Agreement to Our Legal Terms

We are Rember Technologies Inc ('Company', 'we', 'us', or 'our'), a company registered in Canada at 2900 – 550 Burrard Street, Vancouver, British Columbia V6C 0A3.

We operate the websites https://rember.chat and https://rember.tech (collectively, the 'Site'), as well as any other related products and services that refer or link to these legal terms (the 'Legal Terms') (collectively, the 'Services'). These Legal Terms apply equally to all domains operated by the Company. References to 'the Site' include both rember.chat and rember.tech.

Rember is a conversational CRM platform that automatically captures and organizes relationship information from SMS and email communications. The service creates a contact-centric knowledge graph for professionals who manage relationship-driven work, eliminating the need for manual data entry while helping users maintain and strengthen their professional relationships.

You can contact us by phone at +1 (825) 793-2327, email at support@getrember.com, or by mail to 2900 – 550 Burrard Street, Vancouver, British Columbia V6C 0A3, Canada.

These Legal Terms constitute a legally binding agreement made between you, whether personally or on behalf of an entity ('you'), and Rember Technologies Inc, concerning your access to and use of the Services. You agree that by accessing the Services, you have read, understood, and agreed to be bound by all of these Legal Terms. IF YOU DO NOT AGREE WITH ALL OF THESE LEGAL TERMS, THEN YOU ARE EXPRESSLY PROHIBITED FROM USING THE SERVICES AND YOU MUST DISCONTINUE USE IMMEDIATELY.

We will provide you with prior notice of any scheduled changes to the Services you are using. Material changes to these Legal Terms will become effective thirty (30) days after the notice is given. Non-material changes will become effective seven (7) days after notice is given. Changes that apply to new functionality, security updates, and bug fixes will be effective immediately. By continuing to use the Services after the effective date of any changes, you agree to be bound by the modified terms. If you disagree with such changes, you may terminate Services as per the section 'TERM AND TERMINATION'.

The Services are intended for users who are at least 18 years old. Persons under the age of 18 are not permitted to use or register for the Services.

We recommend that you print a copy of these Legal Terms for your records.

1. Our Services

The information provided when using the Services is not intended for distribution to or use by any person or entity in any jurisdiction or country where such distribution or use would be contrary to law or regulation or which would subject us to any registration requirement within such jurisdiction or country. Accordingly, those persons who choose to access the Services from other locations do so on their own initiative and are solely responsible for compliance with local laws, if and to the extent local laws are applicable.

The Services are not tailored to comply with industry-specific regulations (Health Insurance Portability and Accountability Act (HIPAA), Federal Information Security Management Act (FISMA), etc.), so if your interactions would be subjected to such laws, you may not use the Services. You may not use the Services in a way that would violate the Gramm-Leach-Bliley Act (GLBA).

2. Intellectual Property Rights

Our intellectual property

We are the owner or the licensee of all intellectual property rights in our Services, including all source code, databases, functionality, software, website designs, audio, video, text, photographs, and graphics in the Services (collectively, the 'Content'), as well as the trademarks, service marks, and logos contained therein (the 'Marks').

Our Content and Marks are protected by copyright and trademark laws (and various other intellectual property rights and unfair competition laws) and treaties in the United States and around the world.

The Content and Marks are provided in or through the Services 'AS IS' for your personal, non-commercial use or internal business purpose only.

Your use of our Services

Subject to your compliance with these Legal Terms, including the 'PROHIBITED ACTIVITIES' section below, we grant you a non-exclusive, non-transferable, revocable licence to:

• access the Services; and
• download or print a copy of any portion of the Content to which you have properly gained access,

solely for your personal, non-commercial use or internal business purpose.

Except as set out in this section or elsewhere in our Legal Terms, no part of the Services and no Content or Marks may be copied, reproduced, aggregated, republished, uploaded, posted, publicly displayed, encoded, translated, transmitted, distributed, sold, licensed, or otherwise exploited for any commercial purpose whatsoever, without our express prior written permission.

If you wish to make any use of the Services, Content, or Marks other than as set out in this section or elsewhere in our Legal Terms, please address your request to: support@getrember.com. If we ever grant you the permission to post, reproduce, or publicly display any part of our Services or Content, you must identify us as the owners or licensors of the Services, Content, or Marks and ensure that any copyright or proprietary notice appears or is visible on posting, reproducing, or displaying our Content.

We reserve all rights not expressly granted to you in and to the Services, Content, and Marks.

Any breach of these Intellectual Property Rights will constitute a material breach of our Legal Terms and your right to use our Services will terminate immediately.

Your submissions

Please review this section and the 'PROHIBITED ACTIVITIES' section carefully prior to using our Services to understand the (a) rights you give us and (b) obligations you have when you post or upload any content through the Services.

Submissions: By directly sending us any question, comment, suggestion, idea, feedback, or other information about the Services ('Submissions'), you agree to assign to us all intellectual property rights in such Submission. You agree that we shall own this Submission and be entitled to its unrestricted use and dissemination for any lawful purpose, commercial or otherwise, without acknowledgment or compensation to you.

You are responsible for what you post or upload: By sending us Submissions through any part of the Services you:

• confirm that you have read and agree with our 'PROHIBITED ACTIVITIES' and will not post, send, publish, upload, or transmit through the Services any Submission that is illegal, harassing, hateful, harmful, defamatory, obscene, bullying, abusive, discriminatory, threatening to any person or group, sexually explicit, false, inaccurate, deceitful, or misleading;
• to the extent permissible by applicable law, waive any and all moral rights to any such Submission;
• warrant that any such Submissions are original to you or that you have the necessary rights and licences to submit such Submissions and that you have full authority to grant us the above-mentioned rights in relation to your Submissions; and
• warrant and represent that your Submissions do not constitute confidential information.

You are solely responsible for your Submissions and you expressly agree to reimburse us for any and all losses that we may suffer because of your breach of (a) this section, (b) any third party's intellectual property rights, or (c) applicable law.

