ADVISORCRM PRIVACY POLICY

Last updated: August 9, 2026

1. General

AdvisorCRM recognizes the importance of client privacy and the sensitivity of the personal information that we may have concerning any individual. We have a professional and ethical obligation to keep confidential all information we receive within a client relationship, subject to the client’s instructions to provide transactions. We are committed to safeguarding the personal information we have or control concerning any individual.

This Privacy Policy should be read together with our Terms of Service.

2. Your Privacy Rights

We manage your personal information in compliance with Alberta’s Personal Information Protection Act (PIPA) and will comply in certain circumstances with the federal privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), as required.

3. Why We Collect Personal Information

We collect personal information for the purposes of serving the related needs of our clients and operating our services. We require information to:

• Understand, assess and assist you, our client, with your ongoing needs.
• Ensure information is accurate and up-to-date.
• Provide services to clients in respect of the transactions you request.

4. How We Use Your Personal Data

We use your personal data mainly to operate our services and manage our relationship with you. We only use the data for the purposes listed in this notice (or explained at the time of collection), or for closely related purposes allowed by law.

• To deliver our services. AdvisorCRM uses your data to sign you up, create and administer your account, verify your identity, manage trials and subscriptions, process payments, and provide, maintain, and improve the services (including with AI/ML). This covers hosting, monitoring, troubleshooting, and testing.
• To communicate with you about our services. We send service updates, invoices, technical notices, security alerts, support messages, and replies to your questions via email, phone, SMS, or in-product messages.
• For quality assurance, training and record-keeping. Communications may be reviewed for support quality, staff training, and record-keeping purposes.
• For security management. Data is used to detect threats, prevent fraud, and protect users and the business, including malware monitoring and blocking unauthorized access.
• For compliance management. AdvisorCRM uses data to enforce its Terms of Service and for related internal reporting.
• To improve our services. We analyse data (including with AI/ML) to improve our websites, apps, and services, develop new products, and understand customer behaviour for business decisions.
• For marketing communications. With your consent, AdvisorCRM may contact you about services, promotions, competitions, and events we think may interest you, via email, SMS, or other channels. You may withdraw this consent at any time — unsubscribe using the link in any email, or reply STOP to any text message — without affecting the services you receive. We do not share your mobile opt-in or text-messaging consent with third parties or affiliates.
• To personalize content. Data helps us deliver local or targeted content and tailor what you see on our websites, apps, and services.
• For our own advertising. We measure the effectiveness of our own marketing and, where permitted, tailor the AdvisorCRM content and offers you see. We do not sell your personal information.
• To run competitions, sweepstakes or surveys. Your data is used when you choose to take part in these activities.
• For legal and regulatory compliance. Data is processed to meet our legal and regulatory obligations, including responding to data-protection requests.
• To manage legal claims. AdvisorCRM may use data to protect its legal rights and to bring or defend claims.

5. What Personal Information Do We Collect?

Personal information is any information that identifies you personally. In Alberta, business contact information such as your office address, job title, business phone number, email address, fax number or other related business contact information is not considered personal information. We follow reasonable and prudent business practices to collect, use and disclose your personal information for the purpose of providing you with services.

6. How Do We Collect Your Personal Information?

We collect your personal information directly from you. We ask for your consent at the start of our relationship, and during our relationship when we need to transact on your behalf. Your consent may be in writing, verbal or implied as necessary to further your needs. This privacy statement is your notice of the purposes for which we collect, use or disclose your personal information or business contact information.

Independent of the services provided, third parties may obtain relevant additional information in respect of an application you may have made. You will always be asked to sign a separate authority form to make you aware of this collection of personal information. This type of information may be derived from sources such as: yourself, professionals you engage, public registries, and financial institutions.

7. Consent

Our practice is to request either your written or express oral consent, which may be given in person or over the telephone. If you volunteer to provide relevant personal information verbally or in writing, we assume that you are consenting to the collection, use and disclosure of your personal information as described in this Privacy Policy. When you initiate contact with us, we may determine that consent has been implied for us to collect, use and disclose personal information in a reasonable manner. In some situations we will require express consent in writing, by the provision of a letter, application form, electronic signature, or other document authorizing certain activities.

There are certain circumstances where we are required or permitted by law to collect, use and disclose personal information without consent, for example:

• When we are required or authorized by law to do so, for example if a court issues a subpoena.
• When the use of the information is necessary to respond to an emergency that threatens the life, health or security of an individual or the public.
• When it is necessary to establish or collect fees.
• If the information is already publicly known.

8. Use of Your Information and Cancellation

We use your personal information to provide services to you. You may at any time withdraw your consent by notifying us. We do not disclose or sell your personal information or business contact information to any third party to enable them to market their products and services.

9. Accuracy of Your Information

You have the right to request a correction of the personal information that we hold about you. We rely on you to provide us with accurate and up-to-date personal and business contact information. If during the course of our relationship any of your information changes, please inform us so that we can make any necessary changes.

10. How Do We Protect Your Personal Information?

In order to protect your personal information, we will:

• Not collect, use or disclose your personal information for any purpose other than those we identify to you.
• Only disclose your personal information to those persons who have a need to know it for the purposes stated in this Privacy Policy.
• Keep your personal information only for as long as needed to fulfill the stated purpose or as required by law.
• Maintain your personal information in as accurate, complete and up-to-date a form as possible.
• Keep your personal information physically secure, for example in locked or secure offices, rooms and/or filing cabinets.
• Maintain technological safeguards for your sensitive personal information.

11. Access to Your Personal Information

You may request access to the personal information we have about you. The request must be in writing and directed to the privacy officer identified below. We are allowed to charge a reasonable fee for retrieval and copying of your personal information.

12. Changes to This Privacy Policy

We may review and change this Privacy Policy from time to time in order to update our privacy commitment to you in keeping with the current privacy laws of Alberta. We will post the revised version on this page and update the “Last updated” date.

13. SMS / Text Messaging

If you provide your mobile number and opt in to receive text messages from AdvisorCRM, the following terms apply:

• Consent. You will only receive SMS/text messages from us if you have expressly opted in (for example, by providing your mobile number and agreeing to be contacted by text). Consent to receive text messages is not a condition of any purchase or service.
• No mobile opt-in or text message consent will be shared with third parties or affiliates. No mobile information (including your phone number and your text-message opt-in/consent) will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never shared with any third parties. Information may only be shared with service providers that help us deliver the messaging service (such as our SMS provider), solely for that purpose.
• Message types. Messages may include account notifications, reminders, appointment or document requests, and occasional updates related to your relationship with us.
• Message frequency varies. Message and data rates may apply.
• Opt out. You can cancel at any time by replying STOP to any message. After you send STOP, you will receive one confirmation message and will not receive further texts unless you opt in again.
• Help. Reply HELP for assistance, or contact our Privacy Officer using the details below.

14. Contact Information & Resources

If you have any concerns, questions, or requests, please contact our Privacy Officer. We are based in Edmonton, Alberta, Canada.