Privacy Policy

1. Accountability and Scope

1.1 Accountable Organization. Ferrix is the organization accountable for the personal information processed in connection with the Services, and determines the purposes for which and the means by which that information is processed.

1.2 Scope. This Policy applies to the Apps and the Website. It does not apply to any website, application, platform or service that we do not own or control, including the Apple App Store and Google Play, the websites of the Administrators to which you submit claims, and the third parties identified in section 8, each of which processes information under its own privacy policy and for whose practices we are not responsible.

1.3 Aggregated and De-Identified Information. This Policy does not restrict our collection, use or disclosure of information that has been aggregated, de-identified or anonymized such that it cannot reasonably be used to identify an individual.

2. Information We Collect

A. Information You Provide to Us

• Account information. Your email address, an optional display name, and the method of authentication you use (email address and password, a one-time code or sign-in link sent to your email address, Sign in with Apple, or Google). Where you authenticate through Apple or Google, we receive basic account identifiers from that provider, and we do not receive your password.
• Contact and mailing details. An optional profile that you may save in the Apps, consisting of your name, telephone number and mailing address (street, city, state or province, and postal or ZIP code). This information is stored solely in your Collect account. We do not autofill, transmit or submit it to any Administrator on your behalf.
• Onboarding profile. The responses you provide when you set up the Services, which may include your gender (optional), your age range, the manner in which you discovered Collect, a rating you give during onboarding, and your answers to a brief eligibility questionnaire regarding products and services you have used. We use these responses to generate illustrative estimates and to select and order the Settlements presented to you. We receive these responses whenever you complete onboarding, whether or not you have created an account. They are keyed to a device-generated identifier (the identifier for vendor on iOS, the Android ID on Android, or a randomly generated browser identifier on the Website), together with the version of the App or Website and an attribution identifier, and we use them, including in aggregate, to understand how individuals discover the Services and whether they go on to subscribe. These responses are used within the Services only and are not submitted to any Administrator.
• Claim records and notes. The Settlements you record as claimed, followed or hidden, and any optional note you elect to save against a Settlement you have recorded as claimed, such as a reference or confirmation number issued to you by an Administrator. The content of any note is determined solely by you. Notes are stored in your Collect account, are made visible only to you, and are not sent to any Administrator.
• Support and other communications. Where you communicate with us, your email address, the content of your communication, and any other information you elect to provide.
• Payment information for purchases on the Website. Where you purchase a Website Subscription, you provide the details of your card, digital wallet or other payment method directly to Stripe, our payment processor. We do not receive or store your full card number or security code. Stripe provides to us limited information for the purpose of administering your Subscription, including the brand of the card, its last four digits and expiry date, the digital wallet used (if any), your billing country and postal code (which are used to determine applicable tax), your name where provided, your email address, the results of the verification and risk checks performed by Stripe, and the status and history of your payments. When a checkout is opened, we additionally record the network (IP) address and the browser from which it was opened, the browser identifier, and the version of the Terms of Use then in effect, for the purposes of preventing fraud and of evidencing the circumstances in which a purchase was made.

B. Claim Information Is Provided to the Administrator, Not to Us

2.1 When you submit a claim in respect of a Settlement, you enter the information required by the relevant Administrator (which may include sensitive information) directly into that Administrator’s own claim form, on that Administrator’s own website. We do not collect, receive, transmit or store the information you enter into any such form, which is processed by the Administrator under its own privacy policy. The only information we hold regarding a claim is that which you elect to record within the Services, as described above.

