Privacy Policy

EFFECTIVE DATE: JULY 16, 2025

Welcome to Cashew!

Cashew owns and operates certain websites, mobile applications (the "Services") owned, operated, and made available by Cashew Corp. ("Cashew", "us", "we" or "our"). Please read this Policy carefully in order to understand what Cashew and our affiliates/subsidiaries do with your Personal Data. Your use of our Website and Services and any dispute over privacy is subject to this Policy and any of applicable Terms & Conditions, including their applicable limitations on damages and the resolution of disputes ("Terms"). Our Terms for our Services are incorporated by reference into this Policy.

This privacy policy ("Policy") describes how and why we collect, process, use and disclose information about individuals and employees of businesses that use our platforms, and other platform visitors in connection with our Services ("Users"). This Policy does not apply to information that you directly submit to third parties, including the organizations and individuals with which you connect on the Services. This Policy should be read in accordance with the Terms and Conditions, as applicable. IF YOU DO NOT AGREE TO THE TERMS OF THIS PRIVACY POLICY, YOU MAY NOT ACCESS, DOWNLOAD OR OTHERWISE USE THE APP.

DEFINITIONS

For the purposes of this Privacy Policy:

• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet;
• Service refers to the Website, mobile app, and software;
• Service provider means any natural or legal person who processes the data on behalf of Cashew. It refers to third party companies or individuals employed by Cashew to facilitate the Service, to provide the Service on behalf of Cashew, to perform services related to the Service or to assist the Company in analyzing the data how the Service is used;
• Third Party Social Media Service refers to any website or any social media network through which a User can log in or create an account to use the Service;
• Usage Data refers to the data collected automatically, either generated by use of the Service or from the Service infrastructure itself (for example, the duration of a page visit);
• Website refers to Cashew's website accessible at https://www.cashewresearch.com/;
• You means the individual accessing or using the Service, or the Company, or other legal entity on behalf of which individual is accessing the Service, as applicable.

1. WHAT WE COLLECT

1.1 Data That We Collect

We collect Personal Information and other information in connection with the Services. For the purposes of this Policy, "Personal Information" or "Personal Data" is any information provided to us or generated within our Services or Website that personally identifies or could be used to identify an individual, such as name or email address, gender, identification number or other information which could be reasonably linked to such identifying information. Personal information does not include information that would enable an individual to be contacted at a place of business, for example an employee's name, position or title, business telephone number, or business address.

Other information is any information that we collect that is not Personal Information. We may combine other information with Personal Information; in which case we will treat the combined information as personal information. We may also combine information that we have about you with additional information that we, or third parties, collect in other contexts – such as our communications with you via email or phone, your responses to project screening questions, your customer service records, or any feedback provided by a User. In these circumstances, we will treat the combined information as Personal Information.

For greater clarity, we may collect the following personal information from you:

2. HOW DO WE COLLECT DATA

When you use the Services, we collect personal information that you provide voluntarily, and personal information collected via other means.

Personal information provided voluntarily:

When you use the Services, you may be asked to provide the following personal information: (a) your email address; (b) your phone number; (c) your gender.

Personal information collected by other means:

We also may use cookies or other similar technologies to collect personal information. Please see the "Cookies" section below for details on how these technologies work and how we use them.

We collect Personal Data from third parties, and through the use of cookies and Metadata collected on our Website and Services. You acknowledge and agree that you will keep your Personal Data up to date and accurate. You agree that upon request from Cashew, you will submit all documentation and responses necessary to ensure the information you have provided remains accurate.

We, and our authorized third-party service providers, collect information automatically through our Services as necessary to provide and improve our Services. This may include information such as your IP address and domain name, your internet service provider, the date and time of your visit, your use of the Services during your current session and over time (including the pages you view and the files you download), the URLs from the websites you visit before and after navigating to the Services, your computer's operating system and browser type, your software and hardware attributes (such as device IDs, device OS, and device type), search keyword and search engine, and your general geographic location (e.g., your city, state, province, or metropolitan region). Such information may be considered Personal Information under certain applicable law. We collect such information using the following technologies:

2.1 Server Logs

When you use the Services, we automatically receive and record certain information from your computer (or another device) and your browser. To obtain such information, we may use server logs or applications that recognize your computer and gather information about its online activity.

