Platform and any dispute over privacy is subject to this Policy, our Terms of Service and any other applicable agreements between you and Syzl, including the applicable limitations on damages and the resolution of disputes.

1. What Information We Collect

1.1 For the purposes of this Policy, "Personal Information" includes any information that personally identifies or could be used to identify an individual, such as name or email address, gender, identification number or other information which could be reasonably linked or used to identify such an individual. "Other Information" is any information we collect that is not Personal Information. We may combine Personal Information with Other Information, in which case we will treat the combined information as Personal Information in accordance with this Privacy Policy and applicable privacy laws. We may combine Personal Information with additional information that we, or other third parties, collect in other contexts, such as communications via email or phone, responses to screening questions, customer service records, or any feedback you provide. In those circumstances, we will treat the combined information as Personal Information.

1.2 We may collect the following Personal Information about you when you use the Platform to create a personal profile. When completing your profile, you will need to provide your first name, last name, phone number, postal address, email address, date of birth, and profile photo.

1.2.1 Identity Information

We ask that our users verify their identity and complete a background check, which may require an image of government-issued identification or other verification information.

When you complete identity verification, we collect images of your government-issued photo ID as provided to our identity-verification service provider, Certn. Certn acts as a data processor on our behalf under a Data Processing Agreement requiring it to handle your information in compliance with PIPEDA.

Retention: Government-issued ID images are retained only for as long as required to complete the verification, and are deleted within 30 days of verification completion or account closure, whichever is sooner. For Certn's own retention practices, see the Certn Privacy Policy.

Consent: Submission of identity documents is voluntary but required to access host features of the platform. Your express consent is obtained at the point of collection.

1.2.2 Payment and transaction information. We may collect bank information, transaction details, including date and time of payment, payment amount, billing address and other information about payment and transactions carried out through the Platform.

1.2.3 Information you choose to provide. This information may include gender, descriptions about you, descriptions about the kitchen space you are seeking or offering for use, your geolocation, your preferred language, reviews, and any other information provided in forms or surveys you complete.

1.2.4 Information automatically collected when using the Platform. We may collect certain information automatically, including but not limited to your internet protocol (IP) address, internet service provider, your device and operating system, browser information, diagnostic data, information from cookies (defined below) and similar technologies, your geolocation, searches, pages you have viewed, actions performed on the Platform, and other usage data.

2. How We Collect Information

2.1 We collect Personal Information through the use of our Platform directly from you, from third parties, and from the use of cookies and metadata.

2.2 We, and our third-party service providers, automatically collect information about your use of the Platform with the following technologies:

2.2.1 Server Logs. When you use the Platform, we automatically receive and record certain information from your device and your browser through server logs or applications that recognize your device and gather information about its online activity.

2.2.2 Cookies. Cookies are small files that are stored on your device by your web browser. Cookies allow the websites to recognize whether you have visited before and may store user preferences and information. Our use of cookies is described in greater detail below.

2.2.3 Web Beacons (Tracking Pixels)

Website Beacons

Our websites and app may use small electronic files known as web beacons (also called tracking pixels or clear GIFs). When you visit a page, a web beacon may be loaded. Data captured includes: IP address, device and browser type, operating system, date and time of access, referring URL, and the specific page or feature viewed.

We use this data for these purposes only:

• Measuring aggregate site traffic and page-level performance
• Testing feature usage and page layouts
• Detecting fraud and abuse

This data may be shared with our web-analytics provider (Google Analytics) and, where applicable, our marketing platform (HubSpot).

Opt-out: You can limit website beacon tracking by: (a) using the cookie/consent banner on our site to decline non-essential tracking categories, (b) enabling "Do Not Track" in your browser, or (c) using a browser extension that blocks tracking pixels. Opting out is no more difficult than opting in.

Withdrawing consent: You may withdraw consent for analytics tracking at any time through the cookie preference centre (click "all settings" in our cookie banner). Withdrawal does not affect the lawfulness of prior processing.

Retention: Aggregated, de-identified analytics data is retained for up to 26 months. Raw session-level data is retained for no more than 14 months, after which it is de-identified or deleted.