C. Information Collected Automatically Through the Apps

2.2 When you use the Apps, we, and the third parties identified in section 8, collect:

• Device and application information. The model of your device, the version of its operating system, the version of the App, language and region settings, and device-generated identifiers (such as the identifier for vendor on iOS or the Android ID).
• Advertising identifier. On iOS, the identifier for advertisers (IDFA), which is accessed only where you grant permission through Apple’s App Tracking Transparency prompt, and, on Android, the Google Advertising ID (GAID). These identifiers are used for install attribution and the measurement of advertising, as described in section 5.
• Install, attribution and subscription events. Installs of the Apps, first opens, and conversion events such as the commencement of a trial, purchases, renewals and net revenue. Subscription lifecycle events are transmitted server-side to our attribution provider, and onward to advertising networks, for the purpose of measuring advertising campaigns. They are transmitted in pseudonymous form, keyed to attribution and device identifiers and not to your name or email address.
• Engagement events. Your activity within the Apps, such as the Settlements displayed to you, the items you select, and the search queries you enter, keyed to your account and stored in our cloud infrastructure. We use this information to select, order and personalize the Settlements presented to you and to maintain and improve the Services.
• Push notification information. A device push token, the notification topics to which the device is subscribed, and your notification preferences, used to deliver the notifications you have enabled.
• Purchase and subscription information. The status of your Subscription, product identifiers and transaction identifiers, derived from the purchase receipts issued by Apple and Google and processed by RevenueCat. We do not receive or store the details of your payment card.
• Association of an App Store Subscription with your account. Where you are signed in to your account in an App on a device on which an App Store Subscription is active, the App transmits to us the customer identifier that RevenueCat associates with that App Store Subscription. We obtain from RevenueCat, and record against your account, that identifier and the status of the App Store Subscription, namely the App Store through which it was purchased, its product identifier, whether it presently confers access, the date on which its current billing period ends, whether it is set to renew, whether it was purchased in a test environment, and the address at which it may be managed, together with the times at which it was associated with your account and last verified. We verify that record with RevenueCat periodically and update it accordingly, and we use it to make the Services available to your account through the Website and the Apps, as provided in our Terms of Use. An App Store Subscription is associated with one account at a time. Where it is subsequently associated with another account, the record is removed from the account with which it was previously associated.
• Network information. Your network (IP) address, which is processed by us and by our service providers when the Apps communicate with them, and from which an approximate, city-level location may be derived. We do not collect precise (GPS) location.

D. Information Collected Through the Website

2.3 When you use the Website, we record your use of it by means of our own first-party measurement, and we store a limited amount of information in your browser, in each case as described in section 9. Where you respond to the questions presented in the Website’s setup flow, we receive those responses as described in paragraph A above. Where you hold an account on the Website, we record your activity in that account, including the Settlements displayed to you, the items you select, the actions you take, and the devices, browsers and network (IP) addresses from which the account is accessed. Our hosting infrastructure maintains standard server logs (including network address, browser type and the pages requested) for security and operational purposes.

E. Information We Receive From Third Parties

2.4 We receive information regarding you from the third parties identified in section 8, including authentication providers (account identifiers), the App Stores and RevenueCat (the status of your Subscription and related transactions), Stripe (the information described in paragraph A above), our attribution provider (the source of an install) and our email delivery provider (whether a message was delivered, bounced or reported as spam). We may combine information received from third parties with the other information we hold regarding you.

3. Purposes for Which We Use Information

3.1 We use the information described in section 2, alone and in combination, for the following purposes:

• To provide and personalize the Services, including to create, authenticate and administer your account, to make available information regarding Settlements for which you may be eligible, to generate illustrative estimates, and to select, order and personalize the Content presented to you on the basis of your profile and your activity;
• To administer Subscriptions, including to process purchases and renewals, to activate and maintain your entitlement to access the Services, to associate an App Store Subscription with your account and to make the Services available to that account through the Website and the Apps, to validate purchase receipts, to determine and collect applicable taxes, and to maintain our financial, tax and accounting records;
• To communicate with you, including to deliver the notifications that form part of the Services, to send transactional, administrative and security messages, and to respond to your enquiries;
• To measure advertising and attribution, including to understand how individuals discover and install the Apps and to measure the effectiveness of our advertising;
• To maintain, analyze, develop and improve the Services, including to understand how the Services are used, to diagnose and correct errors, and to develop new features;
• To protect security and integrity, including to recognize access from a device not previously associated with an account, and to detect, investigate and prevent fraud, abuse, unauthorized access and any other unlawful or prohibited activity;
• To prevent, respond to and contest payment disputes, including by evidencing the circumstances of a purchase and the access to and use of the Services that followed it;
• To establish, exercise and defend legal claims, to enforce our Terms of Use and Class Action Terms, and to protect our rights, property and interests and those of our users and of third parties;
• To comply with applicable law, including any law, regulation, legal process or governmental request to which we are subject; and
• For any other purpose disclosed to you at the time of collection, or to which you consent.

4. How We Disclose Information

4.1 We disclose personal information in the following circumstances:

• Service providers and processors. To the third parties identified in section 8, which process account-level, device-level and purchase-level information on our behalf for the purposes of authentication, cloud storage and analytics, payment processing, subscription management, the delivery of notifications and email, search, and attribution.
• Advertising and attribution providers. Device identifiers and conversion and subscription events are disclosed to attribution providers and advertising networks for the purpose of measuring advertising campaigns in respect of the Apps, as described in section 5.
• App Stores, in connection with refund requests. Where you request a refund of an App Store Subscription from Apple or Google, we may disclose to that App Store information regarding your purchase and your use of the Services (for example, consumption information) to assist it in evaluating your request.
• Payment disputes. Where a charge for a Website Subscription is disputed, reversed or made the subject of a chargeback or similar proceeding, we disclose to our payment processor, Stripe, and through it to the applicable card network and to the issuer of the payment method, the information, records and evidence that we consider relevant to the dispute, including the date and time at which, and the network (IP) address, browser and device from which, the purchase was made, the email address and sign-in history of the account, the record of access to and activity within the account, the communications delivered to you, your communications with us, and the terms presented at checkout.
• Legal requirements and protection of rights. Where we believe in good faith that disclosure is required or permitted by any law, regulation, legal process or governmental request, or is necessary or appropriate to establish, exercise or defend legal claims, to enforce our agreements, to investigate or prevent fraud or other unlawful activity, or to protect the rights, property, safety or security of Ferrix, our users or any other person.
• Business transactions. In connection with, or during the negotiation of, any merger, amalgamation, acquisition, reorganization, financing, sale or other disposition of all or any part of our business or assets, or any insolvency or similar proceeding, personal information may be disclosed to, and transferred to, the counterparties to that transaction and their advisors.
• Affiliates and professional advisors. To our affiliates, and to our legal, financial, tax, insurance and other professional advisors, in each case for the purposes described in this Policy.
• With your consent or at your direction. In any other circumstance in which you consent to, or direct, the disclosure.

4.2 No Sale for Monetary Consideration. We do not sell your personal information for monetary consideration. Certain privacy laws define the terms “sale” or “sharing” so broadly as to include the disclosure of device identifiers to advertising providers for the purpose of measuring cross-context behavioural advertising. Section 5 describes the means by which you may prevent any such disclosure. We do not, and are not able to, disclose the content of any claim you submit in respect of a Settlement, because you submit each claim directly to the relevant Administrator.

5. Advertising, Attribution and Your Choices (Apps)

5.1 We engage mobile attribution and advertising network providers to understand how individuals discover the Apps and to measure our advertising. Our attribution provider is AppsFlyer, and we use the TikTok Business SDK for the measurement of advertising. These providers may receive:

• device identifiers, including your advertising identifier (the IDFA on iOS, where you have granted tracking permission, or the GAID on Android);
• App installation and first-open events;
• in-App conversion and subscription events (such as the commencement of a trial, purchases and renewals), in pseudonymous form; and
• your network (IP) address and an approximate location derived from it.

5.2 On iOS, we also participate in Apple’s SKAdNetwork, which reports install attribution to advertising networks in aggregate form and without identifying you individually.

5.3 Your Choices. You may exercise the following choices at any time:

• iOS: decline or revoke tracking permission. Go to Settings > Privacy & Security > Tracking. Where tracking is not permitted, the App is unable to access your IDFA for the purpose of cross-application attribution.
• Android: reset or opt out of your advertising identifier. Go to Settings > Google > Ads to delete your advertising identifier or to opt out of the personalization of advertising.
• Notifications. Disable notifications in the settings of your device, or by means of the controls provided in the settings of the Services.
• Contact us. Send an email to collect@ferrixlabs.com with the subject line “Opt-Out of Targeted Advertising,” and we will give effect to your request as and to the extent required by applicable law.

5.4 The Website does not use advertising or social media trackers, as further described in section 9.

6. Communications and Transactional Email

6.1 We send email through Postmark. The messages we send include a welcome message upon the creation of an account, password reset and email verification messages, one-time sign-in codes and links where you elect to sign in by email, and security alerts where we detect access to an account from a device not previously associated with it. Where you hold a Website Subscription, they also include messages regarding purchases, renewals and payments. Where you hold a Subscription, whether purchased on the Website or through the App Store or Google Play and associated with your account, or where access to the Services has been granted to your account, they also include the notifications that form part of your membership, namely notices of new Settlements and matters relevant to your interests, updates regarding matters you have chosen to follow, and reminders in advance of a deadline. Those notifications are sent to the email address associated with your account, including an address provided by Apple's private email relay service, in addition to any push notifications you have enabled in the Apps. You may manage those notifications in your account (Settings, then Notifications), and each notification message contains a means of unsubscribing. These are service messages relating to your account and to your use of the Services.