3. User Representations

By using the Services, you represent and warrant that: (1) all registration information you submit will be true, accurate, current, and complete; (2) you will maintain the accuracy of such information and promptly update such registration information as necessary; (3) you have the legal capacity and you agree to comply with these Legal Terms; (4) you are not a minor in the jurisdiction in which you reside; (5) you will not access the Services through automated or non-human means, whether through a bot, script, or otherwise; (6) you will not use the Services for any illegal or unauthorised purpose; and (7) your use of the Services will not violate any applicable law or regulation.

If you provide any information that is untrue, inaccurate, not current, or incomplete, we have the right to suspend or terminate your account and refuse any and all current or future use of the Services (or any portion thereof).

4. User Registration

You are required to register to use the Services. Registration may be completed through a passwordless authentication flow (such as email-based magic links, OTPs, or single sign-on through a supported provider such as Google). You are responsible for maintaining the security of your account credentials and authentication methods, and for all activity that occurs under your account. We reserve the right to remove, reclaim, or change a username you select if we determine, in our sole discretion, that such username is inappropriate, obscene, or otherwise objectionable.

5. Purchases and Payment

We accept the following forms of payment:

• Credit Cards (Visa, Mastercard, American Express, and other major networks)
• Klarna
• Affirm
• Apple Pay
• Link
• Bancontact
• EPS

Payment Processing

All payments are processed through Stripe, Inc. ('Stripe'). By making a purchase through the Services, you agree to be bound by Stripe's Terms of Service and Privacy Policy as they may be modified by Stripe from time to time. We do not store your full payment card details on our servers; this information is handled directly by Stripe in accordance with the Payment Card Industry Data Security Standard (PCI DSS). Stripe may collect certain information necessary to process your payment, including your name, billing address, and payment card details. For information about how Stripe uses your data, please refer to Stripe's Privacy Policy.

You agree to provide current, complete, and accurate purchase and account information for all purchases made via the Services. You further agree to promptly update account and payment information, including email address, payment method, and payment card expiration date, so that we can complete your transactions and contact you as needed. Sales tax will be added to the price of purchases as deemed required by us. We may change prices at any time. All payments shall be in Canadian Dollars.

You agree to pay all charges at the prices then in effect for your purchases and any applicable shipping fees, and you authorise us to charge your chosen payment provider for any such amounts upon placing your order. We reserve the right to correct any errors or mistakes in pricing, even if we have already requested or received payment.

We reserve the right to refuse any order placed through the Services. We may, in our sole discretion, limit or cancel quantities purchased per person, per household, or per order. These restrictions may include orders placed by or under the same customer account, the same payment method, and/or orders that use the same billing or shipping address. We reserve the right to limit or prohibit orders that, in our sole judgement, appear to be placed by dealers, resellers, or distributors.

6. Subscriptions

Billing and Renewal

Your subscription will continue and automatically renew unless cancelled. You consent to our charging your payment method on a recurring basis without requiring your prior approval for each recurring charge, until such time as you cancel the applicable order. The length of your billing cycle is monthly.

Free Trial

We offer a 30-day free trial to new users who register with the Services. A valid payment method must be provided prior to the end of the free trial period. Your account will be charged according to your chosen subscription plan at the end of the free trial. If a valid payment method is not provided before the free trial expires, we reserve the right to suspend or revoke your access to the Services until a valid payment method is provided and an active subscription is established.

Cancellation

You can cancel your subscription at any time by logging into your account. Your cancellation will take effect at the end of the current paid term. Refunds may be available where required by applicable law, including but not limited to circumstances where the Services do not perform materially as described. If you have any questions or are unsatisfied with our Services, please email us at support@getrember.com.

Fee Changes

We may, from time to time, make changes to the subscription fee and will communicate any price changes to you in accordance with applicable law.

7. Communication Processing and Consent

Consent to Communication Processing

The Services function by processing communication data that you proactively share with the platform. You share communications with Rember by adding Rember's designated phone number to SMS group conversations or by including Rember's designated email address in email threads ('Communication Data'). You may also connect third-party accounts (such as your Google account) to enable the Services to access communications from those platforms.

By sharing communications with Rember or connecting third-party accounts, you expressly and affirmatively consent to the following:

• The Services will access and read the content of communications you share with or make accessible to Rember;
• The Services will extract contact information, relationship details, meeting references, action items, and other structured data from those communications;
• The extracted information will be stored, organized, and presented to you through the Services' contact-centric knowledge graph;
• The Services may use natural language processing, machine learning, and other automated technologies to analyse your communications;
• Communication Data is stored at rest in Canada and is processed on application servers located in the United States, as described in Section 15 and in our Privacy Policy; and
• SMS data is processed through Twilio, Inc. and email data is processed through Postmark (ActiveCampaign, LLC), which serve as our communication infrastructure providers.

Scope of Access

You control what communications are processed by the Services. You may add or remove Rember from SMS group conversations and email threads at any time. You may also connect or disconnect third-party accounts (such as Google) through your account settings. Removing Rember from conversations or disconnecting accounts will stop the processing of new communications, but will not automatically delete previously processed data (see Section 10, Data Retention, Deletion, and Portability).

When you connect a Google account, you authorize Rember to access your Google data through the Google APIs to provide the Services. Rember's access to and use of that data is subject to Google's terms and the Google API Services User Data Policy, including its Limited Use requirements, and is described further in our Privacy Policy.

Your Obligations Regarding Communication Partners

Your SMS and email communications involve other individuals ('Communication Partners') who have not agreed to these Legal Terms. You are solely responsible for:

• Ensuring that your use of the Services complies with all applicable electronic surveillance, wiretapping, and interception laws in your jurisdiction and the jurisdictions of your Communication Partners;
• Informing your Communication Partners, where required by applicable law, that their communications with you may be processed by a third-party service when you add Rember to a group conversation or email thread;
• Obtaining any consents required by applicable law from your Communication Partners before sharing communications with the Services; and
• Complying with all applicable two-party (or all-party) consent requirements for the recording or interception of communications.

You represent and warrant that you have the legal right and authority to permit the Services to access and process the communications connected to your account. You agree to indemnify and hold us harmless from any claims arising from your failure to comply with this section.

