CORE-FM Privacy Notice Effective September 30, 2026 — Version 2026-09-30 1. Who is responsible Logic Foundry Solutions Inc. operates CORE-FM. Contact our privacy contact at [email protected] or PO Box 695, Cochrane Alberta T4C1A8, Canada with privacy questions, access or correction requests, or complaints. 2. Information we handle We collect account names, work email addresses, phone numbers, company and billing details, property addresses, roles and permissions, and records supplied through CORE-FM. Records may include asset details, work orders, procedures, pictures, inspection and janitorial results, public issue reports, sensor readings and alert recipients. Authentication, acceptance, billing, activity and operational records help us operate and protect the service. Do not upload unnecessary sensitive personal information, payment card details, medical records or passwords into work records or attachments. 3. Purposes and visibility We use information to provision accounts, authorize access, provide facility workflows, process billing and hardware orders, deliver transactional messages, troubleshoot and secure the service, and meet legal obligations. Authorized members of your company can access records according to their roles and property assignments. Logic Foundry personnel may access information for support, administration and security. Public QR reporting intentionally allows people outside your company to submit issues; only information intended for public access should be exposed through public links. Recorded rounds and work activity can identify staff; the customer must inform its staff and obtain any required authority for this use. We do not treat signup as consent to marketing or sell personal information. 4. Service providers and location We use service providers including Stripe for card payments, Resend for application email, Cloudflare for web traffic and protection, and Microsoft 365/GoDaddy for support correspondence. Card details entered in Stripe checkout are processed by Stripe; CORE-FM retains payment references and billing records, not full card numbers. Providers may process information outside Canada, where local laws may permit access by authorities. We do not promise exclusively Canadian processing. Customer agreement receipts include the accepting person's name, email, company and notice versions and are copied to [email protected]; passwords and verification links are excluded. 5. Safeguards and incidents We use access controls, protected configuration, encrypted web connections and operational backups to reduce risk. No internet service, device, backup or security measure is risk-free. If an incident affects personal information, we will assess it, take appropriate response measures and provide notifications required by applicable law. This notice does not waive our legal safeguarding or breach-response obligations. 6. Retention, access and choices We retain information while needed to provide the service, support records and disputes, and comply with legal obligations. Closing a property or account does not immediately erase billing, acceptance, audit or backup records. Contact support for an account-specific export, retention or deletion request. We will verify authority and explain any lawful limits or records we must retain. Backup copies may remain until replaced under operational retention practices. You may request access or correction and withdraw consent where applicable; some withdrawals may prevent us from providing the requested service. Customers should direct requests about their employer's facility records to their company administrator as well. 7. Cookies and local storage CORE-FM uses session cookies and browser storage for sign-in, security and requested functions such as a saved hardware cart. Optional browser notifications require permission. These functional tools do not imply marketing consent. 8. Questions and changes Contact our privacy contact first so we can investigate concerns. You may also contact the applicable privacy commissioner, including the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada. Material changes will be communicated as appropriate; the version accepted at signup is retained with its receipt.