2.2 Collaboration with Third-Party Data Collectors

We may partner with certain third parties to collect, analyze, and use some of the information described above. For example, we may allow third parties to set cookies or use other tracking mechanisms (such as tags or scripts) on the Services or in email communications from us, or we may allow third parties to use an application software development kit (SDK) or a server-to-server connection to collect.

2.3 Usage Data

Usage Data is collected automatically when using the Service. Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data. When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data. We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

2.4 Tracking Technologies and Cookies

Sometimes we use cookie technology and other similar devices on our Website to enhance functionality and navigation for researchers. Information tracked through these mechanisms includes, but is not limited to: (i) your IP address; (ii) the type of device or operating system being used; and (iii) the pages of the App a user visits and the amount of time spent on these pages. If you wish to disable cookies, refer to your device settings to learn how to do so. Please note that if you disable cookies, you may be unable to access some customized features on this website such as saving your login information. Cookies do not collect or contain your personal information.

We use Cookies and similar tracking technologies to track the activity on our Service and store certain information. Tracking technologies used are beacons, tags and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

2.5 Cookies or Browser Cookies

A Cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept cookies, You may not be able to use some parts of our service. Unless you have adjusted your browser setting so that it will refuse Cookies, our Service may use Cookies.

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.

We use both Session and Persistent Cookies for the purposes set out below:

• Necessary / Essential Cookies Type: Session Cookies. These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.
• Cookies Policy / Notice Acceptance Cookies Type: Persistent Cookies. These Cookies identify if users have accepted the use of cookies on the Website.
• Functionality Cookies Type: Persistent Cookies. These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.
• Tracking and Performance Cookies Type: Persistent Cookies. Administered by: Third Parties. Purpose: These Cookies are administered by third parties and are used to track information about traffic to the Website and how users use the Website. The information gathered via these Cookies may directly or indirectly identify you as an individual visitor. This is because the information collected is typically linked to a pseudonymous identifier associated with the device you use to access the Website. We may also use these Cookies to test new pages, features or new functionality of the Website to see how our users react to them.

For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy or the Cookies section of our Privacy Policy.

2.6 Web Beacons

Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Cashew, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

3. WHEN WE COLLECT YOUR INFORMATION AND HOW WE USE IT

We will only use the personal information you provide for the purposes stated below, or otherwise with your consent.

Personal information will be used to offer and operate the App. More specifically, it will be used to personalize your experience with the App and to deliver the services associated thereto, including to respond to any inquiries made by you.

We will not send you any online newsletters or similar e-mail communications unless you expressly consent to receive such communications from us. We may, however, send you notices of changes to our Privacy Policy or Terms of Use.

You may be given the opportunity to consent to receive future promotional communications from us. If you opt-in to receive such communications, we may use the information to: communicate with you regarding our products, services and promotions; provide you with other information that you request; and/or improve our product and service offerings. You will always have the opportunity to "unsubscribe" from receiving commercial e-mail or other communications at any time.

If you contact us through the App, our website, or by telephone, we may ask you for personal information such as your name, address, phone number, or e-mail address so that we can respond to your questions or comments.

Cashew collects your Personal Data in the following instances and uses if for the purposes as described:

3.1 Creating an Account

To access certain features on the Website, you must create an account using your email address and password, or sign in with Google or another third-party login option (such as Magic Link). Your login information is used to create your account and otherwise provide and administer the service you requested.

3.2 Administer and Improving the Services

Provide the Services to you, administer your account, fulfill the terms of any agreement you have with us, and improve the Services. Note that any information you submit may be used by us to evaluate you for infringement of the Terms and to provide the Services.

3.3 Interacting with Live Chat and Online Support Services

We may provide online support services powered by third-party chat bot provider, as identified within the chat bot, on our Website, including a live chat functionality. These support services enable us, and the service providers we work with, to communicate instantly with you and to provide additional information or answer any questions.

Your information is collected for the purpose of operating the online support services and analyzing the use of those services. It may include your first and last name, phone number, email address, IP address, and other data communicated while using the support services. In addition, the support services may collect browsing and Usage Data in the pages where they are installed, even if you do not actively use them. Live chat conversations may also be logged for quality assurance and training purposes.

