Privacy Policy

Anchorbase Inc. ("Anchorbase," "we," "us," or "our") is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard information when you visit anchorbase.com (the "Site") or interact with our products, services, and communications (collectively, the "Services").

This Policy is intended to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy legislation, and, where relevant, comparable U.S. privacy requirements.

By accessing or using the Site or Services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Anchorbase provides payments infrastructure and workflow automation that connects payment systems with systems of record such as ERPs, DMS platforms, and accounting software. Our Services are primarily offered to businesses and organizations. We do not knowingly provide Services directly to children.

2. Information We Collect

We collect information in three main ways: (a) information you provide directly, (b) information collected automatically, and (c) information we receive from third parties.

2.1 Information You Provide to Us

Depending on how you interact with us, we may collect:

• Contact information such as name, business email address, phone number, company name, job title, and role
• Account and onboarding information provided in connection with demos, pilots, contracts, or customer onboarding
• Communications including emails, form submissions, meeting notes, support requests, and other correspondence
• Payment-related business information provided by merchants or partners for the purpose of configuring or supporting our Services (this may include transaction metadata, but not full card numbers)

We do not intentionally collect sensitive personal information unless it is required for legitimate business, compliance, or security purposes and permitted by law.

2.2 Information Collected Automatically

When you visit the Site, we may automatically collect certain technical and usage information, including:

• IP address and approximate location (city, region)
• Browser type, operating system, device identifiers, and referring URLs
• Pages viewed, links clicked, and time spent on the Site
• Log files and diagnostic data

This information is collected using cookies and similar technologies. See Section 6 for more details.

2.3 Information from Third Parties

We may receive information about you from:

• Business partners, referral partners, or resellers
• Service providers that support analytics, marketing, customer relationship management, or security
• Publicly available sources or professional networks

We only use third-party information in a manner consistent with this Privacy Policy and applicable law.

3. How We Use Information

We use personal information for the following purposes:

• To operate, maintain, and improve the Site and Services
• To evaluate, develop, and deliver our products and integrations
• To communicate with you about demos, pilots, updates, and support
• To manage relationships with customers, partners, and vendors
• To monitor usage, performance, and security of our systems
• To comply with legal, regulatory, and contractual obligations
• To detect, prevent, and investigate fraud, misuse, or security incidents

We do not sell personal information.

4. How We Share Information

We may share personal information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers that perform services on our behalf, such as hosting, analytics, customer support tools, CRM systems, and security monitoring. These providers are contractually required to protect information and use it only for authorized purposes.

4.2 Business Partners

Where appropriate, we may share limited information with integration partners, payment processors, or referral partners in connection with providing or supporting the Services.

4.3 Legal and Regulatory Requirements

We may disclose information where required to comply with applicable laws, regulations, legal processes, or lawful requests from authorities, including payment network rules and financial institution requirements.

4.4 Corporate Transactions

In the event of a merger, acquisition, financing, restructuring, or sale of all or part of our business, information may be disclosed or transferred as part of that transaction, subject to appropriate confidentiality protections.

5. Payments and Financial Data

Anchorbase does not store full credit card numbers or sensitive authentication data. Payment processing is handled by regulated third-party payment processors and financial institutions. Any payment-related information we access or process is limited to what is necessary to provide our Services and comply with applicable security and compliance requirements, including PCI DSS where applicable.

6. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Enable basic Site functionality
• Understand how visitors use the Site
• Improve performance and user experience

You can control cookies through your browser settings. Disabling cookies may affect certain Site features.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, contractual obligation, or regulatory requirement. When information is no longer required, it is securely deleted or anonymized.

8. Data Security

We implement administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures are proportionate to the sensitivity of the information and the risks involved.

No system can be completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Personal information may be processed or stored outside your province, state, or country, including in Canada and the United States, where data protection laws may differ. When we transfer information across borders, we take reasonable steps to ensure appropriate safeguards are in place.

10. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent, subject to legal or contractual restrictions
• Request information about our privacy practices

Requests can be made using the contact information below. We may need to verify your identity before responding.

11. Third-Party Links

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on the Site with a revised "Last updated" date. Continued use of the Site or Services after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact: