Privacy Policy - Legal Infra

1. Introduction

Legal Infra's services are intended for use by business customers, but we may process information about you when providing our services and operating our business. This Privacy Policy (the "Policy") provides a comprehensive description of how Legal Infra collects, uses, and discloses information about you ("Personal Information"), as well as your rights and choices regarding such Personal Information. For purposes of this Policy, "Legal Infra", "we", "our", and "us" refers to Sysfora Technologies Corp. operating as Legal Infra and its affiliates, and "you" or "your" refers to the individual interacting with us.

Some regions provide additional rights by law. For region-specific terms, please see the following sections below:

"Additional Disclosures for Nevada Residents"
"Additional Disclosures for California Residents"
"Additional Disclosures for Virginia Residents"
"Additional Disclosures for Data Subjects in the European Economic Area, Switzerland, and United Kingdom"
"Additional Disclosures for Individuals Located in Canada"

For our contact details, please visit the "Contact Us" section below.

2. Applicability of this Policy

This Policy applies to (a) our AI deployment and infrastructure services, including the associated technology we provide for access and use of those services (e.g., www.legalinfra.com) (the "Services"), (b) www.legalinfra.com (the "Website"), and (c) our emails, advertisements and any other location, online or offline, where you interact with our business (e.g., conferences or third party social media and networking sites) (collectively, with the Services and Website, the "Business").

Data protection laws distinguish between entities that control the purposes and means of processing information and entities that process information on behalf of other entities. The Legal Infra Service Agreement or another written agreement (the "Agreement"), along with our terms and conditions and those of our partners and vendors, governs our provision of Services to a business customer (a "Company"). When Legal Infra processes Personal Information on behalf of a Company to provide contracted Services, we do so in accordance with the terms of the Agreement and the Customer's instructions, not this Policy. If you wish to exercise your rights regarding Personal Information we are processing on behalf of a Company, you should contact the applicable Company for assistance, and Legal Infra may forward communications we receive from you to the Company for resolution. We are not responsible for the privacy practices of our business customers, which may differ from those in our Policy.

Moreover, this Policy does not apply to any third-party applications or services that are used in connection with our Services, or any other products, services or accounts provided by other entities under their own terms of service and privacy policy (collectively, "Third-Party Services").

If you do not agree with this Policy, then do not access or use the Services, Website or any other aspect of our Business.

3. Information Legal Infra Processes

Legal Infra will process information continuously through the operation of our Services and Websites, and through other interactions with our Business, as described in the Agreement. If you provide us with information about another individual, by acknowledging or agreeing to this Policy, you represent and warrant that you have the authority to do so and have delivered any required notices and obtained all necessary rights and consents to provide such information to us for processing in accordance with this Policy. If you believe information has been provided to us improperly, please notify us in accordance with the "Contact Us" section below.

A. Information Provided to Legal Infra

We receive information when you submit it to our Business:

Contact Information, including your first name, last name, email address, phone number, employer, job title and address.
Communications, including when contacting sales or support, asking a question, providing product feedback or corresponding with our business teams.
Content, including any documentation, files or information you provide, which may include information about you or your business.
Third-Party Information, including information you provide about any co-workers, contractors, vendors or potential referrals, such as their Contact Information.
Job Applicant Data, including your employment and education history, transcripts, writing samples, and references as necessary to consider your job application for open positions.

B. Information Generated and Collected by Legal Infra

We generate, collect and derive information when you use or interact with our Services, Website and other products and services provided or used by our Business:

Use Data, including information and metadata about the pages or content you visit, the features you interact with, how much time you spend on a particular Website or using the Services, login and crash data, Third-Party Services you elect to connect to or use with the Services, your preferences or selections, the time of day you browse, and your referring and exiting pages.
Device Data, including information about the type of device or browser you use, your device's operating software and settings, your internet service provider, and device identifiers, such as IP address and advertising identifier.
Location Data, including an approximate geolocation derived from your IP address or business information.

