Privacy Policy

1. Our approach to privacy

1.1 Dosatsu AI Risk Tools Inc. (“RiskTools.AI“, “we“, “our“, or “us“) is committed to protecting your privacy. This privacy policy sets out how we collect, store, process, transfer, share and use data that identifies or is associated with you (“personal information“) and information regarding our use of cookies and similar technologies.

1.2 RiskTools.AI operates a cloud-based impairment and risk control management solution (RiskTools.AI Service) available via our websites (our “Websites”) including at risktools.ai.

1.3 This privacy policy applies to the RiskTools.AI Service.

1.4 Before accessing or using the RiskTools.AI Service, please ensure that you have read and understood our collection, storage, use and disclosure of your personal information as described in this privacy policy. By accessing or using the RiskTools.AI Service, you are accepting and consenting to the practices described in this privacy policy.

2. Personal information we collect about you and how we use it

2.1 Information you give to us. We collect personal information about you when you voluntarily submit information directly to us by filling in forms on our Website or by corresponding with us by phone, email or other means. This includes information you provide when you register to use our Website, report a problem with our Website, or use any other feature of the RiskTools.AI Service as available from time to time.

2.2 If you choose not to provide personal information, we may not be able to provide the RiskTools.AI Service to you or respond to your other requests.

2.3 Information we receive from other sources. We may receive personal information about you from individuals or corporate entities which are subscribers to the RiskTools.AI Service (“Subscribers“) where you are to be designated a user of the RiskTools.AI Service. We may receive personal information about you if you use any of the other websites we operate or the other services we provide from time to time. We also work closely with third parties (including, for example, insurers, payment and delivery services, advertising networks, analytics providers, search information providers) and may receive information about you from them, subject to your agreements with them.

2.4 Categories of personal information you provide to us and that we receive from other sources are listed below, as well as a description of how we use that information. We also list the legal basis which we rely on to process the personal information.

• Contact information and basic personal details such as your name, phone number, email address, and IP address: We use this information to provide you with the RiskTools.AI Service, to communicate with you, and to administer your account. The processing is necessary for the performance of our contract under the Terms of Service. We also use this information to deal with inquiries and other requests made by or about you, including customer service issues. Such communications may include direct email or phone calls, as well as communications via our Website. The processing is necessary for the performance of our contract under the Terms of Service.
• Work details such as your job title, employer, and location, as well as business records created, modified, or viewed by you in the RiskTools.AI Service: We use this information to provide you with the RiskTools.AI Service, and to ensure the integrity of our service and records. The processing is necessary for the performance of our contract under the Terms of Service.

2.5 We also automatically collect personal information about you indirectly about how you access and use the RiskTools.AI Service and information about the device you use to access the RiskTools.AI Service.

2.6 The categories of personal information we collect about you automatically are listed below, as well as a description of how we use that information. We also list the legal basis which we rely on to process the personal information.

• Information about how you access and use the RiskTools.AI Service. For example, the website from which you came and the website to which you are going when you leave our Website, how frequently you access the RiskTools.AI Service, the time you access the RiskTools.AI Service and how long you use it for, whether you open emails or click the links contained therein, whether you access the RiskTools.AI Service from multiple devices, and other actions you take on the RiskTools.AI Service. We also gather information, which may include Internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We use this information to conduct market analysis, to monitor the RiskTools.AI Service and how it is used to improve the service and help us develop new products and services.
• Information about the device you use to access the RiskTools.AI Service. For example, the type of computer, smartphone, tablet, or other device you use to access the RiskTools.AI Service, as well as the operating system, browser type, and unique identifiers of that device. We use this information to present the service in a way that is compatible with your device and monitor and improve the RiskTools.AI Service.

2.7 We may link or combine the personal information we collect and/or receive about you and the information we collect automatically. This allows us to provide you with a personalized experience regardless of how you interact with us.

2.8 We may anonymize and aggregate any of the personal information we collect (so that it does not identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving the RiskTools.AI service and developing new products and features. We may also share such anonymized information with others.

3. Disclosure of your personal information

3.1 We may share your personal information with any member of our group. We will not share your personal information with any third parties except as described in this privacy policy or in connection with the RiskTools.AI Service. We may share your information with selected third parties, including:

• Business partners, vendors, suppliers, and subcontractors who perform services on our behalf (these companies are authorized to use your personal information only as necessary to provide these services to us);
• Analytics and search engine providers that assist us in the improvement and optimization of our Website;
• Payment processors for the purpose of fulfilling relevant payment transactions;

3.2 In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet law enforcement requirements. We may disclose personal information in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions of service (risktools.ai/terms-of-service) and other agreements; or to protect the rights, property, or safety of RiskTools.AI, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

3.4 Testimonials. With consent, we may display personal testimonials of satisfied customers on our site, along with other endorsements. If you wish to update or delete your testimonial, you can contact us at privacy@risktools.ai.

3.5 We may disclose personal information to third parties in connection with a business transaction. Personal information may be disclosed to third parties in connection with a transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business. If we are involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our Website of any change in ownership that impacts the use of your personal information, as well as any choices you may have regarding your personal information.

4. Marketing and advertising

4.1 From time to time we may contact you with relevant information about the RiskTools.AI Service and our other products and services. Most messages will be sent electronically. For some messages, we may use personal information we collect about you to help us determine the most relevant information to share with you.

