Legal

Privacy Policy.

Effective date

June 10, 2026

This Privacy Policy explains how Coredon Technologies Inc. collects, uses, shares, and protects your personal information when you use our platform. We are committed to being transparent about our data practices and to complying with Canadian privacy law, including PIPEDA and Loi 25.

01

Who we are

Coredon Technologies Inc. ("Coredon", "we", "us", or "our") operates the platform available at coredon.app. We are incorporated in Canada and operate under Canadian law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25 / Loi 25).

If you have any questions about this Privacy Policy, you can contact us at info@coredon.app.

02

What information we collect

We collect information that you provide directly to us, including:

— Waitlist information: your name, email address, country, and the optional answers you provide about your freelance activity (average project value, income range) when you join our waitlist. — Contact form information: your name, email address, the reason for your inquiry, and the content of your message when you contact us. — Account information: your name, email address, and password when you create an account. — Profile information: your business name, province, and tax registration number (TVQ or TPS/TVH) if applicable. — Project information: project names, descriptions, deliverable details, and communication with clients through the platform. — Payment information: we do not store payment card details. All payment processing is handled by Stripe. We receive transaction identifiers and status information from Stripe. — Identity verification: in some cases, we may request identity documents to comply with financial regulations.

We also collect certain technical information automatically when you submit a form or interact with the platform:

— Security log data: your IP address, browser type (user agent), browser language, and approximate location (country, province, city) derived from your IP address. — Provenance data: the website that referred you to us, the first page you visited, and campaign parameters (UTM tags) present in the link you used. This data is kept in your browser's session storage and is deleted when you close the browser.

We use this technical information to secure the platform (fraud and abuse prevention) and to understand how visitors find us. It is never used to build advertising profiles.

03

How we use your information

We use the information we collect to:

— Manage our waitlist and contact you about early access and product updates related to Coredon. — Respond to messages sent through our contact form. — Monitor for security threats: our systems keep an internal log of events such as form submissions, blocked requests, and administrative access, including the associated IP address and browser information. — Provide, operate, and maintain the Coredon platform. — Process payments and manage escrow transactions. — Generate and store legally binding contracts for your projects. — Verify your identity when required by law. — Send you transactional emails related to your projects and account. — Respond to your questions and support requests. — Detect and prevent fraud or unauthorized activity. — Comply with our legal obligations under Canadian law.

We do not sell your personal information to third parties.

04

How we share your information

We share your information only in the following circumstances:

— With your clients or freelancers: project details, names, and contact information are shared between the parties involved in a transaction, as necessary to complete that transaction. — With Stripe: payment information is processed by Stripe, Inc. in accordance with their privacy policy. Stripe acts as our payment processor and is subject to PCI DSS compliance requirements. — With service providers: we share information with trusted third-party providers who help us operate our platform. These currently include Supabase (database hosting), Vercel (website hosting and aggregate analytics), and Resend (email delivery for contact form messages). These providers are contractually required to protect your information and use it only for the purposes we specify. — When required by law: we may disclose your information when required to do so by a court order, subpoena, or applicable law. — In a business transfer: if Coredon is acquired or merges with another company, your information may be transferred as part of that transaction.

05

Data retention

We retain your personal information for as long as your account is active, or as long as necessary to provide you with our services. We also retain information as required by law. For example, financial transaction records may be retained for a minimum of seven years to comply with Canadian tax and financial regulations.

Waitlist information is retained until you ask to be removed or until the waitlist is closed. Security log entries are retained for a maximum of 12 months. Contact form messages are retained for as long as needed to handle your inquiry.

When your account is deleted, we will delete or anonymize your personal information within 90 days, except where we are required by law to retain it.

06

Your rights

Under PIPEDA and Loi 25, you have the following rights regarding your personal information:

— The right to access the personal information we hold about you. — The right to correct inaccurate or incomplete information. — The right to withdraw your consent to certain uses of your information, subject to legal and contractual restrictions. — The right to request deletion of your personal information, subject to our legal retention obligations. — The right to data portability: to receive a copy of your information in a structured, commonly used format.

To exercise any of these rights, contact us at info@coredon.app. We will respond within 30 days.

07

Cookies and tracking

We use cookies and similar technologies to operate and improve the platform. These include:

— Essential cookies: required for the platform to function, such as authentication session cookies. They cannot be disabled. — Analytics: we use Vercel Analytics, which measures page visits in aggregate form without cookies and without tracking you across other websites. — Session storage: we temporarily store in your browser the campaign parameters and referring website from your first visit, solely to understand how visitors find Coredon. This data never leaves your browser unless you join the waitlist, and is deleted when you close your browser.

You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of the platform.

08

Data security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews.

However, no system is completely secure. We encourage you to use a strong password and to contact us immediately at info@coredon.app if you believe your account has been compromised.

09

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we make material changes, we will notify you by email or by posting a notice on the platform before the changes take effect.

Your continued use of Coredon after the effective date of any changes constitutes your acceptance of the updated policy.

10

Contact

If you have questions, concerns, or requests related to this Privacy Policy or the handling of your personal information, please contact us:

Coredon Technologies Inc. Email: info@coredon.app Website: coredon.app

We are committed to working with you to resolve any concerns you may have about our privacy practices.