C. Information Collected by Legal Infra from Other Sources

We also collect and receive information from other sources:

Identity Verification, Fraud and Compliance Monitoring, and Business Information Providers, which may help us supplement our understanding of your business and its personnel, maintain security, prevent fraud and comply with regulation and contractual obligations.
Service Providers, which help us operate our Business.
Social Networks and Advertising Providers, including to help us identify or enrich our understanding of prospective customers, and to serve and measure advertising.
Joint Marketing, Business Partnership, Referrals, and Rewards Partners that we engage for joint marketing activities and our referrals and rewards programs.
Other Data Suppliers that provide information about industries, business trends, organizations and other matters related to our business.
Publicly-Available Sources, including information in the public domain that helps us identify potential customers and partners or conduct due diligence and risk management for potential and existing customers.

4. How Legal Infra Uses Information

We use information for business and commercial purposes in accordance with the practices described in this Policy. In addition, Legal Infra uses information to operate our Services, Website, and Business as follows:

Providing and Maintaining Our Services, Website and Business. To provide, operate and manage our Services, Website and other parts of our Business, including to perform customer validation and enable you to use our Services, prevent or address technical issues and disruptions, and analyze and monitor usage and activities.
Communicating with You. To send you notices, updates, security alerts, information regarding changes to our policies and terms, and support administrative messages.
Security and Fraud Prevention. To maintain the safety and security of our Business and manage risk, including identifying and troubleshooting any issues with the Services, investigating suspicious activity, detecting and preventing potentially fraudulent or unauthorized transactions and breaches of policies and terms, and threats of harm, including in an automated fashion.
Legal Obligations and Enforcing Our Rights. To fulfill legal, regulatory and contractual obligations, including when cooperating with government authorities, courts and regulators in accordance with applicable law, maintaining records to demonstrate compliance with applicable law and regulation, protecting our legal rights and pursuing remedies available to us.
Developing and Improving Our Business. To make the Services and other aspects of our Business as useful as possible for customers, including by improving and expanding our products and operations.
Auditing and Research. To conduct internal reporting, auditing, and research, including focus groups and surveys.
Marketing and Advertising. To develop, send and measure advertising, direct marketing, and communications about our products, offers, promotions, rewards, events, and Services.
Generating Aggregate or De-identified Information. To develop de-identified information by removing or masking information that could be used to identify you and by aggregating or combining information with other information.
At Your Direction. To fulfill any other purpose at your direction, including as expressed through your or your Company's use of Services functionality.
With Notice to You and Your Consent. We may otherwise use the information we collect after providing notice to you and obtaining your consent.

5. Disclosure of Information by Legal Infra

We disclose information we collect in accordance with the practices described in this Privacy Policy. The categories of parties to whom we disclose information are:

Service Providers. We disclose information to service providers that process information on our behalf.
Affiliates. We disclose information to our affiliates and related entities.
Business Customers. We disclose information to our business customers to provide Services on their behalf.
Connected Services. We disclose information to Third-Party Services and their providers if you or your Company use Third-Party Services in connection with the Services.
Identity Verification and Customer Validation Services. We disclose information as necessary to verify your identity and perform other compliance functions.
Marketing and Advertising. We disclose information to vendors, platforms, analytics providers and other parties for marketing and advertising related purposes.
Mergers and Acquisition. We disclose information in connection with, or during negotiations of, any proposed or actual financing, merger, purchase, sale or any other type of equity or debt transaction or acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business.
Security, Fraud Detection and Compelled Disclosure. We disclose information to comply with the law, regulations, payment network rules, or legal process, investigate suspicious or potentially fraudulent activity, and where required in response to lawful requests by regulators, law enforcement.
Referrals and Joint Marketing. We disclose information about you and your Company's account to our partners in connection with facilitating referral partnerships or engaging in joint marketing activities.
At Your Request. We disclose information at your request or direction.
With Notice to You and Your Consent. We may otherwise disclose information after providing notice to you and obtaining your consent.