Email Beacons

Transactional and marketing emails we send via HubSpot may contain a single-pixel image that records when the email is opened and whether links are clicked. This is linked to your email address and is used only to measure email-deliverability, evaluate campaign effectiveness, and improve the relevance of future communications.

Quebec residents: Email tracking is off by default for Quebec residents. We will not enable email-open tracking for Quebec addresses without express consent.

Opt-out: You can prevent email beacons from loading by: (a) configuring your email client to block remote images, or (b) updating your communication preferences in your Syzl account settings.

2.2.4 Third-Party Service Providers. A complete list of third parties that may receive data through the technologies described in §2.2.1–§2.2.3 is provided in §10.1.1.

3. Tracking Technologies and Cookies

3.1 We use cookies and similar tracking technologies to track the activity on our Website and store certain information about that activity. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze the Website and our Services. The technologies we use may include:

3.1.1 Cookies or Browser Cookies. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our Website may use cookies.

3.1.2 Session or Persistent Cookies. We use both persistent and session cookies for the purposes set out below:

3.1.2.1 "Session Cookies." Session Cookies are deleted as soon as you close your web browser. These cookies are essential to provide you with services available through the Website and to enable you to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without Session Cookies, the services that you have asked for cannot be provided, and we only use these cookies to provide you with those services.

3.1.2.2 "Persistent Cookies." Persistent Cookies remain on your personal computer or mobile device when you go offline. These cookies identify if users have accepted the use of cookies on the Website. Persistent Cookies allow us to remember choices you make when you use the Website, such as remembering your login details or language preference. The purpose of these cookies is to provide you with a more personal experience and to avoid you having to re-enter your preferences every time you use the Website. Persistent Cookies are administered by third parties and are used to track information about traffic to the Website and how users use the Website. The information gathered via Persistent Cookies may directly or indirectly identify you as an individual visitor. This is because the information collected is typically linked to a pseudonymous identifier associated with the device you use to access the Website. We may also use Persistent Cookies to test new pages, features or new functionality of the Website to see how our users react to them.

4. When We Collect Information and How We Use It

4.1 Syzl collects Personal Information whenever you do any of the following and uses it as described:

4.1.1 Creating an Account. To access certain features on the Platform, you may be required to create an account and provide your email address, username, and/or password or sign in with Google or other third-party logins. Your login information is used to create your account, and otherwise provide and administer the service you requested.

4.1.2 Administering Services. We collect Personal Information to provide Services to you, administer your account, and fulfill the terms of any agreement you have with us. Note that any information you submit may be used by us to evaluate you for qualification to match and use the Services.

4.1.3 Interacting with Live Chat and Online Support Services

Our platform includes a chat feature powered by HubSpot. HubSpot uses basic artificial intelligence (AI) to route your questions to relevant FAQs and knowledge-base articles. Your chat messages may be processed by HubSpot's servers. For more information, see the HubSpot Privacy Policy.

4.1.3.1 Your information is collected with the aim of operating the online support services and analyzing the use of those services. It may include your first and last name, phone number, email address, IP address, and other data communicated while using the support services. In addition, support services may collect browsing and usage data in the pages where they are installed, even if you do not actively use them. Live chat conversations may also be logged for quality assurance and training purposes.

4.1.3.2 By using the support services through our Platform, you explicitly consent to the collection and use of your information. You are solely responsible for the information you choose to submit while using the support services.

4.1.4 Communicating with Us. When you contact us with a comment, question or complaint, you may be asked for information that identifies you (such as your name, address and phone number) along with any additional information we need to help us answer your question or respond to your comment or complaint. We may also retain this information to assist you in the future and to improve our customer service, products, service offerings, events and promotions.

4.1.5 Providing Information to Third Parties with whom We Work. We may obtain and/or provide Personal Information from and/or to third parties with whom we use to facilitate the provision of our Services. We are not responsible for the privacy policies of the third parties with whom you may interact while using our Platform.

4.1.6 Making Payments. When required, we will collect your credit card or other payment information to provide you with the Payment Services (as defined in the Payment Terms). We use third-party payment service providers to process payments on our behalf and provide you with Payment Services. When utilizing the Payment Services you must review and agree to the policy of our payment processor(s) available at Stripe Privacy Policy, https://stripe.com/en-ca/privacy. We are not responsible for the terms, policies, actions, or practices of our payment processor(s). Please review the foregoing policies carefully.

