Privacy Notice

1. About This Privacy Notice

estats Technology Inc. ("estats," "we," "us," or "our") knows that you care about how your personal information is used and shared — and we take your privacy seriously. This Privacy Notice covers estats' treatment of personally identifiable information ("Personal Information") and content you submit, including documents and e-signatures ("Your Data"), when you access or use the estats platform and related services (together, the "Service").

By using the estats.ca website or any of our applications, you acknowledge the practices and policies described in this Privacy Notice and consent that we will collect, use, and share your information as set forth below and in our Terms of Use.

estats is a Canadian company. All personal information we collect is stored on servers located in Canada, and we process it in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law.

2. Information We Collect

Personal Information

The types of Personal Information we may collect include, among other things:

• Contact information (e.g., name, email address, telephone number, and physical address)
• Information about your organization, job function, and role
• Account credentials (email address; passwords are stored as salted hashes — we never see plaintext passwords)
• Billing information processed securely by Stripe (we do not store raw card numbers)
• Feedback, support requests, and communications you send us
• Other information specific to your use of the Service

You are not required to provide any of this information, but if you choose not to provide certain information, we may not be able to provide the requested service or complete your transaction.

Usage Information

We automatically collect certain information when you use the Service, including:

• Internet Protocol (IP) address
• Browser language and type
• Operating system and device type
• Pages visited, features used, and time spent
• HTTP request headers

Document and E-Signature Data

When you use estats E-Sign, we collect and store the content of documents you upload, e-signatures captured, audit-trail data (IP address, timestamp, device fingerprint), and the identity information of signers.

3. How We Collect Information

Information You Provide

By registering for and using the Service, you authorize estats to collect and store the following types of information:

• Information you submit during registration, such as your name and email address.
• Content you upload, such as documents, property data, images, and other materials ("User Submissions").
• Payment-related information provided at checkout. Such information is processed solely by our payment processor (Stripe) for billing purposes and is not stored on estats servers.

You acknowledge and agree that you will not (i) provide us with any information that you do not have the right to provide, or (ii) share, via the Service, any information that is confidential and that you are not authorized to share with your intended recipients.

Automatically Collected Information

We may automatically receive and record certain anonymous types of information whenever you interact with the Service. Such information may include your IP address, browser type, and the pages or features you access. This information helps us analyze trends, administer the Service, and improve your experience. This information is collected in aggregate form and is not in a manner that would identify you personally.

Cookies

estats uses a minimal set of functional cookies to operate the Service:

We do not set advertising, tracking, or analytics cookies. We do not use Facebook Pixel, Google Analytics, Microsoft Clarity, FullStory, or similar third-party trackers on our platform.

You may disable cookies in your browser settings; however, doing so will prevent you from logging in to the Service. Disabling cookies does not prevent access to our public pages.

4. How We Use Your Information

• Web service operation and improvement: To operate and improve the platform and complete transactions.
• Communications: To send you transactional emails (account verification, signing invitations, receipts) and, with your consent, service updates and marketing.
• Security and fraud prevention: To detect and prevent unauthorized access, abuse, or illegal activity.
• Employment-related activities: As needed in connection with staffing and operations.
• Legal compliance: To comply with applicable law, court orders, or regulatory requirements.
• With your consent: For any other purpose we describe to you when you provide the information.

5. Will We Share Your Information?

To the limited extent we collect information — we neither rent nor sell your information to anyone. We share your information only as described below.

Within Your Organization

Certain content you submit may be shared with other members of your organization on the estats platform, as directed by your organization's primary administrator.

Service Providers (Agents)

We employ other companies and people to perform tasks on our behalf (e.g., payment processing by Stripe, transactional email delivery). Your information may be accessed by these partners solely to provide services to us. Our agents do not have any right to use information we share with them beyond what is necessary to assist us.

Business Transfers

If estats undergoes a merger or is acquired, then all or substantially all of its assets may be transferred to the acquirer, and information covered by this notice is such an asset. Information will remain protected by this notice in accordance with its terms.

Protection of estats and Others

We may release information when we believe in good faith that release is necessary to comply with the law; enforce or apply our conditions of use and other agreements; or protect the rights, property, or safety of estats, our employees, our users, or others.

With Your Consent

Except as set forth above, you will be notified when your information may be shared with third parties, and you will be able to prevent the sharing of this information.