6.2 Open tracking and click tracking are disabled for these messages. Where a message sent to your address results in a permanent delivery failure (a hard bounce), or is reported as spam, we add that address, in hashed form, to an internal suppression list, so that we cease to send messages to an address that is unable, or whose holder does not wish, to receive them. We retain a record of the messages delivered to you.

7. Sign-In Security and Device Recognition

7.1 For the purpose of protecting the security of your account, we maintain, in respect of each account, a record of the devices and browsers from which the account has been accessed, consisting of a device or browser identifier (the identifier for vendor on iOS, the Android ID on Android, or a randomly generated browser identifier on the Website), together with the model of the device, its operating system, and the network (IP) address from which access was made. We use this record to recognize access from a device not previously associated with the account, so that we may send a security alert to you, to associate your account with the pre-account onboarding record created on the same device for the purposes described in section 2, and for the purposes of preventing fraud and of contesting payment disputes described in sections 3 and 4. This information is not used for the targeting of advertising, is not disclosed to advertising networks, and is not used for personalization.

8. Third-Party Services and Processors

8.1 The Services rely upon the following third-party providers, each of which may process the information described in this Policy. Each processes information under its own privacy policy, and we require providers that receive personal information from us to protect it in a manner consistent with this Policy and with applicable law:

• Google (Firebase and Google Cloud). Authentication, cloud data storage and analytics (Firestore and BigQuery), hosting, the delivery of push notifications, and the processing of search queries entered in the Apps by means of artificial intelligence (Vertex AI) for the purpose of returning relevant Settlements (privacy policy).
• Stripe. Payment processing, the calculation of tax, and the prevention of fraud in respect of Website Subscriptions (privacy policy).
• RevenueCat. The management of subscription status and the validation of purchase receipts (privacy policy).
• Superwall. The display and measurement of subscription offers within the Apps (privacy policy).
• AppsFlyer. Mobile install attribution and the measurement of advertising (privacy policy).
• TikTok. The TikTok Business SDK, used for the measurement of advertising in connection with our campaigns (privacy policy).
• Postmark. The delivery of transactional, security and membership notification email (privacy policy).
• Typesense. The search infrastructure that processes search queries entered in the Apps for the purpose of returning Settlements (website).
• Apple and Google. The distribution of the Apps, in-App purchases and payment processing, purchase receipts, authentication (Sign in with Apple and Google), and the operating system services used by the Apps (Apple privacy policy, Google privacy policy).

8.2 The Services contain links to third-party websites that we do not control, including the websites of Administrators. This Policy does not apply to them, and you should review the privacy policy of any such website before providing any information to it.

9. Website: Browser Storage, Cookies and Measurement

9.1 The Website does not use advertising or social media trackers, and we do not sell, or share for the purposes of advertising, any information collected through the Website.

• Essential browser storage. We store a limited number of items in your browser in order that the Website may function, in the browser’s own storage and in two first-party cookies, namely: a randomly generated identifier for your browser, your sign-in session, your responses and progress in the setup flow, the link or campaign by which you arrived at the Website, and your display preferences. The two cookies contain only the browser identifier and the link or campaign by which you arrived. You may clear all of these items at any time through the settings of your browser, the effect of which is to sign you out.
• First-party measurement. We record events such as the pages viewed, the steps completed in the setup flow, and the actions taken in your account, together with the browser identifier, your account identifier where you are signed in, and the link or campaign by which you arrived at the Website. These records are transmitted to our own database on Google Cloud, and not to any analytics company, and we use them for the purposes described in section 3.
• Payment and authentication providers. The checkout page loads Stripe, which sets its own cookies and similar technologies for the purposes of processing payments and preventing fraud. Where you elect to authenticate through Google or Apple, that provider operates its own sign-in page under its own privacy policy.

9.2 Because the Website does not engage in the sale of personal information, or in the sharing of personal information for cross-context behavioural advertising, there is no such activity on the Website to which a “Do Not Track” or similar browser signal would apply, and the Website does not alter its practices in response to any such signal.