4.1.7 Signing Up for Marketing Email and Other Communications. We may offer you the ability to sign up to receive marketing and promotional communications through the Platform, on third party websites, or through educational events and information sessions. In these circumstances, we collect certain Personal Information (such as first and last name, email address or phone number) to send you email and other communications containing updates, tips, and other content that may be of interest to you. You can opt out of receiving promotional email from us by following the opt-out or unsubscribe instructions provided in the email or text message, or by contacting us as set out below. Please note that you may continue to receive messages from us regarding your application or other transactional and account-related matters.

4.1.8 Analyzing Communications. In addition to the above noted reasons for collecting and using Personal Information, we may review, scan, or analyze communications that occur through the Platform for fraud prevention, security investigations, risk assessment, regulatory compliance, product development, research, analytics, enforcing our Terms of Service, and customer support purposes. We may also scan, review, or analyze messages to debug, improve, and expand product offerings. We may use automated or manual methods to analyze communications. We will not review, scan, or analyze your communications to send third-party marketing messages to you and we do not sell our reviews or analyses of these communications.

5. When Do We Share Information

5.1 We may share Personal Information as follows:

5.1.1 Account Management. The Personal Information you provide will give you access to different functionalities of the Services available to you. To support the management of your account, we may use your Personal Information to contact you by email, telephone, SMS, or other forms of electronic communication such as push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including security updates. We may use your Personal Information to manage and respond to your requests to us.

5.1.2 Special Offers. We may use your Personal Information to provide you with news, special offers, general information about events, and our Services, unless you have opted out of receiving such information.

5.1.3 With Third-Party Service Providers. We use third-party service providers to help us provide, manage, and improve the Services. These service providers may collect and/or use your Personal Information to assist us in achieving the purposes discussed in this Policy, as further described in Section 10. We do not exercise control over any other sites that may be linked to or accessed through the Platform or our Website. We have no responsibility for the privacy practices of third-parties, including any technology or software providers, which are used within the Services. You should review the policies of any third-party sites before providing Personal Information to these sites. We may also use non-Personal Information with third parties involved in research and development to improve our existing products and services and/or create new features to serve you better. See section 10 for more detail on our use of third-party service providers.

5.1.4 For Financing, Business Transfers, and Similar Transactions. As we develop our business, we might sell or buy businesses or assets. In the event of a sale, merger, reorganization, dissolution, or similar event relating to all or a portion of our business or assets, your information may be part of the transferred assets. This applies in cases of mergers, divestitures, restructuring, or bankruptcy proceedings, where Personal Information held by Syzl about our customers and users could be transferred to a buyer or other successor. We will take appropriate steps to comply with applicable privacy laws regarding the handling of your Personal Information during such transfers.

5.1.5 With Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include any parent companies, subsidiaries, joint venture partners or other companies that we control or that are under common control now or in the future.

5.1.6 With Business Partners. We may share your information with our business partners to offer you certain products, services or promotions.

5.1.7 With Other Users. When you share Personal Information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside. If you interact with other users or register through a third-party social media service, your contacts on the third-party social media service may see your name, profile, pictures and description of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you and view your profile.

5.1.8 De-identified or Aggregated Information. We may also share de-identified and aggregated information about the users of our Platform, such as by publishing a report on trends in the usage of the Services or sharing aggregated information about historical survey matching results.

5.1.9 For Legal Purposes. The information we process and store may be disclosed by us to legal authorities if we are required to do so by law. We may also disclose, at our discretion, some information we collect and store where we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing interference with the rights, property, or rules of the users, or someone who may cause or be at risk of imminent bodily harm, or someone who may be violating the Terms of Service. In such cases, the user in question will be informed.

5.1.10 With Your Consent. We may disclose your Personal Information for any other purpose with your consent.

5.2 If you have signed up for marketing emails or communications, and do not want us to market to you, and/or to pass on to third parties for marketing purposes, please contact us through the various communication channels available, as listed under the "Contact" section on the Website (https://www.syzl.io/contact). You will be able to unsubscribe from any marketing emails sent to you by Syzl using a link provided in such emails. We do not sell your personal data.