6. Analytics and Interest-Based Advertising

Where permitted under laws applicable to our Business, we use analytics services to help us understand how users access and use the Website and other aspects of our Business. In addition, we work with agencies, advertisers, ad networks, and other technology services to place advertisements on our behalf on other websites and services.

As part of this process, we may use tracking technologies (including incorporating them into our Website and emails), as well as incorporating into our ads displayed on other websites and services. Some of these tracking technologies may track your activities across time and services for purposes of associating the different devices you use, and delivering relevant ads and/or other content to you ("Interest-based Advertising").

7. Data Transfer

Our Business is operated from Canada and other jurisdictions. Any of your Personal Information we collect may be transferred to, processed, used, handled, and stored in Canada and other jurisdictions. Data protection laws in Canada and other jurisdictions may differ from those of your country of residence. We take measures to comply with applicable data protection laws when we transfer Personal Information internationally.

8. Additional Important Information

Security. We use organizational, technical, and administrative measures designed to protect your Personal Information from loss, theft, misuse, and unauthorized access, disclosure, alteration and destruction. However, no information security program or transfer via the internet is entirely secure so we cannot guarantee the security of your Personal Information.

Use by Minors. We do not direct any of our Services or other aspects of our Business to children. We do not knowingly collect personal information from children under 13.

Retention. Legal Infra collects and stores Personal Information for the purposes outlined in this Policy. We retain Personal Information for as long as we continue to have a business or operational purpose to retain it, and may continue to retain and use Personal Information as necessary to comply with (or demonstrate compliance with) our legal or regulatory obligations, resolve disputes, prevent fraud, and enforce our rights.

Changes to this Privacy Policy. We reserve the right to change and reissue this Policy at any time by posting an updated version. Any privacy notice is effective upon posting or when it is provided to you. We encourage you regularly to review this Policy to ensure that you are always aware of what Personal Information we collect, how we use and otherwise process it and under what circumstances we will disclose it to third parties.

9. Your Rights and Choices

Region-Specific Rights. In addition to these rights and choices, you may have additional rights based on your region. For region-specific terms, please see the bottom of this Policy.

Tracking Technology Choices.

Cookies and Pixels. Most browsers and devices accept cookies by default. You can instruct your browser or device, by changing its settings, to decline or delete cookies. If you use multiple browsers or devices, you may need to instruct each separately. Your ability to limit cookies is subject to your settings and limitations.
Do Not Track. Your browser settings may allow you to automatically transmit a "Do Not Track" signal to online services you visit. Note, however, there is no industry consensus as to what site and app operators should do with regard to these signals. Accordingly, unless and until the law is interpreted to require us to do so, we do not monitor or take action with respect to "Do Not Track" signals.

Communications.

E-mails. You can opt out of receiving promotional emails from us at any time by following the instructions as provided in emails to click on the unsubscribe link. Please note that you cannot opt-out of non-promotional emails, such as those about transactions, servicing, or our ongoing business relations.
Text or SMS Messages. If you have opted in to receiving text or SMS messages related to your use of the Services, you can opt-out at any time by texting "STOP" to the short code.

10. Contact Us

Where applicable, to exercise your rights regarding your Personal Information, please contact us at team@legalinfra.com. If you have any more general questions about this Policy, our data practices, or our compliance with applicable law, please contact us:

By email: team@legalinfra.com

By mail: Legal Infra
811 - 300 Regina St N
Waterloo, ON, N2J 4H2
Canada

If you experience any difficulties accessing the information in this Privacy Policy, please contact us at team@legalinfra.com.

11. Additional Disclosures for Nevada Residents

Nevada law (NRS 603A.340) requires each business to establish a designated request address where Nevada consumers may submit requests directing the business not to sell certain kinds of personal information that the business has collected or will collect about the consumer. A sale under Nevada law is the exchange of personal information for monetary consideration by the business to a third party for the third party to license or sell the personal information to other third parties. If you are a Nevada consumer and wish to submit a request relating to our compliance with Nevada law, please refer to the "Contact Us" section above.