6. Managing Your Personal Information

Editing Your Profile

If you are a registered user of the Service, we provide you with tools to access or modify your information from your account settings page.

Deleting Your Account

You can request deletion of your account by contacting us at privacy@estats.ca. Subject to the limitations below, when you request us to delete your account, your data will be deleted from our active systems and access to your account will be disabled.

Limitations on Deletion

Even after you delete your account, we may retain certain information to comply with our legal obligations, prevent fraud, resolve disputes, and enforce our agreements. E-signature audit trails may be retained for the period required by applicable law. We may also retain aggregated, non-personally-identifiable data derived from your information indefinitely, but not in a manner that would identify you personally. We may also retain certain information to prevent identity theft and other misconduct, even if deletion has been requested.

7. Electronic Signature Records

When you use estats E-Sign, we generate and store a tamper-evident audit certificate for every signed document. This certificate includes: the names and email addresses of signers, timestamps, IP addresses, device identifiers, and a cryptographic hash of the final document. These records may be required by law (BC Electronic Transactions Act) and are retained for seven (7) years from the date of signing. Signed documents and their audit trails are accessible to the document sender and all parties who signed.

8. How We Protect Your Information

estats takes certain precautions to protect your information and to limit the risk that it will be accessed without authorization, including use of certain industry-standard technologies and practices:

• TLS 1.2+ encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Hashed and salted passwords — we never store plaintext passwords
• Role-based access controls limiting who can view your data
• Canadian data residency — your data does not leave Canada
• Regular security reviews and dependency updates
• Payment processing by Stripe (PCI DSS Level 1 certified)

That said, we cannot guarantee the security of your information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time. No security system is perfect. If we learn of a security breach, we will notify affected users and the Office of the Privacy Commissioner of Canada (OPC) as required by PIPEDA.

In addition to the security measures referenced above, your account is protected by a password for your privacy and security. You must prevent unauthorized access to your account and information by selecting and protecting your password appropriately and limiting access to your computer or device and browser by signing off after you have finished accessing your account.

For security questions or to receive a written notice of a security breach, please contact us at security@estats.ca.

9. Data Retention

We retain personal information for as long as necessary to provide the Service and fulfill the purposes described in this notice, unless a longer retention period is required by law.

10. Your Rights Under PIPEDA

As a Canadian resident, you have the following rights under PIPEDA (and applicable provincial legislation):

• Right of access: You may request access to the personal information we hold about you. We will provide it within 30 days of a verified written request.
• Right of correction: You may request that we correct inaccurate or incomplete personal information.
• Right to withdraw consent: You may withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Note that withdrawing consent may affect our ability to provide the Service.
• Right to complain: You may lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

To exercise any of the above rights, please contact our Privacy Officer at privacy@estats.ca. We will respond within 30 days.

11. Cookies

We use only the functional cookies described in Section 3 above. We do not use third-party advertising cookies, tracking pixels, or session-replay tools.

Most Internet browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies or to notify you when a cookie is being placed on your device. You can obtain up-to-date information about blocking and deleting cookies via your browser's help documentation. Please note that this Cookie Policy does not apply to, and we are not responsible for, the privacy practices of third-party websites that may be linked from our Service.

12. Canadian Residents — Additional Provisions

In addition to the rights described above, Canadian residents should note the following provisions related to compliance with:

• Canada's Anti-Spam Legislation (CASL)
• The federal Personal Information Protection and Electronic Documents Act (PIPEDA)
• BC's Personal Information Protection Act (PIPA) where applicable
• Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25) where applicable

Because the purpose of our communications includes your interest in our services, our communication with you will continue until you revoke your consent or opt-out.

13. Changes to This Privacy Notice

We reserve the right to change this Privacy Notice at any time. If we change this Notice, or some part of it, the changes will become effective immediately upon posting of the updated Notice on this web page. We will notify registered users of material changes by email at least 30 days in advance. Your continued use of the Service following our publication of any changes to this Privacy Notice will expressly reaffirm your acceptance of the updated terms. Should you wish to opt out of such future changes, you must communicate your request to us in writing at privacy@estats.ca.

Use of information we collect now is subject to the Privacy Notice in effect at the time such information is provided to, or collected by, us.

14. Contacting Us

If you have any questions or concerns regarding our privacy practices, please send us a detailed message at:

You may also contact the Office of the Privacy Commissioner of Canada (OPC) if you believe your rights under PIPEDA have not been respected: