Privacy Policy

Last Updated: July 27, 2026
Effective Date: July 27, 2026

Forjyn Technologies Inc. (“Forjyn”, “we”, “us”, or “our”) operates a mobile application and website (the “Service”) designed to connect investors and startups and facilitate investment discovery, communication, and due diligence activities.

Forjyn is incorporated as a for-profit corporation in Ontario, Canada.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial requirements, and mobile platform policies.

Where required by applicable law, we obtain consent for the collection, use, and disclosure of personal information. By using the Service, you acknowledge that you have read this Privacy Policy.

1. Scope of the Service

The Service allows users to:

• Discover investment opportunities
• Share startup information with investors
• Communicate through in-app messaging
• Upload and review due diligence materials
• Facilitate connections between investors and startups

Forjyn Technologies Inc. operates solely as a technology platform.

Forjyn:

• does not invest capital,
• does not issue securities,
• does not provide investment advice,
• does not perform investment suitability assessments, and
• does not conduct or certify due diligence.

Forjyn does not participate in negotiation, recommendation, solicitation, or execution of securities transactions between users.

The platform may promote investment opportunities, including venture capital funds that are separate legal entities from Forjyn.

Forjyn is not registered with the Ontario Securities Commission and does not act as a dealer, advisor, investment fund manager, or underwriter.

Forjyn performs identity verification services requested by participating investment organizations and AML support functions solely for platform administration purposes. Such information may also be accessed by authorized users of the platform, including general partner entities responsible for their own regulatory compliance obligations. All securities compliance responsibilities remain with the applicable issuer or fund entity.

2. Information We Collect

Because the Service facilitates investment interactions, we collect information you provide directly and information generated through your use of the Service. When completing the contact us form or registering a user account and using our Services we may collect or ask you to provide certain personal information.

A. Personal Identifiers

• Full Legal Name
• Email Address
• Phone Number
• Residential Address
• Profile Picture
• LinkedIn or professional profile information
• Job Title/Position
• Company Information

B. Investor Information

• Government-issued identification documents
• Accredited investor self-declarations
• Net worth and financial qualification information
• Investment preferences and activity
• Corporate information
• Corporate Logo
• Corporate Contact information
• Location

External verification for certain investment activities may require submission of OSC Form 45-106F9 through third-party validation processes.

C. Founder and Startup Information

• Pitch decks
• Financial projections
• Cap tables
• Corporate information
• Corporate Logo
• Corporate Contact information
• Due diligence documentation
• Uploaded business and operational materials

D. Communications Data

• In-app messages between users
• Uploaded files and documents
• Communications submitted through the platform

E. Technical and Usage Information

Collected automatically through the Service:

• IP address
• Device identifiers
• Log and usage data
• Performance and diagnostics information

F. Platform Operation, Analytics, and Tracking Technologies

We may use analytics, advertising, and tracking technologies to operate, improve, measure, and market the Service.

These technologies may include, but are not limited to:

• analytics tools such as Google Analytics or similar services,
• advertising and marketing measurement tools (including technologies such as Meta Pixel or similar tools),
• advertising software development kits (SDKs),
• cookies and similar tracking technologies,
• advertising identifiers,
• push notifications and engagement measurement tools,
• push tracking systems

These technologies may collect information such as:

• device and browser characteristics,
• interaction and usage behavior,
• session activity,
• referral sources,
• engagement metrics, and
• advertising interaction data.

Tracking technologies may be used to:

• understand how users interact with the Service,
• improve functionality and user experience,
• measure platform performance,
• deliver relevant communications or promotional content, and
• evaluate marketing effectiveness.

Where required by applicable privacy laws, users will be provided with notice and the opportunity to provide or withdraw consent for non-essential tracking technologies.

3. How We Use Your Information

We use personal information to:

• Provide and operate the Service
• Enable users to review investment opportunities
• Facilitate communication between users
• Support identity verification, compliance administration, and AML verification processes.
• Process memberships and payments via Stripe
• Generate AI-assisted analytical insights and summaries
• Improve platform functionality, security, and user experience
• Send platform notifications and communications (subject to CASL consent)
• Conduct analytics, advertising measurement, and promotional activities where permitted by law
• Comply with legal and regulatory obligations

Personal information is used solely for the purposes described in this Privacy Policy.

AI tools may analyze uploaded documents, messages, and, in the future, uploaded call recordings to generate analytical insights only where enabled by the user.

AI-generated outputs are informational tools only and must not be relied upon as financial, legal, or investment advice. Users should independently verify any information generated by AI before relying on it for business, legal, financial, investment, or other important decisions.

4. Legal Basis and Consent

We collect and process personal information based on:

• User consent
• The necessity of providing the Service
• Legal and regulatory obligations
• Legitimate operational purposes of maintaining and improving the platform

Sensitive financial information and identification documents are collected only with express consent.

Where analytics, advertising, or tracking technologies are used, consent will be obtained where required by applicable privacy legislation. Users may withdraw consent for certain tracking activities through available platform or device controls.

5. Data Sharing and Disclosure

We do not sell, rent, or trade personal information to data brokers or advertising marketplaces.

Information may be shared only where necessary to operate the Service, facilitate investment evaluation, comply with legal obligations, or protect users and the organization.

Authorized Platform Users

Startup information may be made available to verified users within the platform for evaluation purposes. Access permissions are determined by the startup or organization sharing the materials.

Service Providers

We use trusted vendors including:

• Google Cloud Platform (hosting and storage)
• Stripe (payment processing)
• Email and infrastructure providers
• Analytics and advertising service providers where applicable
• OpenAI (artificial intelligence processing services)

Certain AI-enabled features may require information submitted by users to be processed by OpenAI or other trusted AI service providers solely for the purpose of generating requested outputs. Forjyn does not permit these providers to use Customer Content to train publicly available AI models in accordance with our agreements with those providers.

Payment information is processed exclusively by Stripe and is not stored by Forjyn.

Professional and Regulatory Parties

Information may be shared where required with:

• Legal counsel
• Auditors
• Fund operators using the platform
• Regulatory authorities where required by law

6. International Data Transfers

Data is hosted primarily on Google Cloud infrastructure and may be processed in Canada or the United States.

Personal information may be stored or processed outside of Canada, including in jurisdictions where data protection laws may differ from those in Canada. In such cases, personal information may be subject to access by foreign courts, law enforcement, or national security authorities in accordance with local laws.

Individuals located in Quebec may request information regarding automated processing and cross-border data handling practices.

7. Data Retention

• Personal information is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law, regulatory obligations, fraud prevention requirements, dispute resolution, or contractual obligations.
• Account deletion requests do not remove information required for compliance, fraud prevention, or legal purposes.
• Non-required data may be removed after periods of inactivity.
• When personal information is no longer required, we will securely delete, anonymize, or destroy it in accordance with our data retention practices and applicable law.

8. Security Safeguards

We implement administrative, technical, and organizational safeguards including:

• Encryption at rest (AES-256)
• Encryption in transit (TLS)
• Role-based access controls
• Multi-factor authentication for administrative accounts
• Secure cloud storage environments
• Access logging and monitoring
• Regular security updates and vulnerability management procedures.

No system can guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials.

8A. Data Breach Notification

While we implement reasonable administrative, technical, and organizational safeguards to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure.

If we become aware of a security incident involving personal information, we will investigate the incident promptly and take reasonable steps to contain, assess, and remediate the issue.

Where required by applicable law, we will notify affected individuals and applicable regulatory authorities of a breach involving personal information where it is determined that the breach creates a real risk of significant harm or where notification is otherwise required by law.

Where appropriate, notifications may include:

• a description of the nature of the incident;
• the categories of personal information involved;
• the steps we have taken or intend to take to mitigate the incident;
• recommendations regarding actions affected individuals may take to reduce potential harm; and
• contact information for obtaining additional information.

We maintain records of security incidents in accordance with applicable legal requirements.

8B. Cookies, Analytics, and Tracking Technologies

The Service uses cookies, software development kits (SDKs), pixels, local storage, and similar technologies (collectively, “Tracking Technologies”) to operate, secure, improve, and market the Service.

Tracking Technologies may be used to:

• authenticate users and maintain secure login sessions;
• remember user preferences and settings;
• improve website and application functionality;
• measure website and application performance;
• understand how users interact with the Service;
• analyze usage trends and platform performance;
• detect security incidents, fraud, and unauthorized activity;
• personalize user experiences where applicable;
• measure the effectiveness of marketing campaigns; and
• deliver relevant communications and promotional content where permitted by applicable law.

The Service may use first-party and third-party Tracking Technologies provided by service providers such as:

• Google Analytics or similar analytics providers;
• Google Cloud Platform;
• Meta Pixel or similar advertising technologies;
• LinkedIn Insight Tag or similar business marketing tools;
• payment processing and fraud prevention providers;
• customer communication and engagement platforms; and
• artificial intelligence and infrastructure service providers where applicable.

These technologies may collect information including:

• IP address;
• browser type and version;
• device identifiers;
• operating system;
• pages viewed and features used;
• session duration;
• referral sources;
• approximate geographic location derived from IP address;
• advertising identifiers where supported by the user’s device; and
• diagnostic and performance information.

Where required by applicable law, we will obtain your consent before placing or enabling non-essential cookies or Tracking Technologies. You may withdraw or modify your consent at any time through available cookie preference tools, browser settings, or mobile device privacy settings, where applicable.

Essential cookies and similar technologies that are necessary for the operation, security, authentication, fraud prevention, or functionality of the Service cannot be disabled without affecting the operation of the Service.

Most web browsers also allow users to control or delete cookies through their browser settings. Mobile devices may provide additional controls for advertising identifiers and application permissions. Please note that disabling certain Tracking Technologies may affect the availability or functionality of certain features of the Service.

9. Your Rights

Subject to applicable Canadian privacy laws, including PIPEDA and applicable provincial privacy legislation, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate, incomplete, or outdated personal information.
• Withdraw your consent to the collection, use, or disclosure of your personal information where consent is the legal basis for processing, subject to legal or contractual restrictions.
• Request deletion of your personal information where retention is no longer necessary and where deletion is permitted by applicable law.
• Request information regarding how your personal information has been used or disclosed.
• Opt out of receiving marketing or promotional communications at any time by using the unsubscribe link included in our communications or by contacting us.
• Request information regarding the use of automated processing or artificial intelligence where applicable.
• Submit a complaint regarding our handling of your personal information.

We will respond to requests within a reasonable timeframe and in accordance with applicable privacy legislation. In some circumstances, we may be unable to fulfill a request where we are legally required or otherwise permitted to retain certain information, including for legal, regulatory, fraud prevention, security, or contractual purposes.

If you are not satisfied with our response to a privacy request or complaint, you may have the right to contact the Office of the Privacy Commissioner of Canada or your applicable provincial privacy regulator.

Individuals located in Quebec may also request information regarding automated decision-making, cross-border transfers of personal information, and the factors, parameters, or principal considerations used in automated processing, where required by applicable law.

10. Account Deletion

You may delete your account through application settings or by contacting:

support@forjyn.com

Certain information will be retained where required for legal, regulatory, fraud prevention, or compliance purposes. Generally, we will keep your personal information for as long as your user account is active. If your user account is deleted, we may keep your data for the limitation period of possible claims. The information contained in the accounting records will be retained in accordance with the law.

11. Communications and Marketing (CASL)

Marketing communications are sent only where users provide consent via an opt-in checkbox during registration. Users may unsubscribe at any time using the unsubscribe link included in communications.

12. Children’s Privacy

The Service is intended only for individuals 18 years of age or older. We do not knowingly collect personal information from minors.

13. Automated Processing and Artificial Intelligence

Artificial intelligence (“AI”) and other automated technologies are integrated throughout the Service to assist users in evaluating opportunities, organizing information, reviewing documents, and improving overall platform functionality.

Depending on the features used, AI tools may process information voluntarily submitted to the Service, including but not limited to:

• user profile information;
• startup profiles and business information;
• investor profile information;
• documents uploaded to due diligence rooms;
• pitch decks, financial information, cap tables, and business materials;
• messages exchanged through the platform;
• notes or written responses submitted by users; and
• where enabled by the user, call recordings, transcripts, or meeting notes uploaded for analysis.

AI functionality may be used to generate summaries, answer questions about uploaded due diligence materials using information contained within those materials, identify relevant information across documents, organize content, provide contextual insights, assist with due diligence reviews, suggest potential matches between users, and support other analytical features made available through the Service.

To provide these features, submitted information may be securely processed by trusted third-party AI service providers acting on our behalf. These providers process information only for the purpose of delivering the requested AI functionality and in accordance with applicable contractual, privacy, and security obligations.

Where users upload recordings, transcripts, or other materials containing information about third parties, the uploading user is responsible for ensuring that all necessary permissions and legally required consents have been obtained before submitting such information to the Service.

AI-generated outputs are intended solely as informational and decision-support tools. They may contain inaccuracies, omissions, or outdated information and should not be relied upon as legal, financial, investment, tax, accounting, or other professional advice. Users remain solely responsible for reviewing all AI-generated content and making their own independent decisions.

AI-generated outputs are not used to make fully automated decisions regarding investment eligibility, regulatory compliance, platform access, account status, or other decisions that produce legal or similarly significant effects without meaningful human involvement.

We may use aggregated, de-identified, or anonymized information to improve and evaluate our AI systems and platform functionality. Forjyn does not use Customer Content to train publicly available artificial intelligence models.

By using AI-enabled features within the Service, you acknowledge that information you voluntarily submit may be processed using artificial intelligence technologies for the purposes described in this Privacy Policy.

14. Changes to This Policy

We may update this Privacy Policy periodically. Updated versions will be posted within the Service with a revised effective date.

15. Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict of law principles.

16. Contact Us

Privacy Officer
Forjyn Technologies Inc.
36 Park Lawn Road, Unit 403
Etobicoke, Ontario M8V 0E5
Email: legal@forjyn.com