By using the support services on our Website, you explicitly consent to the collection and use of your information. You are solely responsible for the information you choose to submit while using the support services.

3.4 Communicating with Us

When you contact us with a comment, question or complaint, you may be asked for information that identifies you (such as your name, address and a phone number) along with additional information we need to help us promptly answer your question or respond to your comment or complaint. We may also retain this information to assist you in the future and to improve our customer service, products, service offerings, events and promotions.

3.5 Providing Information to Third Parties with Whom We Work

We may obtain and/or provide your Personal Data from and/or to third parties with whom we use to facilitate the provision of our Services.

We are not responsible for the Privacy Policy of the third parties with whom you may interact while using our Services.

3.6 Payment Information

When required, we will collect your credit card or other payment information. We use third-party payment service providers to process payments on our behalf, and as a result we do not ourselves store your credit card number or other payment information.

We are not responsible for the Privacy Policy of our third party payment providers, and encourage you to review this policy at: https://stripe.com/en-ca/privacy.

3.7 Signing Up for Marketing Email and Other Communications

We may offer you the ability to sign up to receive marketing and promotional communications through the Website, on third party websites (including through social media sites), or educational events and information sessions. In these circumstances, we collect certain Personal Data (such as first and last name, email address or mobile phone number) which we use to send you email and other communications containing updates, tips, and other content that may be of interest to you. You can opt out of receiving promotional email from us by following the "opt-out" or "unsubscribe" instructions provided in your email or text message, or by contacting us as set out below. Please note that you may continue to receive messages from us regarding your application or other transactional and account-related electronic messages from us.

3.8 Analyzing Communications

In addition to the above noted reasons for collecting and using Personal Information, we may review, scan, or analyze communications that occur through the Platform for fraud prevention, security investigations, risk assessment, regulatory compliance, product development, research, analytics, enforcing our Terms of Service, Terms of Use and/or other applicable documents, and customer support purposes. We may also scan, review, or analyze messages to debug, improve, and expand product offerings. We may use automated or manual methods to analyze communications. We will not review, scan, or analyze your communications to send third-party marketing messages to you and we do not sell our reviews or analyses of these communications.

4. WHEN DO WE SHARE PERSONAL INFORMATION?

Except as described below, we do not sell, transfer or otherwise disclose to third parties the personal information we collect on the App.

At times we provide your personal information to our business partners such as service providers, subcontractors, advertising agencies, or Twilio. These entities may use the information solely in conjunction with the specific services they provide for us (e.g. operating the App; responding to your question or comment; investigating a complaint, etc.). They are not authorized to use this personal information for their own benefit. We require that our third-party service providers have in place privacy practices consistent with this Privacy Policy; provided, however, that we cannot guarantee the privacy practices of our third-party service providers.

We reserve the right to transfer any personal information we have about you in the event that we sell or transfer all or a portion of our business or assets to a third party. Further, we reserve the right to disclose any personal information as needed if such information is requested by law enforcement agencies or if we are requested to do so by law, regulation, court order, or by a government entity. We may also disclose your personal information to third parties if we have reason to believe that disclosing such information is necessary to: (i) conduct investigations of possible breaches of law; (ii) cooperate in any legal investigation; (iii) identify, contact, or bring legal action against someone who may be violating the Terms of Use of this website; or (iv) to protect our rights, privacy, safety or property. Lastly, we may disclose your personal information for any other purpose to which you consent.

We share your Personal Data with third parties, including service providers, regulated institutions (e.g., financial institutions), affiliated entities, and business partners as set out in Section 9.

In Section 4, we list the reasons why we share information.

4.1 How and Why We Share Your Information

4.1.1 Third-party service providers

We use third-party service providers to help us provide, manage, and improve the Services. These service providers may collect and/or use your information to assist us in achieving the purposes discussed in this Policy. We do not exercise control over any other sites that may be linked to or accessed through the Platform or our website. We have no responsibility for the privacy practices of third-parties, including any technology or software providers, which are used within the Services. You should review the policies of any third-party sites before providing personal information to these sites. purpose of providing the Services to you. Where a third party is identified, please see their linked privacy notices for information regarding their collection and use of Personal Data. If no link is listed, or if you require additional details (including our current Sub-processor list with service descriptions and processing regions), contact info@cashewresearch.com.