6. How We Store Personal Information

6.1 Data Storage. All information you provide to us is stored as data on the servers of our cloud service providers. We take reasonable steps to ensure our service providers adhere to the security standards we apply to your Personal Information.

6.1.2 Our servers are predominantly located in Canada. Many of our service providers are also located outside of Canada. For Users located in Quebec, data may be stored outside of Quebec. Our data may be transferred or processed to or in Canada (primarily Ontario) and the United States (AWS regions ca-central-1 / us-east-2). While we use appropriate safeguards to keep your information secure, the laws in other places may differ from those in Canada and authorities in those jurisdictions may access your information in accordance with their local laws.

6.2 Retention. We will only retain your Personal Information while it is needed to fulfill the intended purpose for which it was collected or as otherwise permitted or required by law or contract (which may extend beyond the termination of our relationship with you). We will retain your Personal Information for as long as you are using our Platform or as long as we have a valid business purpose to do so and, thereafter, for no longer than is required or permitted by law. We may retain certain data as necessary for: i) legitimate business purposes, such as auditing, account recovery; ii) if required by applicable federal, state, provincial or other laws; iii) to prevent fraud or future abuse; or iv) by contract with a partner and/or institution. All payment information will be deleted three months after the processing unless we are required by law to keep it longer.

6.3 Removal. If you request that your Personal Information be removed from our databases and/or systems, it may not be possible to completely delete all your personal data due to technological and legal constraints. However, we will take such steps as are commercially reasonable to securely destroy the information or to ensure that the information is de-identified and/or anonymized as necessary.

7. How We Protect Your Information

7.1 Syzl takes the safeguarding of your information very seriously. We have implemented commercially reasonable administrative, technical and physical safeguards to protect against unauthorized access, use, modification and disclosure of Personal Information in our custody and control. The transmission of information via the internet is not completely secure. While we implement commercially reasonable security measures to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. The use of our Platform carries inherent risks that we cannot completely eliminate.

7.2 Security Measures. We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your Personal Information. Data collected through our Platform is maintained on our servers or those of our service providers and is accessible to authorized employees, representatives and agents who require access in connection with their job responsibilities.

7.3 Password Protection. Your online access to certain Personal Information of yours is protected with a password that you select. Do not disclose your password to anyone. We will never ask you for your password in any unsolicited communication (such as letters, phone calls, email or SMS messages).

8. Cross-Border Transfer of Your Personal Information

Syzl Inc. is headquartered in Ontario, Canada. Some of our third-party service providers are located in, or process data in, the United States. Categories of personal information transferred to U.S.-based providers include: account identifiers, usage data, communication metadata, and (where applicable) payment-related data.

Before transferring personal information outside Canada, Syzl Inc. enters into contractual arrangements requiring the recipient to provide protection comparable to that required under PIPEDA. These arrangements include data-processing agreements with standard contractual clauses or equivalent safeguards.

Syzl Inc. remains accountable for personal information transferred to third parties for processing on our behalf. Questions about cross-border transfer safeguards? Contact us at help@syzl.io.

8.1 Your Personal Information is processed at our operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

8.2 We will take commercially reasonable steps to ensure Personal Information is treated securely and in accordance with this Privacy Policy and to ensure no transfer of data will take place to an organization or a country unless there are adequate controls in place.

9. Your Rights Relating to Personal Information

9.1 You have certain rights relating to your Personal Information, subject to local data protection laws. Depending on the applicable laws, these rights may include the right to:

9.1.1 The right to confirm the existence of processing and to request access. You may have the right to obtain confirmation as to whether your Personal Information has been processed, and, if that is the case, to request access to your Personal Information. Depending on where you are located, you may also have the right to information about public and private entities to which we have disclosed your data.

9.1.2 The right to object to processing. You may have the right to object to the processing of your Personal Information under certain conditions. The right to object may apply if we collect and process your Personal Information through automated decision making to better understand your interests in our products and services or for direct marketing. If you have this right and exercise it, your Personal Information will no longer be processed by us for such purposes. Such a right to object may not exist if the processing of your Personal Information is necessary to take steps prior to entering into a contract or to performing a contract already executed.