12. Additional Disclosures for California Residents

These additional disclosures apply only to California residents and only to the extent applicable.

Notice of Collection.

The California Consumer Privacy Act as amended by the California Privacy Rights Act ("CPRA") provides additional rights and requires businesses collecting or disclosing personal information to provide notices and means to exercise rights. In the past 12 months, we have collected the following categories of personal information enumerated in the CPRA:

Identifiers, including name, postal address, email address, and online identifiers (such as IP address).
Customer records, including phone number, billing address, bank account and credit or debit card information.
Characteristics of protected classifications under California or federal law, including gender.
Commercial or transaction information, including records of products or services purchased, obtained, or considered.
Internet activity, including browsing history, search history, and interactions with a website, email, application, or advertisement.
Approximate location data.
Employment and education information.
Inferences drawn from the above information about your predicted characteristics and preferences.

Right to Know, Correct and Delete.

You have the right to know certain details about our data practices. In particular, you may request the following from us:

The categories of personal information we have collected about you;
The categories of sources from which the personal information was collected;
The categories of personal information about you we disclosed for a business purpose or sold or shared;
The categories of persons to whom the personal information was disclosed for a business purpose or sold or shared;
The business or commercial purpose for collecting or selling or sharing the personal information; and
The specific pieces of personal information we have collected about you.

13. Additional Disclosures for Virginia Residents

Virginia provides additional rights to Virginia residents through the Virginia Consumer Data Protection Act ("VCDPA"). This section addresses those rights and applies only to Virginia residents acting in an individual or household context.

You have the following rights under the VCDPA:

To confirm whether or not we are processing your personal data
To access your personal data
To correct inaccuracies in your personal data
To delete your personal data
To obtain a copy of your personal data that you previously provided to us in a portable and readily usable format
To opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you

14. Additional Disclosures for Data Subjects in the European Economic Area, Switzerland and the United Kingdom

Roles. Legal Infra may process personal data in accordance with the instructions of or on behalf of a business customer, including when providing Services to a Company under an Agreement. In this context, Legal Infra acts as a processor and the business customer acts as a controller. Legal Infra may also act as a controller when directly determining the processing of personal data in other Business contexts set out in this Policy, like complying with regulatory obligations applicable to our Business.

Lawful Basis for Processing. Data protection laws in Europe require a "lawful basis" for processing personal data. Our lawful bases include where: (a) you have given consent to the processing for one or more specific purposes, either to us or to our service providers, partners, or business customers; (b) processing is necessary for the performance of a contract; (c) processing is necessary for compliance with a legal obligation; or (d) processing is necessary for the purposes of the legitimate interests pursued by us or a third party, and your interests and fundamental rights and freedoms do not override those interests.

15. Additional Disclosures for Individuals Located in Canada

Your Rights and Choices. Subject to limited exceptions under applicable Canadian law, you may have the right to access, update, correct inaccuracies in, and withdraw consent (subject to reasonable prior notice and applicable legal and contractual restrictions) to the collection, use and disclosure of your personal information.

Governance Policies and Practices. We are committed to protecting personal information and have implemented policies and practices that govern our treatment of personal information, including:

policies and procedures regarding the protection, retention and disposition of personal information, including with respect to the implementation of security safeguards designed to protect personal information against loss or theft and unauthorized access, disclosure, copying, use, and modification;
a framework that sets out roles and responsibilities of our personnel in connection with the handling of information in our possession and control;
processes for responding to data subject requests and complaints in a timely and effective manner; and
employee data protection training and awareness.

Contact Information. If you have any questions or comments about this Privacy Policy or the manner in which we or our service providers (including our service providers outside Canada) treat your personal information, to withdraw your consent, or to request access to or correction of your personal information, please contact us at team@legalinfra.com.