Jurisdictional Notice

Certain jurisdictions, including but not limited to Canada (Criminal Code §184), the United States (Federal Wiretap Act, 18 U.S.C. §2511), and various U.S. states (including California, Florida, Illinois, and others), impose restrictions on the interception, recording, or processing of electronic communications. It is your responsibility to understand and comply with the laws applicable to you and your Communication Partners. We do not provide legal advice regarding your compliance obligations.

8. Third-Party Data

Processing of Contact Data

The Services process personal information about individuals with whom you communicate ('Contacts'). This information may include names, email addresses, phone numbers, professional titles, organizations, and information derived from the content of your communications with those individuals ('Contact Data').

Our Respective Roles

Canadian privacy legislation does not divide the parties into 'controllers' and 'processors'. It asks which organization has control of personal information, and it treats an organization that handles information on another's behalf as a service provider or mandatary. Applying that test to the Services:

• For Contact Data as we receive it from the communications accounts you connect, we act as your service provider. You decide which accounts to connect and when, and therefore which communications reach the Services at all. We handle that information on your behalf and in accordance with these Legal Terms.
• For information the Services generate about Contacts — summaries, extracted entities, memories, relationship context, and other inferences drawn from your communications — we have control. We determine what is produced, how it is produced, and how long it is kept, and we are accountable for it accordingly.
• For information we collect about you as a user of the Services — account information, usage data, and billing information — we have control in our own right.

Consent

Consent to the processing of a Contact's personal information belongs to that Contact — it is theirs to give and theirs to withdraw. As the account holder, you are responsible for having obtained it: for ensuring you have the consent or other lawful authority required to bring your Contacts' information into the Services and to use it there. The relationship with your Contacts is yours, and the Services act as a system of record for it.

We process Contact Data and present it back to you so that you can carry on the relationships you already have with the people you communicate with. We do not sell Contact Data, and we do not use it to train general-purpose models.

Your Responsibilities

As the account holder, you are responsible for:

• Having the legal right and authority to connect your communications accounts to the Services, as set out in Section 7;
• Meeting the consent requirements that apply to the recording, interception, and sharing of communications in your jurisdiction and in your Contacts' jurisdictions, as set out in Section 7;
• Having the consent or other lawful authority required to bring your Contacts' personal information into the Services and to use it there; and
• Using the Contact Data the Services present to you consistently with applicable law and with any professional or relationship obligations you owe those individuals.

Requests From Your Contacts

If we receive a request from one of your Contacts regarding their personal information — access, correction, deletion, or withdrawal of consent — we will acknowledge it and respond within the time applicable law allows — ordinarily thirty (30) days, extended only where the law permits and on notice to the individual before that period elapses. Because that information reached us through your account, answering the request will usually require your involvement, and we will notify you and work with you to respond. Where the request concerns information the Services generated rather than information you supplied, or where applicable law requires us to answer the individual directly, we will do so and will tell you that we have.

You can view, correct, and delete individual contact records — and the information the Services generated about them — at any time from your account settings, and deleting your account removes them entirely. Those controls are the primary route by which a Contact's request is fulfilled. Section 10 of our Privacy Policy describes how we handle these requests and the limited circumstances in which we cannot fulfil one.

9. Data Security

We implement and maintain appropriate technical and organizational measures to protect the security, confidentiality, and integrity of your data, including Communication Data and Contact Data. These measures include:

• Encryption of data in transit using Transport Layer Security (TLS), and encryption at rest applied by our storage providers;
• An additional layer of application-level AES-256-GCM encryption over the most sensitive categories of data — message content, text extracted from documents, document summaries, and connected-account access tokens — using a key held outside the database. Original document files are protected by storage-provider encryption at rest rather than by this additional layer;
• Access controls that limit access to personal data to authorized personnel on a need-to-know basis;
• Security review of our systems and of changes to them; and
• Incident response procedures for the detection, investigation, and remediation of security incidents.

Security Breach Notification

In the event of a security breach that affects your personal data or Communication Data, we will notify you without undue delay and in any event within seventy-two (72) hours of becoming aware of the breach, to the extent we are able to identify affected users. Our notification will include, to the extent known: (a) the nature of the breach; (b) the categories and approximate number of data records affected; (c) the likely consequences of the breach; and (d) the measures taken or proposed to address the breach. We will cooperate with you in fulfilling any breach notification obligations you may have under applicable law.

10. Data Retention, Deletion, and Portability

Retention During Active Use

We retain your account data, Communication Data, and Contact Data for as long as your account remains active and as necessary to provide the Services. You may delete specific Contact records or Communication Data through the Services' user interface at any time.

Retention After Account Cancellation

Upon cancellation of your account, we will retain your data for a period of thirty (30) days to allow for account reactivation. After this window, we will delete or anonymize your personal data, Communication Data, and Contact Data following account closure or upon a verified deletion request, except where retention is required by applicable law, regulation, or legal proceedings.

Data Export and Portability

You may generate a downloadable copy of your data at any time from your account settings, in a structured, commonly used, machine-readable format. The export covers your contacts, conversations, messages, memories, tasks, consent records, and your original document files, together with a manifest. It does not include your subscription and billing records or the technical headers of your email messages. Exports are limited to one per twenty-four hours and each download link expires after seven days.

Data Deletion

You may delete your account and its associated data from your account settings. Deletion is permanent and requires you to reauthenticate before it proceeds. We send you an email confirming completion. If you cannot access your account, or would prefer we act on your behalf, contact us at support@getrember.com and we will process the request within thirty (30) days, subject to any applicable legal retention obligations.

11. AI and Automated Processing

The Services use artificial intelligence, machine learning, and natural language processing technologies ('AI Technologies') to provide their core functionality, including:

• Extracting contact information, relationships, and contextual data from your communications;
• Organizing and categorizing contact records and relationship information;
• Generating summaries, insights, and suggestions based on your communication patterns; and
• Identifying action items, follow-ups, and scheduling information from your messages.

