Data Processing Addendum (DPA)

Effective Date: January 15, 2026

This Data Processing Addendum ("DPA") forms part of the agreement between the customer ("Customer" or "Data Controller") and Diskloz Technologies Corp. ("Diskloz" or "Data Processor") concerning the processing of personal data in connection with the Customer's use of Diskloz’s software-as-a-service (SaaS) offerings.

1. Roles and Responsibilities

• Customer (Data Controller): Determines the purposes and means of processing personal data.

• Diskloz (Data Processor): Processes personal data on behalf of Customer in accordance with this DPA and the agreement between the parties.

2. Scope of Processing

Diskloz will process Customer Data solely to provide the Services, maintain and improve the platform, ensure security, and comply with contractual and legal obligations.

3. Categories of Data

The personal data processed may include:

• Customer contact information, account credentials, and billing details

• User activity and usage logs related to the Services

• Any other personal data provided by Customer for the purpose of using the Services

4. Data Subject Rights

Diskloz will assist Customer in responding to requests from data subjects to exercise their rights under applicable data protection laws, including PIPEDA and, where applicable, U.S. privacy laws.

5. Sub-Processors

Diskloz may engage sub-processors to perform services on its behalf. Diskloz shall maintain a list of sub-processors and ensure that each is bound by obligations equivalent to those in this DPA.

6. Security Measures

Diskloz implements reasonable administrative, technical, and physical safeguards to protect Customer Data against unauthorized access, disclosure, alteration, or destruction.

7. Cross-Border Transfers

Customer Data may be stored or processed outside of Canada, including in the U.S. Diskloz ensures that any cross-border transfers comply with applicable laws and maintain an adequate level of data protection.

8. Data Retention and Deletion

Upon termination of the Services or at Customer’s request, Diskloz will return or securely delete Customer Data, unless retention is required by law.

9. Audits and Compliance

Diskloz shall make information and documentation available to Customer to demonstrate compliance with this DPA and applicable privacy laws.

10. Governing Law

This DPA is governed by the laws of the Province of Alberta, Canada, without regard to conflict of laws principles.

11. Contact Information

Diskloz Technologies Corp.
#202, 14204 128 Ave NW, Edmonton, AB T5L 3H5
Email: privacy@diskloz.com