4.1.2 Account Management

The Personal Information you provide will give you access to different functionalities of the Services available to you. To support the management of your account, we may use your Personal Information to contact you by email, telephone, SMS, or other forms of electronic communication such as push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including security updates. We may use your Personal Information to manage and respond to your requests.

4.1.3 Special Offers

We may use your Personal Information to provide you with news, special offers, general information about events, and our Services, unless you have opted out of receiving such information.

4.1.4 Affiliates

We may share information with our corporate affiliates for the purposes described in this Policy.

4.1.5 Analytics

We may use your data internally for research and development to improve our existing products and services and/or create new features to serve you better, and expand our user base. We may also use non-personal data ("Metadata") for this same purpose. We may share your Personal Data with third parties involved in research and development to improve our existing products and services and/or create new features to serve you better.

4.1.6 With Business Partners

We may share Your information with our business partners to offer you certain products, services and promotions.

4.1.7 Third-party plugins and integrations

The Services may integrate certain third-party plugins, widgets, or integrations (such as social media plugins, among others). Even if you do not click on these plugins, widgets, or integrations, they may collect information about you, such as your IP address and the pages that you view. They also may set and/or access a cookie or other tracking mechanism. Each plugin, widget, and integration is governed by the privacy policy of the Company providing it, and not this Policy.

4.1.8 Legal purposes

The information we process, and store may be disclosed by us to legal authorities if we are required to do so by law. We may also disclose, at our discretion, some information we collect and store where we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing interference with the rights, property, or rules of the Users, or someone who may cause or be at risk of imminent bodily harm, or someone who may be violating the Terms for our Services. In such cases, the User in question will be informed.

4.1.9 Financing, business transfers, and similar transactions

As we develop our business, we might sell or buy businesses or assets. In the event of a sale, merger, reorganization, dissolution, or similar event relating to all or a portion of our business or assets, your information may be part of the transferred assets. In accordance with applicable law, to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Cashew's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Cashew about our customers and users is among the assets transferred.

4.1.10 De-identified or aggregated information

We may also share de-identified and aggregated information about Users, such as by publishing a report on trends in the usage of the Services or sharing aggregated information about historical survey matching results.

4.1.11 With your consent

We may disclose Your Personal Information for any other purpose with your consent.

If you have signed up for marketing emails or communications, and do not want us to use your Personal Data for us to market to you, and/or to pass on to third parties for marketing purposes, please contact us through the various communication channels available, as listed under the Section titled info@cashewresearch.com below. You will also be able to unsubscribe from any marketing emails sent to you by Cashew using a link provided in such emails. We do not sell your Personal Data.

5. HOW WE STORE PERSONAL INFORMATION

5.1 Data Storage

All information you provide to us is stored as data on the servers of Amazon Web Services (AWS). For AWS's privacy policy, please visit: https://aws.amazon.com/privacy/ cloud service providers. We take reasonable steps to ensure our service providers adhere to the security standards we apply to Your Personal Information and the transfers of Your information. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Our service providers' servers are predominantly located in the USA and Canada. By using our Services, you consent to the transfer of your personal information to these jurisdictions. Many of our service providers are also located outside of Canada. For Users located in Quebec, data may be stored outside of Quebec. Our data may be transferred or processed to or in the United States and Canada. While we use appropriate safeguards to keep your information secure, the laws in other places may differ from those in Canada and authorities in those jurisdictions may access your information in accordance with their local laws.

5.2 Retention

Cashew will only retain your Personal Data while it is needed to fulfill the intended purpose for which it was collected or as otherwise permitted or required by law or contract (which may extend beyond the termination of our relationship with you).

Typically, Personal Data is maintained during the time you are engaged in the institutional program you applied to, or for up to a year following our last contact with you. We may retain certain data as necessary for:

• legitimate business purposes, such as auditing, account recovery;
• if required by applicable federal, state, provincial or other laws;
• to prevent fraud or future abuse, or
• by contract with a partner and/or institution.

All retained Personal Data is treated in accordance with this Policy.

5.3 Removal

Subject to Section 8, if you request that your Personal Information be removed from our databases and/or systems, it may not be possible to completely delete all your Personal Data due to technological and legal constraints. However, we will take such steps as are commercially reasonable to securely destroy the information or to ensure that the information is de-identified and/or anonymized as necessary.