The outputs of our AI Technologies are provided as informational tools and should not be relied upon as the sole basis for important business or personal decisions. AI-generated outputs may be incomplete, inaccurate, or missing relevant context. You should review and verify AI-generated information before acting on it.

Our AI Technologies are provided by the following third-party service providers, and your use of the Services is subject to their respective terms:

• Google Cloud AI — Google Cloud Terms of Service;
• Anthropic — Anthropic Terms of Service; and
• OpenAI — OpenAI Terms of Use.

Requests to the Anthropic and OpenAI models above are routed through OpenRouter, Inc., and our AI features are monitored using Langfuse for observability and reliability. We do not use your Communication Data or Contact Data to develop, train, fine-tune, or improve general-purpose or foundational AI models. Your data is transmitted to these providers solely to provide the Services to you. For more information about how we use AI Technologies and the providers involved, please refer to our Privacy Policy at https://rember.chat/privacy.

AI-generated content — including any email drafts the Services create via Gmail compose — may contain errors, omissions, or inaccuracies. You are responsible for reviewing any AI-drafted message for accuracy and appropriateness before it is sent, and for ensuring that messages you send through the Services comply with applicable law and do not mislead their recipients.

12. Prohibited Activities

You may not access or use the Services for any purpose other than that for which we make the Services available. The Services may not be used in connection with any commercial endeavours except those that are specifically endorsed or approved by us.

As a user of the Services, you agree not to:

• Systematically retrieve data or other content from the Services to create or compile, directly or indirectly, a collection, compilation, database, or directory without written permission from us.
• Trick, defraud, or mislead us and other users, especially in any attempt to learn sensitive account information such as user passwords.
• Circumvent, disable, or otherwise interfere with security-related features of the Services, including features that prevent or restrict the use or copying of any Content or enforce limitations on the use of the Services and/or the Content contained therein.
• Disparage, tarnish, or otherwise harm, in our opinion, us and/or the Services.
• Use any information obtained from the Services in order to harass, abuse, or harm another person.
• Make improper use of our support services or submit false reports of abuse or misconduct.
• Use the Services in a manner inconsistent with any applicable laws or regulations.
• Engage in unauthorised framing of or linking to the Services.
• Upload or transmit (or attempt to upload or to transmit) viruses, Trojan horses, or other material, including excessive use of capital letters and spamming (continuous posting of repetitive text), that interferes with any party's uninterrupted use and enjoyment of the Services or modifies, impairs, disrupts, alters, or interferes with the use, features, functions, operation, or maintenance of the Services.
• Engage in any automated use of the system, such as using scripts to send comments or messages, or using any data mining, robots, or similar data gathering and extraction tools.
• Delete the copyright or other proprietary rights notice from any Content.
• Attempt to impersonate another user or person or use the username of another user.
• Upload or transmit (or attempt to upload or to transmit) any material that acts as a passive or active information collection or transmission mechanism, including without limitation, clear graphics interchange formats ('gifs'), 1x1 pixels, web bugs, cookies, or other similar devices (sometimes referred to as 'spyware' or 'passive collection mechanisms' or 'pcms').
• Interfere with, disrupt, or create an undue burden on the Services or the networks or services connected to the Services.
• Harass, annoy, intimidate, or threaten any of our employees or agents engaged in providing any portion of the Services to you.
• Attempt to bypass any measures of the Services designed to prevent or restrict access to the Services, or any portion of the Services.
• Copy or adapt the Services' software, including but not limited to Flash, PHP, HTML, JavaScript, or other code.
• Except as permitted by applicable law, decipher, decompile, disassemble, or reverse engineer any of the software comprising or in any way making up a part of the Services.
• Except as may be the result of standard search engine or Internet browser usage, use, launch, develop, or distribute any automated system, including without limitation, any spider, robot, cheat utility, scraper, or offline reader that accesses the Services, or use or launch any unauthorised script or other software.
• Use a buying agent or purchasing agent to make purchases on the Services.
• Make any unauthorised use of the Services, including collecting usernames and/or email addresses of users by electronic or other means for the purpose of sending unsolicited email, or creating user accounts by automated means or under false pretences.
• Use the Services as part of any effort to compete with us or otherwise use the Services and/or the Content for any revenue-generating endeavour or commercial enterprise.

In addition, given the nature of the Services and the sensitive data they process, you specifically agree not to:

• Use the Services to monitor, surveil, or track individuals without their knowledge or in violation of applicable law.
• Use the Services to facilitate stalking, harassment, or intimidation through the exploitation of relationship data or communication patterns.
• Connect communications accounts belonging to other individuals without their express permission.
• Use the Services to process communications of individuals known to be minors (under the age of 18).
• Use Contact Data or Communication Data for purposes unrelated to your legitimate professional relationship management, including but not limited to selling, sharing, or disclosing Contact Data to third parties for marketing or commercial purposes.
• Use the Services to collect or compile dossiers on individuals for purposes of discrimination, blackmail, or coercion.
• Attempt to access, view, or export data belonging to other users of the Services.
• Use the Services, including any Gmail compose or send functionality, in any manner that violates Google's terms of service or the Google API Services User Data Policy.
• Use the Services to send spam, unsolicited bulk messages, or any communication in violation of applicable anti-spam laws, including CASL in Canada and CAN-SPAM in the United States.

13. User Data License

License to Process Your Data

By connecting your communication accounts to the Services, you grant us a limited, non-exclusive, non-transferable licence to access, read, analyse, process, store, and organize your Communication Data solely for the purpose of providing the Services to you. This licence is limited to the following purposes:

• Extracting structured data from your communications to populate your contact knowledge graph;
• Storing and organizing Contact Data and relationship information derived from your communications;
• Generating insights, summaries, and notifications based on your communication data; and
• Maintaining and improving the functionality of the Services for your account.

Limitations on Our Use

We will not: (a) sell your Communication Data or Contact Data to third parties; (b) use your Communication Data or Contact Data for advertising or marketing purposes unrelated to the Services; (c) share your Communication Data or Contact Data with third parties except as necessary to provide the Services (e.g., Twilio for SMS processing, Postmark for email processing, our AI providers for analysis (with routing via OpenRouter and observability via Langfuse), Stripe for payments, Scalekit for connected-account token storage and connector request execution, WorkOS for identity, and our hosting and storage providers) or as required by law; or (d) use your Communication Data to develop, train, fine-tune, or improve general-purpose or foundational machine learning models.