9.1.3 The right to correct incomplete, inaccurate, or out-of-date information. You may have the right to request that we correct any Personal Information about you that is inaccurate. Depending on the purpose of the processing, you have the right to request that we complete the Personal Information we hold about you where you believe it is incomplete, including by means of providing a supplementary statement.

9.1.4 The right to portability. You may have the right to request that we transfer the Personal Information we have collected about you to another organization, or directly to you, in a structured, commonly used, and machine-readable format, under certain conditions.

9.1.5 The right to request anonymization, blocking, or deletion. You have the right to request the deletion of your Personal Information, subject to certain conditions and limitations under the law.

9.1.6 The right to revoke consent. Where we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time with future effect. Depending on where you are located, you may have the right to request deletion of personal data that was processed based on your consent and the right to know the consequences of revoking your consent. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.

9.1.7 The right to opt-out of the sale or sharing of Personal Information. We do not sell your Personal Information in exchange for monetary consideration. In the event we disclose your Personal Information to third parties for their marketing purposes, you may have the right to opt out of that disclosure. You may also have the right to request further information about the disclosure of your Personal Information for third parties' marketing purposes, such as the contact information of those parties, once per calendar year.

9.1.8 The right to limit the use and disclosure of sensitive data. We will only use sensitive or special Personal Information as needed for the purposes for which it was collected or with your consent. We do not currently process sensitive Personal Information for purposes that may be limited under applicable law. If this changes, we will notify you, and you may have the right to restrict such additional uses.

9.1.9 The right to non-discrimination for exercising a privacy right. We will not discriminate against you for exercising any rights.

10. Third-Party Links, Websites, Apps, and Communication Technologies

10.1 Our Platform includes links to other websites that Syzl does not own or operate, including the websites of third-party partners. Links to our Website may be featured on third-party websites on which we advertise. Except as provided herein, we will not provide any of your Personal Information to these third parties without your consent. We provide links to third-party websites as a convenience to the user. These links are not intended as an endorsement of or referral to the linked websites. The linked websites have separate and independent privacy statements, notices and terms of use, which we recommend you read carefully. We do not have any control over such websites, and therefore we have no responsibility or liability for the manner in which the organizations that operate such linked websites may collect, use or disclose, secure and otherwise treat your personal information.

10.1.1 We use the following third-party service providers:

Certn — Identity verification (background checks). Privacy policy

Stripe — Payment processing. Privacy policy

Google Analytics — Website and app analytics. Privacy policy

HubSpot — Email communications, chat (with AI routing), forms. Privacy policy

BetterStack — Application logging and error monitoring. Privacy policy

OneSignal — Push notifications. Privacy policy

Amazon Web Services (AWS) — Cloud infrastructure (Canada: ca-central-1, US: us-east-2). Privacy policy

Webflow — Marketing website hosting (syzl.io); may receive form submission data. Privacy policy

Google Firebase — Cloud storage and hosting infrastructure. Privacy policy

Plaid — Identity verification and financial data verification. Privacy policy

Strike Graph — Security and compliance management. Privacy policy

10.2 In addition to the third-party service providers listed in §10.1.1, Syzl Inc. may share personal information with the following categories of recipients in the ordinary course of business:

• Professional advisors bound by confidentiality obligations, including accountants, consultants, lawyers, and tax advisors;
• Insurance and financing partners where necessary to support our operations or in connection with claims, audits, or financing arrangements;
• Successors-in-interest in the event of a merger, acquisition, restructuring, or asset transfer (see §5.1.4).

If Syzl engages new categories of service providers — such as advertising networks, additional analytics providers, or research partners — we will update §10.1.1 to name them.

10.3 We may offer you the opportunity to engage with our content on or through third-party social networking websites, plug-ins, and applications. When you engage with our content on or through third-party social networking websites, plug-ins and applications, you may allow us to have access to certain information associated with your social media account (e.g., name, username, email address, profile picture) to deliver the content or as part of the operation of the website, plug-in or application. When you provide information from your social media account, we may use this information to personalize your experience on the Website and on the third-party social networking websites, plug-ins and applications, and to provide you with other products or services you may request.

11. General

11.1 Compliance. We have taken commercially reasonable steps to ensure your data is protected in accordance with the Personal Information Protection and Electronic Documents Act ("PIPEDA"), including leveraging cyber security services, firewalls, and other security measures embedded within our third-party service providers. From time to time, your Personal Information may be accessed by Syzl-authorized services or staff in another country where Syzl or authorized third parties operate, such as the United States. We implement measures to protect your information and to ensure compliance with applicable laws.

11.2 Governing Law. All issues and questions concerning the application, construction, validity, interpretation and enforcement of this Privacy Policy shall be governed by and construed in accordance with the laws of the Province of Ontario, and the federal laws of Canada applicable therein.

11.3 Changes to Our Privacy Policy. This Policy may change from time to time. Any changes in the future will be posted on our Website and, where appropriate, we will notify you by email. We strongly encourage you to check back frequently to see any updates or changes to our Policy. We will not materially reduce your rights under this Policy without taking steps to bring such changes to your attention.

11.4 Children's Privacy

The Syzl platform is not directed at individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you are under 16, please do not use the Services or provide any information to us.

Quebec residents under 14: In accordance with Quebec Law 25, we obtain the consent of a parent or guardian before collecting personal information from children under 14 years of age.

If you are a parent or guardian and believe your child under 16 has provided personal information to us without your consent, please contact us at help@syzl.io and we will delete that information promptly.

11.5 Inquiries. If you use our Platform and would like to update your personal data, please log into your account in order to update certain information, or contact us through the contact information below. From time to time, we may email you or send you with special offers; you may opt-out of those offers by using a link provided in the email, or by contacting us as noted below.

We will endeavour to delete your Personal Information from our databases upon your written request, subject to this Policy, the Terms of Service, and Payment Terms.

Please contact us if:

• You have any questions or comments about this Policy;
• You wish to access, update, and/or correct inaccuracies in your personal data and are unable to do it yourself;
• You have a question or complaint about the manner in which we or our service providers treat your personal data; or
• You have a question or concern regarding the application, construction, validity, interpretation and enforcement of this Privacy Policy.

You may contact us by email at help@syzl.io.

12. Additional Rights for Quebec Residents

This section applies in addition to the rest of this policy for residents of Quebec, Canada.

12.1 Privacy Officer

In accordance with Quebec Law 25 (An Act Respecting the Protection of Personal Information in the Private Sector), Syzl Inc. has designated the following Privacy Officer:

Adrian Savin
Email: help@syzl.io

12.2 Technologies That Identify, Locate, or Profile You

In accordance with §8.1 of Quebec Law 25, we disclose that our website and app use the following technologies that may identify you, determine your location, or create profiles: analytics cookies, web beacons (described in §2.2.3), and HubSpot's AI routing for chat. These non-essential technologies are disabled by default for Quebec residents and are only activated with your express consent through our cookie preference centre.

12.3 Automated Decision-Making

The Syzl marketplace does not make decisions about you based solely on automated processing that produce legal or similarly significant effects. All significant decisions (e.g., account suspension) involve human review.

12.4 Right to Data Portability

Quebec residents may request a copy of their personal information in a structured, commonly used technological format. To request a data export, contact help@syzl.io.

12.5 Biometric Data

We do not collect biometric data (fingerprints, facial geometry, etc.) from any user.

13. U.S. State Privacy Rights

This section applies to residents of California, Colorado, Virginia, Connecticut, and Utah.

13.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories: identifiers; commercial information; internet or other network activity; geolocation data; and inferences drawn from the above.

13.2 Your Rights

Depending on your state, you may have the right to:

• Know what personal information we have collected, used, or disclosed about you
• Delete personal information we hold about you (subject to exceptions)
• Correct inaccurate personal information
• Opt out of the sale or sharing of your personal information
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact help@syzl.io. We will respond within 45 days (extendable by a further 45 days with notice).

13.3 Do Not Sell or Share

We do not sell personal information to third parties. We do not share personal information for cross-context behavioural advertising.

14. Data Breach Notification

In the event of a privacy breach posing a real risk of significant harm, Syzl Inc. will notify the Office of the Privacy Commissioner of Canada as soon as feasible and will notify affected individuals directly. For Quebec residents, we will additionally notify the Commission d'accès à l'information du Québec in accordance with Law 25 timelines. We maintain a record of all privacy breaches for a minimum of 24 months.