10. Retention

10.1 We retain personal information for as long as is reasonably necessary to fulfil the purposes for which it was collected, as described in this Policy, and for such longer period as may be required or permitted by applicable law. The criteria by which we determine the applicable period include the period during which you maintain an account, the period during which a purchase may be disputed or a claim may be made in respect of it, the nature and sensitivity of the information, and our legal, tax, accounting and regulatory obligations. In particular:

• Account and profile information is retained while your account remains active, and is deleted upon the deletion of your account, subject to sections 10.2 and 11.
• Pre-account onboarding responses. The device-keyed onboarding record described in section 2 is created whenever you complete onboarding, which ordinarily occurs before an account exists, and carries no account identity of its own. While you hold an account, we are able to associate the two. The record is retained until deleted. The deletion of your account removes that association but does not delete the record itself, the deletion of which you may request at any time, as described in section 11.
• Activity within the Services. Engagement events keyed to your account are retained for the purposes of operating and improving the Services, and are erased following the deletion of your account, subject to section 10.2.
• Support communications are retained for as long as is necessary to resolve your enquiry, and for a reasonable period thereafter for quality assurance and legal purposes.
• Information held by third-party providers. The providers identified in section 8 retain device-level and purchase-level information in accordance with their own retention policies. Records of purchases are retained for as long as is required to honour your entitlements and to comply with our legal, tax and accounting obligations.

10.2 Records of Purchases. Notwithstanding any other provision of this Policy, and notwithstanding the deletion of an account, where a purchase has been made in connection with an account we retain a record of that purchase, and of the account, the devices and the access to and activity within the Services connected with it, for the period during which the purchase may be disputed or a claim may be made in respect of it, for the purposes of preventing fraud, of resolving and contesting payment disputes, and of establishing, exercising and defending legal claims, following which that record is erased or de-identified.

11. Deleting Your Account and Information

11.1 How to Delete Your Account. You may delete your account at any time: (a) within the Services, by going to Settings, selecting “Delete Account,” and confirming when prompted; or (b) by sending an email to collect@ferrixlabs.com, from the email address associated with your account, with the subject line “Delete My Account.”

11.2 Effect of Deletion. Subject to sections 10.2 and 11.4, the deletion of your account results in the erasure of the account and of the information associated with it, including your profile, your notification preferences and push tokens, your record of Settlements claimed, followed and hidden, the record of any App Store Subscription associated with your account, and the engagement information keyed to your account. Because certain of that information is held in analytics storage (such as BigQuery) and is replicated to backup and streaming systems, erasure is carried out by means of a periodic process and may take up to approximately thirty (30) days to be completed across all systems. The deletion of your account does not cancel an App Store Subscription, and does not of itself entitle you to any refund.

11.3 Pre-Account Onboarding Record. The device-keyed pre-account onboarding record described in section 2 is not erased by the deletion of your account. The deletion of your account removes the stored association between that record and your account, and the record itself remains. To have that record deleted as well, you must so request by email, irrespective of the manner in which you delete your account, before or together with the deletion, because we are able to locate the record by means of your device record only while your account continues to exist. If you have never created an account, or your account has already been deleted, you may nevertheless send a request to us by email from any address. Because the record is identified solely by a device-generated identifier, we will work with you to locate it, and will give effect to any request that we are reasonably able to verify.

11.4 Information We Retain. We retain certain information following the deletion of an account where we are required or permitted by law to do so, or where it is necessary for our legitimate interests, including: (a) records of transactions and purchases, for tax and accounting purposes; (b) the records of purchases, and of the account, the devices and the access to and activity within the Services connected with them, described in section 10.2; (c) information necessary to resolve disputes, to prevent fraud and abuse, to enforce our agreements, and to establish, exercise or defend legal claims; (d) the pre-account onboarding record described in section 11.3, unless you request its deletion; (e) where your address appears on our email suppression list, the hashed suppression entry, so that we continue to give effect to that status; and (f) aggregated or de-identified information.

12. Security

12.1 We maintain commercially reasonable administrative, technical and organizational safeguards designed to protect the personal information we process against loss, theft, and unauthorized access, use, disclosure and modification, including the encryption of information in transit, authenticated access to our backend interfaces, and access controls. No method of transmission over the Internet, and no method of electronic storage, is completely secure. Accordingly, we do not and cannot warrant or guarantee the security of any information, and any transmission of information to us is made at your own risk. You are responsible for maintaining the security of your credentials and of the devices and email account through which you access the Services.