Feedback

By submitting suggestions or other feedback regarding the Services, you agree that we can use and share such feedback for any purpose without compensation to you.

14. Services Management

We reserve the right, but not the obligation, to: (1) monitor the Services for violations of these Legal Terms; (2) take appropriate legal action against anyone who, in our sole discretion, violates the law or these Legal Terms, including without limitation, reporting such user to law enforcement authorities; (3) in our sole discretion and without limitation, refuse, restrict access to, limit the availability of, or disable (to the extent technologically feasible) any of your data or content or any portion thereof; (4) in our sole discretion and without limitation, notice, or liability, to remove from the Services or otherwise disable all files and content that are excessive in size or are in any way burdensome to our systems; and (5) otherwise manage the Services in a manner designed to protect our rights and property and to facilitate the proper functioning of the Services.

15. Privacy Policy

We care about data privacy and security. By using the Services, you agree to be bound by our Privacy Policy posted at https://rember.chat/privacy, which is incorporated into these Legal Terms.

Please be advised that your data is stored and processed in more than one country, and that these are separate questions. Your records and documents are stored at rest in Canada, in the Montreal region. Our application servers run in the United States, so your data is processed there. Email and SMS are relayed through providers in the United States, where content is held only transiently. Section 8 of our Privacy Policy sets this out in full, including the fact that storage in Canada does not place data beyond the reach of United States law, because our Canadian-region providers are American companies.

The Services are offered to residents of Canada and the United States. They are not directed to individuals in the European Economic Area, the United Kingdom, or Switzerland, and we do not market, offer, or monitor behaviour in those regions. If you access the Services from another region, you are transferring your data to Canada and the United States, and you are responsible for compliance with any local requirements that apply to you. Our cross-border transfer position is described in Section 16 and in Section 8 of the Privacy Policy.

16. Compliance with Privacy Laws

PIPEDA and Canadian Privacy Law

As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (PIPA). In accordance with these laws:

• We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances and with the knowledge and consent of the individual (or as otherwise permitted by law);
• We limit the collection of personal information to what is necessary for the identified purposes;
• We protect personal information with security safeguards appropriate to the sensitivity of the information (see Section 9);
• We make information about our privacy policies and practices readily available through our Privacy Policy; and
• Individuals may contact our Privacy Officer at privacy@getrember.com to request access to or correction of their personal information, to inquire about our privacy practices, or to file a complaint.

Cross-Border Transfers

PIPEDA does not require that personal information remain in Canada. It permits transfer to another country provided the organization is transparent about the transfer, obtains a comparable level of protection by contract, and remains accountable for the information throughout. Section 8 of our Privacy Policy discloses where your information is stored and processed, our agreements with each provider carry the protection obligation, and Rember remains accountable to you for your personal information while a service provider holds it.

Quebec (Law 25)

If you are a resident of Quebec, the Act respecting the protection of personal information in the private sector, as amended by Law 25, applies to our processing of your personal information in addition to PIPEDA. In accordance with that Act:

• We have designated a person responsible for the protection of personal information, whose title and contact information are published in our Privacy Policy;
• Before communicating personal information outside Quebec, we assess whether it will receive adequate protection in light of its sensitivity, the purposes for which it will be used, the protections it will receive, and the legal framework of the destination, and we carry out the transfer under a written agreement that takes the result of that assessment into account. Section 8 of our Privacy Policy is the notice of those transfers;
• Where a decision affecting you is based exclusively on automated processing, you have the right to be informed of it and to submit observations to a member of our personnel who can review it. The Services do not make such decisions today; Section 6 of our Privacy Policy describes the automated processing they do perform;
• You have the right to request that we cease disseminating your personal information or de-index a hyperlink that provides access to it, in the circumstances the Act provides; and
• You may file a complaint with the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).

CASL Compliance

Canada's Anti-Spam Legislation governs commercial electronic messages sent to Canadian recipients. Most messages the Services send you are not commercial electronic messages: one-time passcodes, security alerts, billing and account notices, and the agent's replies to messages you initiated are sent to operate the Services you have requested.

Where we do send a commercial electronic message, we send it on the basis of consent. You give express consent by opting in at signup, in your account settings, or by replying to a message that asks for it. Every commercial message identifies Rember, provides our contact information, and includes a functioning unsubscribe mechanism that takes effect without charge. You may withdraw consent at any time by replying STOP to any SMS message, using the unsubscribe link in any email, or writing to privacy@getrember.com.

The processing of your existing communications by the Services does not constitute the sending of commercial electronic messages under CASL. Messages you send to your own Contacts through the Services are sent by you, not by us, and you are responsible for holding the consent those messages require.

Social Insurance Numbers

We never require a Social Insurance Number to use the Services and we do not ask for one. Where a SIN or other government identifier arrives inside a document you send us — a Notice of Assessment or a T4 slip, for example — we do not use it to identify you, do not index or search on it, do not use it as an account identifier, and do not disclose it to any third party beyond what is necessary to provide the Services.

CCPA/CPRA (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA):

• Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it;
• Right to delete: You may request the deletion of your personal information, subject to certain exceptions;
• Right to correct: You may request correction of inaccurate personal information;
• Right to opt-out: You may opt out of the sale or sharing of your personal information. We do not sell personal information. To the extent any disclosure constitutes 'sharing' under the CCPA, you may opt out by contacting us at privacy@getrember.com;
• Right to limit use of sensitive personal information: Communication Data may constitute sensitive personal information under the CCPA. You may limit the use of sensitive personal information to what is necessary to perform the Services; and
• Non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a request, contact us at privacy@getrember.com or call +1 (825) 793-2327. We will acknowledge receipt of your request within ten (10) business days and respond substantively within forty-five (45) calendar days.

17. Term and Termination

These Legal Terms shall remain in full force and effect while you use the Services. WITHOUT LIMITING ANY OTHER PROVISION OF THESE LEGAL TERMS, WE RESERVE THE RIGHT TO, IN OUR SOLE DISCRETION AND WITHOUT NOTICE OR LIABILITY, DENY ACCESS TO AND USE OF THE SERVICES (INCLUDING BLOCKING CERTAIN IP ADDRESSES), TO ANY PERSON FOR ANY REASON OR FOR NO REASON, INCLUDING WITHOUT LIMITATION FOR BREACH OF ANY REPRESENTATION, WARRANTY, OR COVENANT CONTAINED IN THESE LEGAL TERMS OR OF ANY APPLICABLE LAW OR REGULATION. WE MAY TERMINATE YOUR USE OR PARTICIPATION IN THE SERVICES OR DELETE YOUR ACCOUNT AND ANY CONTENT OR INFORMATION THAT YOU POSTED AT ANY TIME, WITHOUT WARNING, IN OUR SOLE DISCRETION.

If we terminate or suspend your account for any reason, you are prohibited from registering and creating a new account under your name, a fake or borrowed name, or the name of any third party, even if you may be acting on behalf of the third party. In addition to terminating or suspending your account, we reserve the right to take appropriate legal action, including without limitation pursuing civil, criminal, and injunctive redress.

Upon termination, your right to use the Services will immediately cease. Your data will be handled in accordance with Section 10 (Data Retention, Deletion, and Portability).

18. Modifications and Interruptions

We reserve the right to change, modify, or remove the contents of the Services at any time or for any reason at our sole discretion without notice. However, we have no obligation to update any information on our Services. We will not be liable to you or any third party for any modification, price change, suspension, or discontinuance of the Services.

We cannot guarantee the Services will be available at all times. We may experience hardware, software, or other problems or need to perform maintenance related to the Services, resulting in interruptions, delays, or errors. We reserve the right to change, revise, update, suspend, discontinue, or otherwise modify the Services at any time or for any reason without notice to you. You agree that we have no liability whatsoever for any loss, damage, or inconvenience caused by your inability to access or use the Services during any downtime or discontinuance of the Services. Nothing in these Legal Terms will be construed to obligate us to maintain and support the Services or to supply any corrections, updates, or releases in connection therewith.

19. Service Availability

We use commercially reasonable efforts to ensure the Services are available and operational. While we do not guarantee specific uptime percentages, we target availability of at least 99.9% measured on a monthly basis, excluding scheduled maintenance windows.

Scheduled maintenance will be performed during off-peak hours where possible, and we will endeavour to provide at least twenty-four (24) hours' advance notice for planned maintenance that may affect service availability. Emergency maintenance required for security or stability may be performed without advance notice.

In the event of a prolonged outage (exceeding seventy-two (72) consecutive hours) not caused by force majeure, you may request a pro-rata service credit for the affected period by contacting support@getrember.com.

20. Governing Law

These Legal Terms shall be governed by and construed in accordance with the laws of the Province of British Columbia and the federal laws of Canada applicable therein, without regard to conflict of law principles. Rember Technologies Inc and yourself irrevocably consent that the courts of the Province of British Columbia, sitting in Vancouver, shall have exclusive jurisdiction to resolve any dispute which may arise in connection with these Legal Terms.

21. Dispute Resolution

Informal Negotiations

To expedite resolution and control the cost of any dispute, controversy, or claim related to these Legal Terms (each a 'Dispute' and collectively, the 'Disputes') brought by either you or us (individually, a 'Party' and collectively, the 'Parties'), the Parties agree to first attempt to negotiate any Dispute (except those Disputes expressly provided below) informally for at least sixty (60) days before initiating mediation or arbitration. Such informal negotiations commence upon written notice from one Party to the other Party.

Mediation

If informal negotiations do not resolve the Dispute within sixty (60) days, either Party may refer the Dispute to mediation administered by a mediator mutually agreed upon by the Parties, or if the Parties cannot agree, appointed by the ADR Institute of Canada. Mediation shall take place in Vancouver, British Columbia, or by videoconference if mutually agreed. Each Party shall bear its own costs of mediation, and the Parties shall share equally the mediator's fees.

Binding Arbitration

If mediation does not resolve the Dispute, any dispute arising out of or in connection with these Legal Terms, including any question regarding its existence, validity, or termination, shall be referred to and finally resolved by binding arbitration administered by the ADR Institute of Canada under its Arbitration Rules. The number of arbitrators shall be one (1). The seat of arbitration shall be Vancouver, British Columbia, Canada. The language of the proceedings shall be English. The governing law of these Legal Terms shall be the substantive law of the Province of British Columbia and the federal laws of Canada applicable therein.

Restrictions

The Parties agree that any arbitration shall be limited to the Dispute between the Parties individually. To the full extent permitted by law, (a) no arbitration shall be joined with any other proceeding; (b) there is no right or authority for any Dispute to be arbitrated on a class-action basis or to utilise class action procedures; and (c) there is no right or authority for any Dispute to be brought in a purported representative capacity on behalf of the general public or any other persons.

Exceptions to Informal Negotiations and Arbitration

The Parties agree that the following Disputes are not subject to the above provisions concerning informal negotiations and binding arbitration: (a) any Disputes seeking to enforce or protect, or concerning the validity of, any of the intellectual property rights of a Party; (b) any Dispute related to, or arising from, allegations of theft, piracy, invasion of privacy, or unauthorised use; and (c) any claim for injunctive relief. If this provision is found to be illegal or unenforceable, then neither Party will elect to arbitrate any Dispute falling within that portion of this provision found to be illegal or unenforceable and such Dispute shall be decided by a court of competent jurisdiction within the courts listed for jurisdiction above, and the Parties agree to submit to the personal jurisdiction of that court.

22. Corrections

There may be information on the Services that contains typographical errors, inaccuracies, or omissions, including descriptions, pricing, availability, and various other information. We reserve the right to correct any errors, inaccuracies, or omissions and to change or update the information on the Services at any time, without prior notice.

