Effective date: November 1, 2024

At MyTrials.AI Solutions Inc., a federal Canadian company (together with its affiliates, “MyTrials.AI”, “we” or “us”), we take your privacy seriously. Please read this Privacy Policy to learn how we treat User Data collected in connection with the performance of the Services.

By using or accessing our products or services (collectively, “Services”) in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and share your information as described in this Privacy Policy.

What this Privacy Policy Covers

This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services.

“Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules or regulations, including sensitive health information, medical history and clinical trial eligibility, and any other personal health information regulated under applicable law, including without limitation under Health Insurance Portability and Accountability Act (United States), the Personal Information Protection and Electronic Documents Act (Canada), the General Data Protection Regulation (GDPR) and any other applicable state, provincial, local or foreign legislation.

Personal Data can include User Data.

We offer matching services between patients and health service providers. We will only share your Personal Data with third parties, such as clinical trial sponsors or research institutions, with your explicit consent.

This Privacy Policy does not cover the practices of companies we don’t own or control or people we don’t manage. In particular, when receiving services from a health service provider as a patient, your privacy is the responsibility of that health service provider. When we assist your health service provider in providing a service through our platform and services, we are acting as a supplier to your health service provider. In this role, we are responsible for following the privacy policies of your health service provider and protecting your personal and health information in accordance with the relevant legislation applicable to your health service provider.

For purposes of this Privacy Policy, the capitalized terms “You”, “User”, and “User Data” have the respective meanings attributed thereto in MyTrials.AI’s terms of service relating to the provision of the Services set forth here: **, as such terms of service may be amended from time to time (the “Terms of Service”).

Compliance with Applicable Law

We will only use your Personal Data in compliance with applicable law. If your Personal Data is transferred outside of Canada for the purposes of clinical trial matching (e.g., to the United States or European Union), we will ensure that such transfers comply with applicable data privacy regulations, such as PIPEDA or GDPR, and that appropriate safeguards are in place to protect your Personal Data.

Acceptance Of Terms And Revisions

By accessing the Site, submitting information to us (regardless of whether you register an account with us) or downloading, installing or using any of the content or services, you consent to become our customer and consent to the collection and use of your information in accordance with this Privacy Policy and applicable law. If you do not accept this Privacy Policy, you must not submit information to or register an account with us, access the Site or download, install or use any of the content or services.

When you engage a health service provider for clinical trial or other service though our platform and services, you are consenting to the health service provider's services and thus to their privacy policies that we as their supplier is also bound to follow in accordance with applicable law and any agreements between us and such health service provider(s).

We reserve the right to revise this Privacy Policy at any time. We will give you notice of such revisions by posting the revised Privacy Policy at **. It is your responsibility to ensure that you are aware of the current Privacy Policy when you access or use the website and/or Services. If you continue to access or use any of the website and/or Services after any revisions to this Privacy Policy are posted, you will be deemed to have accepted those revisions.

You can withdraw your consent to the collecting of Personal Data at any time by terminating your account. For information on how to delete your account, see **. You have the right to access the Personal Data we hold about you, including health-related information, and (to the extent made available by the Service at any time) to request corrections or obtain a portable copy of your Personal Data for use in other services.

CONSENT – PERSONAL DATA

BY SUBMITTING PERSONAL DATA TO MEDME HEALTH AS A CUSTOMER, YOU AGREE TO OUR COLLECTING YOUR PERSONAL DATA. IN SO DOING SO, YOU CONSENT TO THE USE, DISCLOSURE AND TRANSFER OF YOUR PERSONAL DATA IN ACCORDANCE WITH THIS PRIVACY POLICY AND TO THE EXTENT PERMITTED OR REQUIRED BY APPLICABLE LAW.

Subject to legal and contractual requirements, you may refuse or withdraw your consent to the collection, use, disclosure and transfer of your Personal Data for certain of the purposes described herein at any time by contacting us using the contact information below. If you refuse or withdraw your consent, you acknowledge that we may not be able to provide or continue to provide you with certain services that may be of value to you.