6. HOW DO WE PROTECT PERSONAL INFORMATION?

The security of your personal information is important to us. We maintain administrative, technical and physical safeguards (appropriate to the sensitivity of such information) designed to protect against unauthorized use, disclosure or access of the personal information we collect on this website. Unfortunately, no data transmission over the internet can be guaranteed to be 100% secure. As a result, while we are committed to protecting your personal information, we cannot ensure or warrant the security of any information you provide to us. All third parties that obtain personal information from us (e.g. service providers that perform functions on our behalf) are contractually required to protect your confidentiality and personal information in a manner consistent with this policy, and/or as required by law.

Personal Information may only be accessed by persons within our organization, or our third party service providers, who require such access to carry out the purposes indicated above and such other purposes as may be permitted or required by the applicable law. Personal Information we collect is maintained with the source of the information at AWS US East (Ohio).

6.1 Safeguards

Cashew takes the safeguarding of your information very seriously. We have implemented commercially reasonable administrative, technical and physical safeguards to protect against unauthorized access, use, modification and disclosure of Personal Information in our custody and control. The transmission of information via the internet is not completely secure. While we implement commercially reasonable security measures to protect your information, no method of transmission over the Internet our electronic storage is 100% secure. The use of our Platform carries inherent risks that we cannot completely eliminate.

We have implemented commercially reasonable administrative, technical and physical safeguards in an effort to protect against unauthorized access, use, modification and disclosure of Personal Data in our custody and control.

6.2 Security Measures

We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your Personal Information. Data collected through our Platform is maintained on our servers or those of our service providers and is accessible to authorized employees, representatives and agents who require access in connection with their job responsibilities.

6.3 Online Protection

Your online access to certain Personal Information of yours is protected through Magic Link. We will never ask you for your password in any unsolicited communication (such as letters, phone calls, email or SMS messages).

6.4 Data Breach Notification

If we discover a security incident that compromises your Personal Information, we will notify you and the appropriate regulatory authorities without undue delay as required by applicable law, including details of the breach, likely consequences, and measures taken to address the incident.

7. TRANSFER OF YOUR PERSONAL INFORMATION

Your Personal Information is processed at our operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

We will take commercially reasonable steps to ensure Personal Information is treated securely and in accordance with this Privacy Policy and to ensure no transfer of data will take place to an organization or a country unless there are adequate controls in place.

8. YOUR RIGHTS

You have certain rights relating to your Personal Data, subject to local data protection laws. Depending on the applicable laws, these rights may include the right to:

8.1 The right to confirm the existence of processing and to request access

You may have the right to obtain confirmation as to whether your Personal Information has been processed, and, if that is the case, to request access to your Personal Information. Depending on where you are located, you may also have the right to information about public and private entities to which we have disclosed your data.

8.2 The right to object to processing

You may have the right to object to the processing of your Personal Information under certain conditions. The right to object may apply if we collect and process your Personal Information through automated decision making to better understand your interests in our products and services or for direct marketing. If you have this right and exercise it, your Personal Information will no longer be processed by us for such purposes. Such a right to object may not exist if the processing of your Personal Information is necessary to take steps prior to entering into a contract or to performing a contract already executed.

8.3 The right to correct incomplete, inaccurate, or out-of-date information

You may have the right to request that we correct any Personal Information about you that is inaccurate. Depending on the purpose of the processing, you have the right to request that we complete the Personal Information we hold about you where you believe it is incomplete, including by means of providing a supplementary statement.

8.4 The right to portability

You may have the right to request that we transfer the Personal Information we have collected about you to another organization, or directly to you, in a structured, commonly used, and machine-readable format, under certain conditions.

8.5 The right to request anonymization, blocking, or deletion

You have the right to request the deletion of your Personal Information, subject to certain conditions and limitations under the law.

8.6 The right to revoke consent

Where we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time with future effect. Depending on where you are located, you may have the right to request deletion of Personal Data that was processed based on your consent and the right to know the consequences of revoking your consent. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.