23. Disclaimer

THE SERVICES ARE PROVIDED ON AN AS-IS AND AS-AVAILABLE BASIS. YOU AGREE THAT YOUR USE OF THE SERVICES WILL BE AT YOUR SOLE RISK. TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, IN CONNECTION WITH THE SERVICES AND YOUR USE THEREOF, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE MAKE NO WARRANTIES OR REPRESENTATIONS ABOUT THE ACCURACY OR COMPLETENESS OF THE SERVICES' CONTENT OR THE CONTENT OF ANY WEBSITES OR MOBILE APPLICATIONS LINKED TO THE SERVICES AND WE WILL ASSUME NO LIABILITY OR RESPONSIBILITY FOR ANY (1) ERRORS, MISTAKES, OR INACCURACIES OF CONTENT AND MATERIALS, (2) PERSONAL INJURY OR PROPERTY DAMAGE, OF ANY NATURE WHATSOEVER, RESULTING FROM YOUR ACCESS TO AND USE OF THE SERVICES, (3) ANY UNAUTHORISED ACCESS TO OR USE OF OUR SECURE SERVERS AND/OR ANY AND ALL PERSONAL INFORMATION AND/OR FINANCIAL INFORMATION STORED THEREIN, (4) ANY INTERRUPTION OR CESSATION OF TRANSMISSION TO OR FROM THE SERVICES, (5) ANY BUGS, VIRUSES, TROJAN HORSES, OR THE LIKE WHICH MAY BE TRANSMITTED TO OR THROUGH THE SERVICES BY ANY THIRD PARTY, AND/OR (6) ANY ERRORS OR OMISSIONS IN ANY CONTENT AND MATERIALS OR FOR ANY LOSS OR DAMAGE OF ANY KIND INCURRED AS A RESULT OF THE USE OF ANY CONTENT POSTED, TRANSMITTED, OR OTHERWISE MADE AVAILABLE VIA THE SERVICES. WE DO NOT WARRANT, ENDORSE, GUARANTEE, OR ASSUME RESPONSIBILITY FOR ANY PRODUCT OR SERVICE ADVERTISED OR OFFERED BY A THIRD PARTY THROUGH THE SERVICES, ANY HYPERLINKED WEBSITE, OR ANY WEBSITE OR MOBILE APPLICATION FEATURED IN ANY BANNER OR OTHER ADVERTISING, AND WE WILL NOT BE A PARTY TO OR IN ANY WAY BE RESPONSIBLE FOR MONITORING ANY TRANSACTION BETWEEN YOU AND ANY THIRD-PARTY PROVIDERS OF PRODUCTS OR SERVICES. AS WITH THE PURCHASE OF A PRODUCT OR SERVICE THROUGH ANY MEDIUM OR IN ANY ENVIRONMENT, YOU SHOULD USE YOUR BEST JUDGEMENT AND EXERCISE CAUTION WHERE APPROPRIATE.

24. Limitations of Liability

IN NO EVENT WILL WE OR OUR DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL, OR PUNITIVE DAMAGES, INCLUDING LOST PROFIT, LOST REVENUE, LOSS OF DATA, OR OTHER DAMAGES ARISING FROM YOUR USE OF THE SERVICES, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. NOTWITHSTANDING ANYTHING TO THE CONTRARY CONTAINED HEREIN, OUR LIABILITY TO YOU FOR ANY CAUSE WHATSOEVER AND REGARDLESS OF THE FORM OF THE ACTION, WILL AT ALL TIMES BE LIMITED TO THE AMOUNT PAID, IF ANY, BY YOU TO US DURING THE THREE (3) MONTH PERIOD PRIOR TO ANY CAUSE OF ACTION ARISING. CERTAIN US STATE LAWS AND INTERNATIONAL LAWS DO NOT ALLOW LIMITATIONS ON IMPLIED WARRANTIES OR THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES. IF THESE LAWS APPLY TO YOU, SOME OR ALL OF THE ABOVE DISCLAIMERS OR LIMITATIONS MAY NOT APPLY TO YOU, AND YOU MAY HAVE ADDITIONAL RIGHTS.

25. Indemnification

You agree to defend, indemnify, and hold us harmless, including our subsidiaries, affiliates, and all of our respective officers, agents, partners, and employees, from and against any loss, damage, liability, claim, or demand, including reasonable attorneys' fees and expenses, made by any third party due to or arising out of: (1) use of the Services; (2) breach of these Legal Terms; (3) any breach of your representations and warranties set forth in these Legal Terms; (4) your violation of the rights of a third party, including but not limited to intellectual property rights; (5) any overt harmful act toward any other user of the Services with whom you connected via the Services; or (6) your failure to comply with your obligations under Sections 7 (Communication Processing and Consent) and 8 (Third-Party Data), including any claims by your Communication Partners or Contacts arising from the processing of their data through the Services. Notwithstanding the foregoing, we reserve the right, at your expense, to assume the exclusive defence and control of any matter for which you are required to indemnify us, and you agree to cooperate, at your expense, with our defence of such claims. We will use reasonable efforts to notify you of any such claim, action, or proceeding which is subject to this indemnification upon becoming aware of it.

26. User Data

We will maintain certain data that you transmit to the Services for the purpose of managing the performance of the Services, as well as data relating to your use of the Services. Although we perform regular routine backups of data, you are solely responsible for all data that you transmit or that relates to any activity you have undertaken using the Services. You agree that we shall have no liability to you for any loss or corruption of any such data, and you hereby waive any right of action against us arising from any such loss or corruption of such data.

27. Electronic Communications, Transactions, and Signatures

Visiting the Services, sending us emails, and completing online forms constitute electronic communications. You consent to receive electronic communications, and you agree that all agreements, notices, disclosures, and other communications we provide to you electronically, via email and on the Services, satisfy any legal requirement that such communication be in writing. YOU HEREBY AGREE TO THE USE OF ELECTRONIC SIGNATURES, CONTRACTS, ORDERS, AND OTHER RECORDS, AND TO ELECTRONIC DELIVERY OF NOTICES, POLICIES, AND RECORDS OF TRANSACTIONS INITIATED OR COMPLETED BY US OR VIA THE SERVICES. You hereby waive any rights or requirements under any statutes, regulations, rules, ordinances, or other laws in any jurisdiction which require an original signature or delivery or retention of non-electronic records, or to payments or the granting of credits by any means other than electronic means.