CONSENT – PERSONAL HEALTH INFORMATION

BY PROVIDING PERSONAL HEALTH INFORMATION DIRECTLY TO YOUR HEALTHCARE SERVICE PROVIDER OR TO US AS ITS SUPPLIER, IN CONNECTION WITH RECEIVING A HEALTHCARE SERVICE FROM THEM, YOU AGREE THAT THE HEALTHCARE SERVICE PROVIDER AND ITS AFFILIATES MAY COLLECT YOUR PERSONAL HEALTH INFORMATION. YOU THEREFORE CONSENT TO THE USE, DISCLOSURE, AND TRANSFER OF YOUR PERSONAL MEDICAL INFORMATION TO FACILITATE YOUR RECEIPT OF THIS SERVICE, IN ACCORDANCE WITH THE HEALTHCARE SERVICE PROVIDER'S PRIVACY POLICIES AND TO THE EXTENT PERMITTED OR REQUIRED BY APPLICABLE LAW.

Personal Data
Categories of Personal Data

We Collect For purposes of the California Consumer Privacy Act ("CCPA") and otherwise, this chart details certain categories of Personal Data that we may collect but may not be an exhaustive list, in each case in respect of any legal services provider using the Services or any primary applicant or other Authorized User (as defined in MyTrials.AI’s terms of service, as amended from time to time) using the Services and such Authorized User’s respective spouses and other family members:

Category of Personal Data	Examples of Personal Data We Collect	Categories of Third Parties With Whom We Share this Personal Data	How We Use this Personal Data
Profile or Contact Data	First and last name Email Phone number and address Business name and industry	Service Providers Analytics Partners Business Partners Parties You Authorize, Access or Authenticate	Customer support To transmit information between users collaborating on a project Fraud prevention and security Improving and developing our services
Payment Data	Billing address, phone number, and email	Our payment processing partner(s)	Payment collection Customer support Fraud prevention and security
Commercial Data	Purchase history Consumer profiles	Service Providers Business Partners Parties You Authorize, Access or Authenticate	Customer support Improving and developing our services
Online Identifiers	Unique identifiers such as account name and passwords	Service Providers Analytics Partners Business Partners Parties You Authorize, Access or Authenticate	Customer support Fraud prevention and security Improving and developing our services
Device/IP Data	IP address Device ID Domain server Type of device/operating system/browser used to access the Services	Service Providers Analytics Partners	Customer support Fraud prevention and security Improving and developing our services
Web Analytics	Browsing or search history Web page interactions Referring webpage/source through which you accessed the Services Statistics associated with the interaction between device or browser and the Services	Service Providers Analytics Partners	Customer support Improving and developing our services

Categories of Sources of Personal Data

We collect Personal Data from or about you from the following categories of sources:

User Data

When you provide such information directly to us:
- When you create an account or use our interactive tools and Services, including uploading or providing User Data in connection with your use of the Services.
- When you voluntarily provide information in free-form text boxes through the Services or through responses to surveys or questionnaires.
- When you send us an email or otherwise contact us.
- When you authorize third-party integrations.
When you use the Services and such information is collected automatically:
- Through Cookies (defined in the “Tracking Tools, Advertising and Opt-Out” section below).
- If you use a location-enabled browser, we may receive information about your location and mobile device, as applicable.
- If you download and install certain applications and software we make available, we may receive and collect information transmitted from your computing device for the purpose of providing you the relevant Services, such as information regarding when you are logged on and available to receive updates or alert notices.

Public Records

From the government or other sources.