8.7 The right to opt-out of the sale or sharing of Personal Information

We do not sell your Personal Information in exchange for monetary consideration. In the event we disclose your Personal Information to third parties for their marketing purposes, you may have the right to opt out of that disclosure. You may also have the right to request further information about the disclosure of your Personal Information for third parties' marketing purposes, such as the contact information of those parties, once per calendar year.

8.8 The right to limit the use and disclosure of sensitive data

We will only use sensitive or special Personal Information as needed for the purposes for which it was collected or with your consent. We do not currently process sensitive Personal Information for purposes that may be limited under applicable law. If this changes, we will notify you, and you may have the right to restrict such additional uses.

8.9 The right to non-discrimination for exercising a privacy right

We will not discriminate against you for exercising any rights.

8.10 Right to report or file a privacy related complaint with the appropriate authorities

You have the right to file a complaint with the relevant Privacy Office in the event that Cashew's actions were in contravention of the laws of Alberta (Personal Information Protection Act).

You may access, update, delete, and/or correct inaccuracies in your Personal Data in our custody or control at any time, subject to limited exceptions prescribed by law. Simply log into your account, go to your account profile, and make the necessary changes.

You can also request access, corrections, updates, or deletion of your Personal Data in our records by contacting us as set out below. We may request certain Personal Data for the purposes of verifying the identity of the individual seeking access to their Personal Data records.

Should you wish to lodge a concern or complaint to Cashew, please contact us as set out below. We will respond to your concerns in a reasonable time.

info@cashewresearch.com.

We are not responsible for the privacy practices of our third-party service providers and recommend that you review their privacy policies carefully. We may communicate with our third-party service providers, to the extent permitted by law, when you make a request based on your Personal Data rights that involves the data collected by our third-party service providers. We will keep you informed on the status of your request in such cases.

9. LINKS TO THIRD PARTY WEBSITES, APPS, OR SERVICES

The App may contain links to websites, apps, or services that are independently owned and operated by third parties. These other websites, apps, or services may have their own privacy policies and are not governed by this Privacy Policy. We are not responsible for the privacy practices or the content of any website, apps, or services owned and operated by any such third parties. Other websites, apps, or services may collect, use, store, and disclose personal information differently, so we encourage you to carefully read and review the privacy policy for each website you visit.

Our Website may contain links to other websites that Cashew does not own or operate, including the websites of third-party partners. Also, links to our Website may be featured on third party websites on which we advertise. Except as provided herein, we will not provide any of your personal information to these third parties without your consent. We provide links to third party websites as a convenience to the user. These links are not intended as an endorsement of or referral to the linked websites. The linked websites have separate and independent privacy statements, notices and terms of use, which we recommend you read carefully. We do not have any control over such websites, and therefore we have no responsibility or liability for the manner in which the organizations that operate such linked websites may collect, use or disclose, secure and otherwise treat your personal information.

We may offer you the opportunity to engage with our content on or through third-party social networking websites, plug-ins, and applications. When you engage with our content on or through third-party social networking websites, plug-ins and applications, you may allow us to have access to certain information associated with your social media account (e.g., name, username, email address, profile picture) to deliver the content or as part of the operation of the website, plug-in or application. When you provide information from your social media account, we may use this information to personalize your experience on the Website and on the third-party social networking websites, plug-ins and applications, and to provide you with other products or services you may request.

We use the following third-party service providers:

In addition to such third parties listed above we may disclose Your Personal Information with the following third parties for the purposes of providing the Platform to you:

i. Cloud storage and infrastructure providers:

• Google Cloud Platform: https://cloud.google.com/terms/cloud-privacy-notice
• Neon: https://neon.tech/privacy-policy
• Vercel: https://vercel.com/legal/privacy-policy

ii. Identity verification providers, for the purposes of verifying your identity, ensuring accuracy of the information provided, and conducting necessary background checks for fraud prevention and security purposes, including:

• Google Cloud OAuth: https://cloud.google.com/terms/cloud-privacy-notice

iii. Customer support platform service providers;

iv. Marketing partners and marketing platform providers, including social media advertising services, advertising networks, third-party data providers, and other service providers to reach or better understand our users and measure advertising effectiveness;

v. Research partners, including those performing surveys or research projects in partnership with Cashew or on Cashew's behalf;

vi. Service providers that assist Cashew to enhance the safety and security of the Website and Services;

vii. Service providers that provide us with artificial intelligence and machine learning tools and services, specifically for service delivery optimization and performance improvement, booking management, and facility utilization analysis, while ensuring that proprietary business information and trade secrets are protected;

viii. Accountants, consultants, lawyers and other professionals service providers;

ix. Insurance and financing partners.