13. International Processing

13.1 Ferrix is a Canadian corporation. Our cloud infrastructure, and the third-party providers identified in section 8, operate primarily in the United States of America. Your personal information may accordingly be transferred to, stored in and processed in the United States of America, Canada and any other country in which those providers operate, the data protection laws of which may differ from those of your jurisdiction of residence, and in which your information may be accessible to courts, law enforcement and national security authorities in accordance with local law. Where required by applicable law, we implement appropriate safeguards in respect of that processing. The Services are not directed to individuals located in the European Economic Area, the United Kingdom or Switzerland.

14. Your Privacy Rights

14.1 All Users. Subject to applicable law, and to the exceptions and limitations it provides, you may: (a) request access to the personal information we hold regarding you; (b) request the correction of personal information that is inaccurate; (c) request the deletion of your personal information; and (d) withdraw your consent, where processing is based upon consent (for example, by revoking tracking permission in the settings of your device), subject to legal and contractual restrictions and to reasonable notice. We may decline a request, in whole or in part, where permitted or required by applicable law, including where the information is required for the purposes described in section 10.2.

14.2 United States. Depending upon your State of residence, including under the California Consumer Privacy Act of 2018, as amended, and the comparable laws of other States, you may have the right to know, to access, to correct, to delete and to obtain a portable copy of your personal information; the right to opt out of the “sale” or “sharing” of personal information and of its use for targeted advertising; the right to limit the use of sensitive personal information, which we do not use or disclose for any purpose other than those permitted by law without such a right; the right to appeal our decision in respect of a request; and the right not to be discriminated against for the exercise of any such right. In the preceding twelve (12) months, we have collected the following categories of personal information, from the sources and for the purposes described in sections 2 and 3, and have disclosed them to the categories of recipient described in section 4: identifiers; commercial information; Internet or other electronic network activity information; approximate geolocation information; account credentials; characteristics that you elect to provide (such as age range and gender); and inferences drawn from the foregoing. We do not sell personal information for monetary consideration, and you may prevent the disclosure of your advertising identifier as described in section 5. We do not knowingly sell or share the personal information of individuals under sixteen (16) years of age.

14.3 Canada. We process personal information in accordance with the Personal Information Protection and Electronic Documents Act (Canada) and any substantially similar provincial legislation that applies to us. You may request access to, or the correction of, the personal information we hold regarding you, withdraw your consent, and challenge our compliance with our obligations by contacting us. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

14.4 Australia. Where you use the Services from Australia, we process your personal information in a manner consistent with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth), to the extent that they apply to us. You may request access to, or the correction of, your personal information, or make a complaint regarding our handling of it, by contacting us. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

14.5 How to Exercise Your Rights. Send an email to collect@ferrixlabs.com with the subject line “Privacy Request.” We may require you to verify your identity and your request (for example, by corresponding with us from the email address associated with your account), and we will respond within the period required by applicable law. You may designate an authorized agent to make a request on your behalf, subject to our verification of the agent’s authority. We will not discriminate against you for exercising any of your rights. In respect of device-level information held by the providers identified in section 8, we may give effect to your request by directing it to the relevant provider or by providing you with the means of making the request directly.

15. Children

15.1 The Services are intended solely for adults, and our Terms of Use require every user to be at least eighteen (18) years of age. We do not knowingly collect personal information from any individual under the age of eighteen (18), and, in particular, we do not knowingly collect personal information from any child under the age of thirteen (13). If we become aware that we have collected personal information from a child under the age of thirteen (13), we will take steps to delete it promptly. If you believe that a child has provided personal information to us, please contact us at collect@ferrixlabs.com.

16. Changes to This Policy

16.1 We may amend this Policy at any time and from time to time to reflect changes in our practices, in technology or in applicable law. The amended Policy shall be posted on the Website, and the “Last Updated” date shown above shall be revised accordingly. Where we consider an amendment to be material, we will give notice of it through the Services or on the Website. Except where a longer period is required by applicable law, an amendment takes effect upon posting, and your continued access to or use of the Services after an amendment takes effect constitutes your acceptance of the Policy as amended.

17. Contact

17.1 Any question, concern, request or complaint regarding this Policy or our privacy practices may be addressed to the individual accountable for our compliance with this Policy, at Ferrix Labs Inc. (Canada), by email at collect@ferrixlabs.com. Please include the words “Privacy Request” in the subject line of any request relating to your personal information.