Third Parties

Vendors and Brokers:
- We may use analytics providers to analyze how you interact and engage with the Services, or third parties may help us provide you with customer support.
Advertising Partners:
- We receive information about Users from some of our vendors who assist us with marketing or promotional services related to how Users interact with our websites, applications, products, Services, advertisements, or communications.
Social Networks:
- If you provide your social network account credentials to us or otherwise sign in to the Services through a third-party site or service, some content and/or information in those accounts may be transmitted into your account with us.
Third-Party Data Integrations (e.g., Yelp or Google Maps)

Our Commercial or Business Purposes for Collecting Personal Data

Providing, Customizing and Improving the Services
- Creating and managing your account or other user profiles.
- Processing orders or other transactions; billing.
- Providing you with the products, services, or information you request.
- Meeting or fulfilling the reason you provided the information to us.
- Providing support and assistance for the Services.
- Improving the Services, including testing, research, internal analytics, and product development.
- Personalizing the Services, website content, and communications based on your preferences.
- Doing fraud protection, security, and debugging.
- Carrying out other business purposes stated when collecting Personal Data or as otherwise set forth in applicable data privacy laws, such as the California Consumer Privacy Act.
Marketing the Services
- Marketing and selling the Services.
Corresponding with You
- Responding to correspondence that we receive from you, contacting you when necessary or requested, and sending you information about MyTrials.AI or the Services.
- Sending emails and other communications according to your preferences or that display content that we think will interest you.
Meeting Legal Requirements and Enforcing Legal Terms
- Fulfilling our legal obligations under applicable law, regulation, court order, or other legal process, such as preventing, detecting, and investigating security incidents and potentially illegal or prohibited activities.
- Protecting the rights, property, or safety of you, MyTrials.AI, or another party.
- Enforcing any agreements with you.
- Responding to claims that any posting or other content violates third-party rights.
- Resolving disputes.

We will not use the Personal Data we collected for materially different, unrelated or incompatible purposes without providing you notice.

How We Share Personal Data

We disclose Personal Data to the categories of service providers and other parties listed in this section. Depending on laws that may be applicable to you, some of these disclosures may constitute a “sale” of Personal Data. For more information, please refer to the state-specific sections below.

Service Providers. These parties help us provide the Services or perform business functions on our behalf. To the extent such Service Providers are located outside Canada, the jurisdictions in which User Data is stored shall be subject to privacy legislation that provides a comparable level of protection to the protection provided by applicable Canadian privacy legislation. Without limiting the foregoing, data will be collected, used and disclosed in the United States. Service Providers include:

Hosting, technology and communication providers.
Security and fraud prevention consultants.
Support and customer service vendors.
Product fulfillment and delivery providers.
Payment processors.

Our payment processing partner(s) may collect your voluntarily-provided payment card information necessary to process your payment.
Please see our payment processors’ terms of service and privacy policies for information on their respective use and storage of Personal Data.

Analytics Partners. These parties provide analytics on web traffic or usage of the Services. They include:

Companies that track how users found or were referred to the Services.
Companies that track how users interact with the Services.

Business Partners. These parties partner with us in offering various services. They include:

Businesses that you have a relationship with:
Companies that we partner with to offer joint promotional offers or opportunities.

Parties You Authorize, Access or Authenticate

Third parties you access through the services.
Social media services.
Other users.

Legal Obligations

We may share any Personal Data that we collect with third parties in conjunction with any of the activities set forth under “Meeting Legal Requirements and Enforcing Legal Terms” in the “Our Commercial or Business Purposes for Collecting Personal Data” section above.

Business Transfers

All of Personal Data that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy or other transaction in which that third party assumes control of our business (in whole or in part). Should one of these events occur, we will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies and practices.

Data that is Not Personal Data

We may create aggregated, de-identified or anonymized data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymized data and share it with third parties for our lawful business purposes, including to analyze, build and improve the Services and promote our business, provided that we will not share such data in a manner that could identify you.

Tracking Tools, Advertising and Opt-Out

Essential Cookies
- Required for providing you with features or services that you have requested. For example, certain Cookies enable you to log into secure areas of our Services. Disabling these Cookies may make certain features and services unavailable.
Functional Cookies
- Used to record your choices and settings regarding our Services, maintain your preferences over time, and recognize you when you return to our Services. These Cookies help us to personalize our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).
Performance/Analytical Cookies
- Allow us to understand how visitors use our Services by collecting information about the number of visitors, what pages they view, and how long they stay. These cookies help us measure the performance of our advertising campaigns and improve the Services’ content.
- For example, Google Analytics uses cookies in connection with its services. Google’s ability to use and share information collected by Google Analytics about your visits to the Services is subject to the Google Analytics Terms of Use and the Google Privacy Policy.
- You can opt-out of Google’s use of Cookies by visiting the Google advertising opt-out page at here or the Google Analytics Opt-out Browser Add-on at here.

You can decide whether or not to accept Cookies through your browser’s settings. Most browsers have options to disable Cookies or allow you to manage them individually. You can also delete all Cookies that are already on your device, though this may require you to manually adjust some settings each time you visit our website.

To find out more about managing and deleting Cookies, visit http://www.allaboutcookies.org/.

Data Security and Retention

We seek to protect Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Data and how we are processing that data. You should also help protect your data by appropriately selecting and protecting your password and/or other sign-on mechanism; limiting access to your computer or device and browser; and signing off after you have finished accessing your account. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure. We retain Personal Data in accordance with the terms and conditions of the Terms of Service.

In some cases we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally.

Personal Data of Children

We acknowledge and will comply with our obligations under applicable privacy legislation in respect of the collection of Personal Data about your children and dependents. We may collect, solicit and store Personal Data about your children and other dependents in connection with the provision of the Services. If any such children or dependents are minors for purposes of applicable privacy legislation, you represent that you are the legal parent or guardian of such persons and hereby expressly consent to our collection, solicitation and storage of such Personal Data for the sole and limited purpose of our providing the Services; provided however that it is acknowledged that minors have rights under applicable privacy legislation to object to their parents’ authorizations to the extent they are capable of doing so. If any such children or other dependents are not minors for purposes of applicable privacy legislation, you represent that you have obtained such persons’ express consent to our collection, solicitation and storage of such Personal Data for the sole and limited purpose of our providing the Services.

State Law Privacy Rights

California Resident Rights

The CCPA allows you to make certain requests about your personal information. Specifically, the CCPA allows you to request us to:
- Inform you about the categories of personal information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we share/disclose personal information.
- Provide access to and/or a copy of certain personal information we hold about you.
- Delete certain personal information we have about you.
- Provide you with information about the financial incentives that we offer to you, if any.

The CCPA further provides you with the right not to be discriminated against (as provided for in applicable law) for exercising your rights. Please note that certain information may be exempt from such requests under California law. For example, we need certain information to provide the Services to you. We also will take reasonable steps to verify your identity before responding to a request. If we are unable to verify you, we shall have the right, but not the obligation, to request additional information from you.

If you would like further information regarding your legal rights under California law or would like to exercise any of them, or if you are an authorized agent making a request on a California consumer's behalf, please contact us using the contact information provided below. If you are a Customer End User, please contact the Customer who has provided your information to us for more information.

The California "Shine the Light" law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not share your personal information with third parties for their own direct marketing purposes.

Please note that the CCPA sets forth certain obligations for businesses that "sell" personal information to third parties. We do not engage in such activity as defined in the CCPA and have not engaged in such activity in the past twelve months from the Effective Date of this Policy.

Nevada Resident Rights

If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. You can exercise this right by contacting us at info@mytrials.ai with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. We do not sell Personal Data to third parties.

Changes to this Privacy Policy

We’re constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time, but we will alert you to any such changes by placing a notice on the MyTrials.AI website, by sending you an email and/or by some other means. Please note that if you’ve opted not to receive legal notice emails from us (or you haven’t provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes. Use of information we collect is subject to the Privacy Policy in effect at the time such information is collected.

Contact Information If you have any questions or comments about this Privacy Policy, the ways in which we collect and use Personal Data or your choices and rights regarding such collection and use, please do not hesitate to contact us at:

Website: https://mytrials.ai/connect
Email: info@mytrials.ai