28. SMS Text Messaging

One-Time Passwords and Account Verification (2FA)

When you register for the Services and provide your mobile phone number, you agree to receive automated one-time password (OTP) and account verification text messages as part of our passwordless authentication system. These transactional messages are a required part of the Services and are necessary for account access and security. They include:

• One-time passwords (OTP) for account login and verification; and
• Authentication codes for sensitive account actions.

By providing your mobile phone number and creating an account, you consent to receive these transactionalmessages. Message frequency varies based on your login activity.

You may opt out of OTP messages at any time by replying STOP. However, because these messages deliver one-time passwords and security alerts required for account access, opting out may prevent you from logging in or verifying your identity and may result in limited or no access to the Services. To restore OTP messages after opting out, reply START. If you are unable to access your account due to opting out of OTP messages, contact us at support@getrember.com for assistance.

Account Status Notifications and Rember Agent Inquiries

You may also receive SMS messages related to your account status and interactions with the Rember agent. These messages are only available if you have optionally opted in to receive them at signup, in your account settings, or consenting via SMS. Messaging frequency may vary based on account activity. These include:

• Subscription and billing notifications (e.g., payment confirmations, trial expiry reminders);
• Service updates and maintenance notices;
• Responses to your agent inquiries; and
• Account status notifications.

These are informational messages triggered by your account activity or your direct interactions with the Services. Message frequency varies.

To stop receiving these messages at any time, reply STOP to any message. You may receive a confirmation message after opting out. To opt back in, reply START to resume receiving messages.

Conversational CRM Data Processing

Separately from messages sent by Rember to you, the Services also process SMS communications that you proactively share with the platform by sending texts to Rember's designated phone number or including Rember in group conversations. This conversational CRM function is described in Section 7 (Communication Processing and Consent). You control what communications are processed by adding or removing Rember from your conversations at any time.

Message and Data Rates

Message and data rates may apply to any SMS messages sent or received. The rates are determined by your carrier and the specifics of your mobile plan. Carriers are not liable for delayed or undelivered messages. If you have any questions about your text plan or data plan, contact your wireless provider.

Mobile Information Privacy

We will not sell, rent, or share your mobile phone number, SMS opt-in data, or consent information with any third parties or affiliates for their own marketing or promotional purposes. Disclosure of your mobile information to third parties is limited to: (a) service providers that assist in delivering SMS messages (such as Twilio), under contractual confidentiality and security obligations; (b) as required by law or legal process; or (c) with your express consent. For full details on how we handle your personal information, see our Privacy Policy at https://rember.chat/privacy.

Terms and Privacy

By participating in any Rember text messaging program, you also agree to our Privacy Policy ( https://rember.chat/privacy) and these Legal Terms ( https://rember.chat/terms).

Support

For help with SMS messaging, reply HELP to any message. You can also email us at support@getrember.com or call +1 (825) 793-2327.

29. California Users and Residents

If any complaint with us is not satisfactorily resolved, you can contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 1625 North Market Blvd., Suite N 112, Sacramento, California 95834 or by telephone at (800) 952-5210 or (916) 445-1254.

For information about your California privacy rights under the CCPA/CPRA, please see Section 16 (Compliance with Privacy Laws).

30. Cookie and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Services. Cookies are small data files placed on your device that help us remember your preferences, understand how you use the Services, and improve your experience.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the operation of the Services, including authentication and security;
• Functional cookies: Used to remember your preferences and settings; and
• Analytics cookies: Used to understand how the Services are used and to improve performance.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Services. For more information, please refer to our Privacy Policy.

31. Accessibility

We are committed to ensuring that the Services are accessible to all users, including individuals with disabilities. We strive to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards. If you encounter any accessibility barriers or have suggestions for improvement, please contact us at support@getrember.com.

32. Force Majeure

Neither Party shall be liable for any failure or delay in performing its obligations under these Legal Terms where such failure or delay results from any cause beyond the reasonable control of that Party, including but not limited to: acts of God, natural disasters, pandemics, epidemics, fire, flood, earthquake, war, terrorism, civil unrest, labour disputes, government actions or orders, failure of third-party telecommunications or power supply, cyberattacks, or denial-of-service attacks ('Force Majeure Event').

The affected Party shall give prompt written notice to the other Party of the Force Majeure Event and shall use commercially reasonable efforts to mitigate its effects. If a Force Majeure Event continues for more than sixty (60) consecutive days, either Party may terminate these Legal Terms upon written notice to the other Party.

33. Miscellaneous

These Legal Terms and any policies or operating rules posted by us on the Services or in respect to the Services constitute the entire agreement and understanding between you and us. Our failure to exercise or enforce any right or provision of these Legal Terms shall not operate as a waiver of such right or provision. These Legal Terms operate to the fullest extent permissible by law. We may assign any or all of our rights and obligations to others at any time. We shall not be responsible or liable for any loss, damage, delay, or failure to act caused by any Force Majeure Event (see Section 32). If any provision or part of a provision of these Legal Terms is determined to be unlawful, void, or unenforceable, that provision or part of the provision is deemed severable from these Legal Terms and does not affect the validity and enforceability of any remaining provisions. There is no joint venture, partnership, employment, or agency relationship created between you and us as a result of these Legal Terms or use of the Services. You agree that these Legal Terms will not be construed against us by virtue of having drafted them. You hereby waive any and all defences you may have based on the electronic form of these Legal Terms and the lack of signing by the parties hereto to execute these Legal Terms.

34. Contact Us

In order to resolve a complaint regarding the Services or to receive further information regarding use of the Services, please contact us at:

Rember Technologies Inc
2900 – 550 Burrard Street
Vancouver, British Columbia V6C 0A3
Canada

Phone: +1 (825) 793-2327
General inquiries: support@getrember.com
Privacy inquiries: privacy@getrember.com