5. Storing and transferring your personal information

5.1 Security. RiskTools.AI has implemented administrative, technical, and physical safeguards to protect its and its customers' information. You can access the RiskTools.AI service using a time-limited PIN number sent to your corporate email address. You are responsible for keeping your PIN number confidential. You should not share your PIN number with anyone.

5.2 While no transmission of information via the internet is completely secure, we take reasonable measures to protect your personal information. We cannot guarantee the security of your personal information transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

5.3 International Transfers of your Personal Information. The personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third-party service providers have operations. If you are located in the European Union (“EU“) or the United Kingdom (“UK”, your personal information may be processed outside of the EU including in the United States and Canada; these international transfers of your personal information are made pursuant to appropriate safeguards, and, we will take suitable steps to ensure that your personal data is treated just as safely and securely as it would be within the EU and under the General Data Protection Regulation (“GDPR”) or the UK General Data Protection Regulation (“UK GDPR”). Such measures shall include, but are not limited to, having Data Processing Agreements with applicable subprocessors and ensuring that such subprocessors have adequate security and data protection procedures in place aligned with the GDPR or any other applicable data protection law. If you wish to inquire further about these safeguards used, please contact us using the details set out at the end of this policy.

6. Retaining your information

6.1 We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of our legitimate business interests and satisfying any legal or reporting requirements.

6.2 To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and the applicable legal requirements.

7. Your rights in respect of your personal information

7.1 In accordance with applicable privacy law, you have the following rights in respect of your personal information that we hold:

• Right of access and portability: The right to obtain access to your personal information along with certain information, and to receive that personal information in a commonly used format and to have it ported to another data controller.
• Right to rectification: The right to obtain rectification of your personal information without undue delay where that personal information is inaccurate or incomplete.
• Right to erasure: The right to obtain the erasure of your personal information without undue delay in certain circumstances, such as where the personal information is no longer necessary in relation to the purposes for which it was collected or processed.
• Right to restriction: The right to obtain the restriction of the processing undertaken by us on your personal information in certain circumstances, such as where the accuracy of the personal information is contested by you or the sale of your personal information for a period enabling us to verify the accuracy of that personal information.
• Right to object: The right to object, on grounds relating to your particular situation, to the processing of your personal information, and to object to the processing of your personal information for direct marketing purposes, to the extent it is related to such direct marketing.
• Right to non-discrimination: The right to non-discrimination for exercising your rights as outlined in this policy. This includes, but is not limited to, denying you goods or services, charging you different prices for similar services, or providing a different level or quality of service.

7.2 If you wish to exercise any of these rights, you may do so by submitting a written request via the contact methods specified at the end of this policy. Upon request, we will provide you with information about whether we hold any of your personal information. We may request that you verify your identity prior to transferring personal information. You may also access, correct or request deletion of your personal information by submitting a written request. We will respond to your request within 90 days.

7.3 RiskTools.AI does not sell personal information shared by you. All use of personal information is done for the delivery, use, and improvement of the Service, as listed in 3.1.

7.4 If you reside in the EU or UK, RiskTools.AI is the controller of your personal information for purposes of EU or UK data protection legislation. You also have the right to lodge a complaint to your local data protection authority.

8. Cookies and similar technologies

8.1 Our Service uses cookies and similar technologies (collectively referred to as cookies) to distinguish you from other users of our Service. This helps us to provide you with good service. This helps us enhance and personalize your user experience, to monitor and improve our Website and services, and for other internal purposes. As is true of most websites, we gather certain information automatically. This information we may collect is described in detail in Section 2 of this policy.

8.2 We use the following types of cookies:

• Strictly necessary cookies: These cookies are required for the essential operation of our Service, such as to authenticate you and prevent fraudulent use.
• Analytical/performance cookies: These cookies allow us to recognize and count the number of visitors and to see how visitors move around our Service when they are using it. This helps us to improve the way our Service works, for example, by ensuring that you can find information easily.
• Functionality cookies: These cookies are used to recognize you when you return to our Service. This enables us to personalize our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).

8.3 Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies.

8.4 You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including strictly necessary cookies) you may not be able to access all or parts of our site.

9. Links to third party sites

9.1 The RiskTools.AI Service may, from time to time, contain links to and from third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

9.2 Some of the pages on our Website may utilize framing techniques to serve content to/from our partners while preserving the look and feel of our Website. Please be aware that you are providing your personal information to these third parties and not to RiskTools.AI.

10. Our policy towards children

10.1 The RiskTools.AI Service is not directed at persons under 16 and we do not intend to collect personal information from children under 16 in our capacity as a controller. If you become aware that a child has provided us with personal information, then please contact us using the details below so that we can take the appropriate steps in accordance with our legal obligations and this privacy policy.

11. Changes to this policy

11.1 We may update this privacy policy from time to time and so you should review this page periodically. When we change this privacy policy in a material way, we will update the “last modified” date at the end of this privacy policy. Changes to this privacy policy are effective when they are posted on this page.

12. Notice to you

12.1 If we need to provide you with information about something, whether for legal, marketing or other business related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email or by placing a notice on our Website.

13. Contacting us

13.1 Regardless of your location, any questions, comments, and requests regarding this privacy policy are welcome and should be addressed to support@risktools.ai. Written correspondence can also be addressed to:

Dosatsu AI RiskTools Inc. PO Box 1249 Garibaldi Highlands, BC Canada V0N 1T0

This privacy policy was last modified on March 31, 2026.