10. CHILDREN'S PRIVACY

We are committed to protecting the privacy of children and we do not knowingly collect or solicit personal information from children under the age of 13 without verifiable parental consent. If a child has already provided us with personal information, his or her parent or guardian may contact us for the purpose of deleting this information.

Some or all of the personal information we collect may be stored or processed on servers located outside your jurisdiction of residence, whose data protection laws may differ from the jurisdiction in which you live. As a result, this information may be subject to access requests from governments, courts, or law enforcement in those jurisdictions according to laws in those jurisdictions. Subject to applicable laws in such other jurisdictions, we will use reasonable efforts to ensure that appropriate protections are in place to require the data processor in that country to maintain protections on the personal information that are equivalent to those that apply in the country in which you live.

11. THIRD PARTY ANALYTICS

Cashew uses web analytics services such as PostHog and Google Analytics to collect recordings and to analyze website usage. These tools use cookies to help us analyze how visitors use the Website. For example, with Google Analytics, the information generated by the cookie about your use of the Website (including your IP address) will be transmitted to and stored by a server. Cashew uses this information for the purpose of evaluating your use of the Website, compiling reports on Website activity for Website operators, and providing Website operators with other services relating to Website activity and internet usage.

12. THIRD PARTY AD-NETWORKS

We use third parties, such as network advertisers and other marketing agents, to display advertisements on our Website, to assist us in displaying advertisements on third party websites, and to evaluate the success of our advertising campaigns. Network advertisers are third parties that display advertisements based on your visits to our Website and unrelated third-party websites. This enables us and these third parties to target advertisements by displaying ads for products and services in which you might be interested. Third-party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons (including clear GIFs), Flash LSOs and other technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third party's specific privacy policy, not this one. We may provide these third-party advertisers with information about your use of our Website and our Services, as well as aggregate or non-personally identifiable information about visitors to our Website and users of our Service.

13. COMPLIANCE

We have taken commercially reasonable steps to ensure your data is protected in accordance with Alberta's Personal Information Protection Act ("PIPA") and other applicable privacy laws, including leveraging the cyber security services, firewalls, as well as other security measures embedded within our third-party service providers. From time to time, your Personal Information may be accessed by Cashew-authorized services or staff in another country where Cashew or authorized third parties operate, such as the United States. We implement measures to protect your information and to ensure compliance with applicable laws.

14. GOVERNING LAW

All issues and questions concerning the application, construction, validity, interpretation and enforcement of this Privacy Policy shall be governed by and construed in accordance with the laws of the Province of Alberta, and the federal laws of Canada applicable therein.

To inquire about or exercise your rights in accordance with applicable law, please contact us at info@cashewresearch.com.

15. CHANGES TO THIS PRIVACY POLICY

We reserve the right to change or replace this Privacy Policy at any time. We will provide notice of any material changes through the Website or by other means as required by applicable law, and obtain renewed consent where required by law. Please check back from time to time to ensure that you are aware of any updates or changes in this Privacy Policy. We will indicate at the top of this page the date this Privacy Policy was last revised. Your continued access or use of the App after any such changes constitutes your acceptance of the Privacy Policy as revised.

16. YOUR CONSENT TO THE TERMS OF THIS PRIVACY POLICY

By using the Services or by otherwise providing us with personal information, you consent to the terms of this Privacy Policy, you signify your assent to all of the terms of this Privacy Policy and our Terms of Use. If you do not agree with any terms of this Privacy Policy or our Terms of Use, please do not use this site or submit any personal information.

17. HOW TO CONTACT US

We welcome your feedback. If you have questions, comments or concerns about our Privacy Policy, or would like to do any of the following:

• see personal information that you have already sent us so that you can correct or update it delete your personal information from our files;
• if your child under 18 has sent us personal information, delete that personal information from our files; or
• report any violation of this Privacy Policy

Please contact us at:

Rose Wong at info@cashewresearch.com.