Effective Date: October 1st, 2026
Reviewed: September 1st, 2026
This Privacy Policy applies to CoffeePals Technologies Inc., with a registered office located at 403-134 Abbott Street, Vancouver, British Columbia, Canada, V6B 2K4, (“Company”, “we”, “our” or “us”) services, including but not limited to our website coffeepals.com (the “Website”), our Microsoft Teams application entitled “CoffeePals” (“CoffeePals”) and any other product or service that we choose to apply this Privacy Policy to (collectively, the “Service”), and details how we collect, use, and disclose data about our users, including you. Where capitalized terms are not defined in this Privacy Policy, the applicable definition from the Terms of Service shall be used.
BY CLICKING “I AGREE” OR SIMILAR CONFIRMATION OR BY USING THE SERVICE YOU ARE AGREEING TO THE TERMS OF THIS PRIVACY POLICY AS APPLICABLE IN YOUR JURISDICTION.
1. HOW WE OBTAIN YOUR DATA
The Service collects and processes personal data, which is information about you or that identifies you, as well as anonymous data, which does not identify you.
We obtain your personal data directly from you or when you use the Service. In many circumstances you may be required to submit personal data in order to access the Service. Your provision of personal data to Company is governed by any terms of use, end-user license agreement or similar agreement that we may apply to the Service, which you must agree to in order to use the Service, and this Privacy Policy. You are responsible for providing complete and accurate personal information to facilitate the successful use of the Service. If you have any questions or concerns about the disclosure of your personal data, please contact us at your convenience using the contact information found below.
Subject to legal, contractual and technical requirements, you may choose not to provide Company with certain data or request the deletion of certain data, which may impact Service features available to you or essential operations of the Service.
2. PERSONAL DATA WE COLLECT
The following is a description of the personal data that we may collect, use and process in connection with the Service:
● Microsoft Account data, which may include all personal information shared by you on the Microsoft Account including but not limited to your first and last name, user ID, your workplace, email address, phone number and address;
● your profile picture and biography on your Microsoft Account and any other personal information you choose to share on the Microsoft Account;
● data related to Coffee Chats such as matching history and booking times;
● your calendar and schedule information;
● your time zone information, and other indicators of location including but not limited to business addresses;
● support and feedback data information and all messages related to troubleshooting tickets or feedback submission to Company;
● information relating to the device through which you access the Service, which may include your operating system, associated software, product keys, and network;
● your browsing and usage data associated with the Service;
● your IP address;
● advertising and campaign information, including advertising click identifiers, campaign parameters, landing-page and referrer information, and a first-party pseudonymous identifier used to connect visits across the Website and Service; and
● consent and privacy-choice records.
We also collect anonymous data that does not identify you, including but not limited to responses to anonymous feedback requests, metrics and other types of statistical data, which could be derived from use of the Service and analytical data concerning the Service.
3. PROCESSING OF YOUR PERSONAL AND ANONYMOUS DATA
We process your personal and anonymous data primarily for our legitimate business purposes, such as providing the Service to you, to understand your needs and the needs of our users and to improve the quality of the Service and analyze the data we collect. Specifically, these uses include but are not limited to:
● providing the Service;
● interacting with you through our social media accounts or profiles and providing customer support and feedback;
● authenticating users;
● maintaining and analyzing functionality of CoffeePals and the Service, backing up data, testing and developing new aspects of CoffeePals, researching new features of the Service, updating CoffeePals and the Service and generating reports and data models that we use to improve the Service;
● supporting the security and integrity of the Service and its users including but not limited to detecting and protecting CoffeePals and other third-parties against error, fraud, theft and other illegal activity or for contractual, legal, regulatory or audit obligations;
● investigating improper or suspicious activity; and
● contacting you for various reasons including, but not limited to, user feedback requests or marketing purposes and events, if you previously consented to such contact.
We may disclose your personal and anonymous data to our parent companies, affiliates, subsidiaries, employees and contractors for the same purposes described above. We may also disclose your personal and anonymous data to third-parties, who may be located in a foreign jurisdiction and subject to foreign laws. The situations where we disclose your personal and anonymous information to third-parties include, but are not limited to:
● processing your information as described above as well as providing and enhancing the Service features;
● providing customer support and feedback, analyzing Service functionality and technical issues, tracking use of the Service and generating reports and data models that we use to improve the Service;
● measuring advertising performance, attributing conversions, and delivering personalized advertising; and
● responding to a request from law enforcement or a government that has asserted its lawful authority to obtain the data or where Company has reasonable grounds to believe the data could be useful in the investigation of unlawful activity, complying with a subpoena or warrant or an order made by a court, person or body with jurisdiction to compel the production of data, complying with court rules regarding the production of records and data, defending our rights and the rights of others or providing information to our legal counsel.
We may use contact information, advertising identifiers, and Website or Service usage information to measure advertising performance, attribute conversions, and deliver personalized advertising. Where required by applicable law, we obtain consent for these activities; otherwise, we provide applicable opt-out rights.
4. THIRD-PARTY SERVICES
In accordance with this Privacy Policy, we may disclose personal information to third parties or service providers in other provinces or countries, where it may be processed, stored or transferred under different privacy laws. We use contractual and other safeguards required by applicable law. Our current subprocessors are identified on our Subprocessors page. Other recipients are described by category in this Policy. Please contact us using the information below if you would like to learn more about third-party data practices.
5. COOKIES AND DIGITAL TRACKING TECHNOLOGIES
We use a consent management platform to manage choices about analytics and advertising technologies. Where required by applicable law, we obtain consent before using these technologies; otherwise, we provide applicable opt-out rights. You can review or change your choices through our Cookie Settings control.
The Service may use tracking technologies, such as cookies, web beacons, JavaScript tags and clear GIFs to collect data about you, such as your IP address and device information. Based on the data collected from the above listed tracking technologies, third-parties may be able to resolve your identity across multiple devices, for example, by matching your IP address, in order to target you based on your behavior. This data is collected, used and disclosed in accordance with the terms of this Privacy Policy and applicable third-party privacy policies. By disabling certain tracking features, you may not have access to certain Service features.
6. OBTAINING, RECTIFYING AND CONTROLLING YOUR PERSONAL DATA
You may contact Company to obtain a copy of any personal data we collected about you, the production of which may be subject to a fee as permitted by applicable law. In addition, you are responsible for the accuracy and completeness of your personal data, and you may contact Company to correct inaccurate personal data or to complete incomplete personal data.
You may be able to opt-out of some or all of the ways in which your personal data is processed, or request the deletion of certain personal data, except where the personal data is necessary or vital:
● for the performance of contractual obligations, such as the terms of use;
● to comply with our legal obligations;
● to protect your interests or those of another person; or
● for our legitimate interests or the legitimate interests of a third-party,
and may do so by removing personal data, if the Service permits such removal, by ceasing your access to the Service and contacting us using the contact information found below.
7. DATA STORAGE, RETENTION AND TRANSFERS
While Company is a Canadian company, the data you provide through the Service may be stored and processed by third parties in countries around the world. You authorize Company and third parties acting on our behalf to process your data in any country of their choosing, which may cause your data, including personal and anonymous data, to be subject to privacy protections and legal rights that may not be equivalent to those in your country.
Company complies with international personal-data transfer laws that apply to it. Where required, transfers are supported by an adequacy decision, an applicable data-privacy framework, standard contractual clauses or another lawful transfer mechanism.
We retain each category of personal information for as long as reasonably necessary for the purposes described in this Policy and to meet applicable legal, accounting, reporting, contractual and compliance requirements. The retention period depends on the nature of the information, why it was collected and applicable requirements.
We retain active customer data while the customer remains active and for up to 1 year after the customer ceases to be active, unless earlier deletion is requested or a longer retention period is required by law or contract. An active customer is an organization in which at least one user is actively using the Service. After 1 year of an organization’s last activity in the Service, organization data, including users, teams, matches, analytics, and related Service data, is deleted.
8. CHILDREN
Company complies with the United States Children’s Online Privacy Protection Act and all other applicable privacy laws and regulations concerning children and the Internet including laws applicable to residents of the EEA. The Service and CoffeePals are not directed to children under the age of 18 and although it may be possible that children below the age of 18 access certain features of the Service, we do not knowingly collect personal data from children under the age of 18 without first obtaining the appropriate parental consent required by law. If we learn that we inadvertently collected personal data from a child under the age of 18, in a jurisdiction where consent of a parent or guardian is required to be collected prior to the collection of such personal data, without first obtaining such appropriate parental consent, we will delete that data as quickly as possible. If you are a parent or guardian of a child under 18, who you believe provided Company with personal data without your consent, please contact us at privacy@coffeepals.com.
9. DO NOT TRACK DISCLOSURE
Some browsers may transmit a Do Not Track (“DNT”) signal. Because there is no generally accepted standard for interpreting DNT signals, we do not currently respond to DNT. DNT is distinct from legally recognized opt-out preference signals, such as Global Privacy Control (“GPC”), which we honor where required by applicable law.
10. CALIFORNIA “SHINE THE LIGHT” RIGHT
We may disclose online identifiers and activity to advertising partners for targeted or cross-context behavioral advertising. Depending on applicable law, these disclosures may be considered a “sale,” “sharing,” or targeted advertising. You may exercise applicable opt-out rights through our Cookie Settings control, and we process supported opt-out preference signals as required by law.
Depending on where you live, you may have rights to request access to, correction or deletion of, or a portable copy of your personal information; to opt out of its sale, sharing or use for targeted advertising; and to appeal our response to a request. You may exercise applicable rights without unlawful discrimination by contacting privacy@coffeepals.com. Where permitted, we may take reasonable steps to verify your request.
Please note that you may only make this request once per year.
11. YOUR CALIFORNIA PRIVACY RIGHTS
If you are a California resident, California Civil Code Section 1798.120 permits you to opt-out of the sale of your personal information to third parties. Currently, Company does not sell your personal information to third parties and as such no opt-out of the sale of such personal information is necessary. Although Company does not sell your personal information, Company does provide a general opt-out right to all of our clients and users as described in our Privacy Policy. Furthermore, as Company already complies with Canadian and EU privacy laws, the rights required to be provided by law to Californian residents are provide to all our clients and users. If you have any other questions about our privacy practices, please email us at privacy@coffeepals.com.
12. EUROPEAN USERS AND RIGHTS OF EUROPEAN ECONOMIC AREA RESIDENTS
Depending on the circumstances and applicable law, Company processes personal data with consent, as necessary to provide the Service, to comply with legal obligations, or for legitimate interests that are not overridden by your rights. Where consent applies to analytics or advertising technologies, you may withdraw it through our Cookie Settings control. In addition, when you provide consent to contact you using your email address or when providing us your contact information by linking a third-party Account to our Service, Company may contact and communicate with you using this information, pursuant to Article 6(1)(a) of the GDPR.
If you are a resident of the European Union or the United Kingdom, you have certain rights in regard to your personal data. These rights include:
● A Right of Access. You have the right to access your personal data that we hold about you free of charge in most circumstances;
● A Right to be Informed. You have the right to transparency regarding the gathering and use of your data, as detailed in this Privacy Policy;
● A Right to Rectification. If your personal data is inaccurate or incomplete, you can change the information you provided by changing the information yourself on your Account or by contacting Company using the email listed below;
● A Right to Erasure. You have the right to obtain deletion of personal data concerning you in many cases. Often you can just delete your information by yourself through your Account, but you can also request the deletion by using the contact information found below. Please be careful as the deletion of your data in this manner is permanent and may never be restored;
● A Right to Object. If the processing of your personal data is based on legitimate interests according to Article 6(1)(f) of the GDPR, you have the right to object to this processing in most cases. If you object, we will no longer process your personal data unless there are compelling and prevailing legitimate grounds for the processing as described in Article 21 of the GDPR; in particular if the personal data is necessary for the establishment, exercise or defense of legal claims or in the case where the personal data is required for the provision of certain features of the Service, and you still wish to use such features of the Service;
● A Right to file a Complaint. You have the right to file a complaint with the appropriate supervisory authority in your jurisdiction;
● A Right to Restriction of Processing of your Personal Data. You have the right to obtain restrictions on the processing of your personal data as described in Article 18 of the GDPR;
● A Right to Personal Data Portability. You have the right to receive your Personal Data in a structured, commonly used and machine-readable format and have the right to transmit such data to another controller under the conditions described in Article 20 of the GDPR. Although the personal data collected by Company is not particularly useful to other companies as the data collected largely relates to your usage of the Service, Company will comply with all requests for the portability of your personal data;
● A Right to Post-Mortem Control of Your Personal Data. If data protection legislation and related regulations in France are applicable to you, you have the right to establish guidelines for the preservation, the deletion and the transmission of your personal data after your death in accordance with Article 40-1 of the Act No. 78-17 of January 6, 1978 on Information, Technology, Data Files and Civil Liberties;
● A Right to Opt-out of Marketing Communications. You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link on any marketing e-mails Company sends you. To opt-out of other forms of marketing, please contact us using the contact details provided below; and
● A Right not to be Subject to Solely Automated Decisions. You have the right to not be subject to solely automated decisions, including profiling, which have a legal or similarly significant effect upon you.
13. CHANGE OF OWNERSHIP OR BUSINESS TRANSITION
In the event of, or in preparation for, a change of ownership or control of Company or a business transition such as the sale of Company or the sale or license of some or all Company’s assets, we may disclose and/or transfer your personal and anonymous data to third-parties who will have the right to continue to collect and use such data in the manner set forth in this Privacy Policy.
14. SECURITY
We are committed to ensuring that your data is secure. To prevent unauthorized access, disclosure, or breach, we put in place suitable physical, electronic, and administrative procedures to safeguard and secure the data we collect and process. More about our security processes can be found at coffeepals.com/security.
15. CONTACT PREFERENCES
We may communicate with you through the Service itself, but we may sometimes collect your email address in order to respond to support requests or comments. If you have provided us with your email address and would like to change the email preferences we associate with you (for example, unsubscribing from receiving certain types of email) you may do so by clicking a link within certain types of emails that we send to you or, if no link is available, by replying with “unsubscribe” in the email title or body or by modifying your email settings within the Service. On rare occasions, some types of email are necessary for the Service and cannot be unsubscribed from if you continue to use the Service.
16. UPDATES
Company reserves the right, in its sole discretion, to modify the Privacy Policy at any time (“Updates”) and shall make Updates available on the Website. You are deemed to accept Updates by continuing to use the Service. Unless Company states otherwise, Updates are automatically effective 30 days after posting on the Website.
17. CONTACT US
If you have requests, questions or comments about the Privacy Policy or our data collection in general, please contact us directly at privacy@coffeepals.com or contact our Data Protection
Officer, Kacper Zylka, at kacper[at]coffeepals.com.
If you are not satisfied with our response to a privacy request or complaint, you may lodge a complaint with the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca/. If you are located in British Columbia, you may also contact the Office of the Information and Privacy Commissioner for British Columbia at https://www.oipc.bc.ca/.