Data Governance Statement

My Waypoint Technologies Inc. is committed to responsible data governance across all MyWaypoint products and services. This Data Governance Statement describes the principles and practices governing how we handle data — including the data we collect from users, the data we compile and provide in our products, and the data we process on behalf of customers.

We classify data into the following categories:

• Personal information — information about an identifiable individual, governed by our Privacy Policy
• Business data — information about businesses, organizations, licenses, and public records compiled in our datasets
• Customer data — information provided by customers through account registration, subscriptions, and service use
• Platform data — usage logs, API activity, and operational data generated by platform use
• Public source data — data collected from public records, government datasets, open data portals, and other lawful public sources

My Waypoint Technologies Inc. is responsible for the governance, security, stewardship, and lawful handling of information under its custody or control.

The Company maintains policies, procedures, and operational controls intended to support:

• Privacy protection
• Data quality management
• Information security
• Retention management
• Regulatory compliance
• Incident response
• Vendor oversight

Governance responsibilities are assigned through internal operational processes and may be updated as products, services, and regulatory requirements evolve.

We collect data in accordance with the following principles:

• Purpose limitation — data is collected for specific, identified purposes and not used for incompatible purposes
• Data minimization — we collect only the data necessary for the identified purpose
• Lawful collection — we collect data only from lawful sources using lawful methods
• Transparency — we disclose our data collection practices in our Privacy Policy and product addenda

Our dataset products are compiled from public records, government publications, registries, open data portals, and other lawful sources. We do not collect personal information for inclusion in our business datasets.

The information provided by My Waypoint Technologies Inc. is compiled from a variety of sources and is provided for informational and business intelligence purposes only. My Waypoint does not verify, validate, audit, certify, or independently confirm every record prior to publication.

Users acknowledge and agree that:

• Data may originate from public sources, third-party sources, customer submissions, automated collection processes, manual research, or other sources
• Information may be incomplete, outdated, inaccurate, inconsistent, duplicated, or contain errors
• Records may change after publication
• Inclusion of information in a dataset does not constitute verification, endorsement, certification, approval, or validation by My Waypoint Technologies Inc.

Customers are solely responsible for independently verifying any information before relying on it for business decisions, regulatory compliance, legal matters, or other purposes.

My Waypoint Technologies Inc. makes reasonable efforts to improve the consistency, completeness, usability, and overall quality of information through data normalization, deduplication, enrichment, quality review, and ongoing maintenance activities.

However, information may be incomplete, inaccurate, outdated, inconsistent, duplicated, unavailable, or contain errors.

Data quality activities do not constitute verification, certification, endorsement, approval, auditing, or guarantees of accuracy.

Users remain responsible for independently validating information before relying upon it for business decisions, regulatory compliance, legal matters, or other purposes.

Where appropriate, My Waypoint Technologies Inc. maintains records relating to the origin, attribution requirements, licensing status, update schedules, and processing history of datasets used within its products and services.

We seek to maintain transparency regarding data origins and collection methodologies consistent with legal, contractual, operational, and commercial requirements.

Additional information regarding data sources is available through our Data Sources and Attribution documentation where applicable.

Data is managed throughout its lifecycle from collection through deletion:

• Collection — data is collected from identified lawful sources
• Processing — data is normalized, deduplicated, and enriched as described in our Data Sources and Attribution standard
• Storage — data is stored using appropriate security controls
• Use — data is used only for the purposes described in our Privacy Policy and applicable data license agreements
• Retention — data is retained only as long as necessary; see our Data Retention Statement
• Deletion — data is deleted, anonymized, or securely disposed of when no longer required

Certain data processing activities may utilize automation, machine learning, artificial intelligence, or other advanced processing technologies.

The use of such technologies is governed by our Responsible AI Statement and internal governance practices.

Where AI-assisted processing is utilized, human oversight, quality review, operational controls, and privacy safeguards may be applied based on the nature of the activity and associated risks.

AI use does not alter our responsibilities regarding privacy, security, data governance, or legal compliance.

My Waypoint Technologies Inc. operates under the following regulatory frameworks:

• PIPEDA — Personal Information Protection and Electronic Documents Act (federal) — applies to interprovincial and cross-border activities, subscription API services, and data refinery operations involving cross-border data flows
• PIPA BC — Personal Information Protection Act (British Columbia) — applies to local operations, data handling within British Columbia, and employee privacy
• CASL — Canada's Anti-Spam Legislation (electronic communications)
• Business Corporations Act (BC) — Business Corporations Act (SBC 2002, c. 57) — governing corporate legislation

This Statement is governed by and construed in accordance with the laws of the Province of British Columbia and the federal laws of Canada applicable therein.

See our Privacy Policy for details of our privacy compliance practices.