Privacy Policy

Meddo Technologies Incorporated ("Meddo", "we","us" or "our") takes steps intended to meet privacy principles and requirements with respect to personal information under applicable Canadian privacy legislation. The purpose of this statement is to inform our customers and other individuals we deal with ("you" or "your") how we collect, use, disclose and protect your personal information. Personal information is information about an identifiable individual, as more particularly described under applicable privacy legislation. This statement applies to our collection, use and disclosure of personal information in Canada. This statement does not apply to information about our employees1 or to information that is not personal information.

Personal Information We Collect

Meddo and its agents and representatives collect personal information in a number of circumstances in the course of marketing and selling activities, account provision and maintenance activities, providing customer support and soliciting product feedback. Personal information we collect includes:

• name, address,telephone number, and other contact information;

• account information, including the name of the organization you are part of, credit backlog, billing information and transaction history;

• utilization information, login history, user activation and deactivation information;

• and such other information we may collect with your consent or as permitted or required by law.

Use of Personal Information

Meddo generally uses personal information for the following purposes:

• providing support, billing and account management services;

• improving the product and services, and improving algorithms used in the product or services;

• managing, administering, collecting or otherwise enforcing accounts;

• maintaining business records for reasonable periods, and generally managing and administering our business including defending and bringing legal actions;

• meeting legal, regulatory, insurance, security and processing requirements;

• and otherwise with consent or as permitted or required by law.

Disclosure of Your Personal Information

Meddo discloses personal information in the following circumstances:

• to provide the products or services;

• to provide authorized Client employees, directors or agents with access to relevant information to enable them to provide the products or services;

• to develop improvements to the products or services; and

• to otherwise comply at all times with applicable laws.

In addition to the above, personal information may be disclosed to our affiliates (including outside of Canada) for internal audit, management, billing or administrative purposes including defending and bringing legal actions.

Service Providers. Meddo may transfer personal information to outside agents or service providers (including affiliates of Meddo acting in this capacity) that perform services on our behalf, for example marketing services, business development services, billing services, information technology and/or data hosting or processing services or similar services, or otherwise to collect, use, disclose, store or process personal information on our behalf for the purposes described in this Privacy Statement. Some of these service providers or affiliates may be located outside of Canada, including in the United States, and your personal information may be collected, used, disclosed, stored and processed in the United States or elsewhere outside of Canada for the purposes described in this Privacy Statement. Reasonable contractual other measures we may take to protect your personal information while processed or handled by these service providers are subject to legal requirements in Canada, the United States and other foreign countries applicable to our affiliates, agents and service providers, for example lawful requirements to disclose personal information to government authorities in those countries.

Business Transactions. Personal information may be used by Meddo and disclosed to parties connected with the proposed or actual financing, securitization, insuring, sale, assignment or other disposal of all or part of Meddo or our business or assets, for the purposes of evaluating and/or performing the proposed transaction. These purposes may include, as examples:

• permitting those parties to determine whether to proceed or continue with the transaction;

• fulfilling reporting, inspection or audit requirements or obligations to those parties;

Assignees or successors of Meddo or our business or assets may use and disclose your personal information for similar purposes as those described in this Privacy Statement.Legal, Regulatory, etc. Meddo may disclose your personal information as necessary to meet legal, regulatory, insurance, audit, and security requirements, and as otherwise with your consent or as permitted or required by law (including as required by applicable Canadian and foreign laws applicable Meddo or our agents and service providers, and including lawful requirements to disclose personal information to government authorities in those countries).

Your Consent

Consent to the collection, use and disclosure of personal information may be given in various ways. Consent can be express (for example, orally, electronically or on a form you may sign describing the intended uses and disclosures of personal information) or implied (for example, when you provide information necessary for a service you have requested). You may provide your consent in some circumstances where notice has been provided to you about our intentions with respect to your personal information and you have not withdrawn your consent for an identified purpose, such as by using an "opt out" option provided, if any. Consent may be given by your authorized representative (such as a legal guardian or a person having a power of attorney). Generally, by providing us with personal information, we will assume that you consent to our collection, use and disclosure of such information for the purposes identified or described in this privacy statement, if applicable, or otherwise at the time of collection.You may withdraw your consent to our collection, use and disclosure of personal information at any time, subject to contractual and legal restrictions and reasonable notice. Note that if you withdraw your consent to certain uses of your personal information, we may no longer be able to provide certain of our products or services. Note also that where we have provided or are providing services to you, your consent will be valid for so long as necessary to fulfil the purposes described in this Privacy Statement or otherwise at the time of collection, and you may not be permitted to withdraw consent to certain necessary uses and disclosures (for example, but not limited to, maintaining reasonable business and transaction records, disclosures to Canadian and foreign government entities as required to comply with laws, and reporting on credit information after credit has been granted, if applicable).

Meddo collects, uses and discloses your personal information with your consent, except as permitted or required by law. We may be required or permitted under statute or regulation to collect, use or disclose personal information without your consent, for example to comply with a court order, to comply with local or federal regulations or a legally permitted inquiry by a government agency, or to collect a debt owed to us.

Security

We take reasonable steps to protect your personal information using physical, electronic or procedural security measures appropriate to the sensitivity of the information in our custody or control, which may include safeguards to protect against loss or theft, as well as unauthorized access, disclosure, copying, use or modification. Authorized employees, agents and mandataries of Meddo who require access to your personal information in order to fulfil their job requirements will have access to your personal information.

Retention

Retention Personal information is retained as described in this Privacy Statement, and otherwise in accordance with our record retention policies. Our record retention periods are established taking into account requirements of privacy laws, the purposes for which the information was collected, legal and regulatory requirements to retain the information for minimum periods, limitation periods for taking legal action, and our business purposes.

Access, Correction and Contacting Us

Meddo may establish and maintain a file of your personal information for the purposes described above, which will be accessible at www.meddo.io. If you wish to request access or correction of your personal information in our custody or control, you may write to the above address, attention privacy@meddo.io. Your right to access or correct your personal information is subject to applicable legal restrictions. We may take reasonable steps to verify your identity before granting access or making corrections. If you wish to make inquiries or complaints or have other concerns about our personal information practices, you may write to us as described above, e-mail us at privacy@meddo.io.

Privacy Statement Changes

This Privacy Statement may be revised from time to time. If we intend to use or disclose Personal Information for purposes materially different than those described in this statement, we will make reasonable efforts to notify affected individuals, if necessary, including by revising this Privacy Statement. If you are concerned about how your personal information is used, you should contact us as described above or check at our website periodically at www.meddo.io/privacy to obtain a current copy of this statement. We urge you to request and review this Privacy Statement frequently to obtain the current version. Your continued provision of Personal Information or use of our services following any changes to this Privacy Statement constitutes your acceptance of any such changes. This privacy statement is effective as of July 1, 2022.

Employment information practices should be dealt with separately, if necessary.