Mission Impact Partners

WEBSITE PRIVACY POLICY

Version 1.0 — Effective January 2026

This Website Privacy Policy (the "Privacy Policy") describes the types of information Mission Impact Partners Ltd., doing business as Mission Impact Partners, Data Mission, "MIP", "we", "us", or "our", collects from you ("you" or "your") when you visit our websites at https://missionimpact.partners and https://datamission.io (collectively, the "Websites"). It also describes how we use and disclose such information, as well as your rights with respect to MIP's collection, use, and disclosure of such information.

Scope: This Privacy Policy applies only to your use of the Websites. If you use MIP's software applications (such as DvSchemaSync or DvDataSync) or cloud-hosted services (such as Data Mission Sync), please refer to the applicable End User License Agreement or Subscription Service Agreement and their associated privacy terms, which govern data handling for those products and services.

This Privacy Policy is to be read together with MIP's Website Terms of Use located at https://missionimpact.partners/terms-of-use or https://datamission.io/terms-of-use ("Terms of Use"), which is incorporated into and forms a part of this Privacy Policy.

We understand the importance of your privacy and we treat all information we receive in a responsible manner. By accessing or using the Websites, you agree that we may collect, use, and disclose Personal Data, Aggregate Information, and Cookies pursuant to this Privacy Policy.

We may change or update this Privacy Policy from time to time by posting the revised version on the Websites. Therefore, you should periodically verify the date of this Privacy Policy to ensure that you are familiar with the most up-to-date version, as the most up-to-date version will govern with respect to your use of the Websites.

1. Information We Collect

When you use the Websites, MIP may collect the following types of information:

(a) Personal Data

Personal Data is any information directly or indirectly relating to an identified or identifiable individual, such as a name, an identification number, email address, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual ("Personal Data").

(b) Aggregate Information

Aggregate Information is information about your activities on or in connection with the Websites that typically cannot be used to identify, locate, or contact you ("Aggregate Information"). For example, Aggregate Information includes information regarding the frequency of visits to the Websites, browser types, operating systems, pages viewed, and general usage patterns.

(c) Cookies and Similar Technologies

Cookies, beacons, device identifiers, or similar technologies (referred to for convenience as "Cookies") are small pieces of data placed on your device that your web browser uses to access the Websites and that permit MIP to track your activity. We obtain information from Cookies when you visit the Websites. You may turn off Cookies in your browser settings, but this may limit functionality of the Websites. Cookies help analyze usage and provide certain functionality. Cookies do not typically contain Personal Data; however, if Cookies do contain Personal Data, such Personal Data will only be used or disclosed in the same manner as other Personal Data pursuant to this Privacy Policy.

2. Types of Cookies We Use

The Websites may use the following types of Cookies:

1. Essential Cookies: These Cookies are necessary for the Websites to function properly. They enable basic features such as page navigation, access to secure areas, and form submissions. The Websites cannot function properly without these Cookies.
2. Analytics Cookies: These Cookies help us understand how visitors interact with the Websites by collecting and reporting information anonymously. This helps us improve the Websites' structure and content.
3. Functional Cookies: These Cookies enable the Websites to remember choices you make (such as your language preference) and provide enhanced, personalized features.
4. Marketing Cookies: These Cookies may be used to track visitors across websites to display relevant advertisements. MIP does not currently use marketing Cookies, but reserves the right to do so in the future with appropriate notice.

3. Third-Party Embedded Content

The Websites may contain embedded content from third-party services such as YouTube, Vimeo, or social media platforms. When you interact with embedded content, the third-party provider may collect information about you and set Cookies on your device. For detailed information about how embedded third-party content operates, please refer to Section 6 (Embedded Third-Party Content) of the Website Terms of Use.

MIP has no control over the data collection practices of third-party content providers. We encourage you to review the privacy policies of any third-party services whose content is embedded on the Websites.

4. How We Collect Personal Data

MIP collects Personal Data through the Websites when:

1. you submit a contact form or inquiry;
2. you subscribe to a newsletter or mailing list;
3. you register for an event, webinar, or other offering;
4. you request information about our products or services;
5. you communicate with MIP via email or other means;
6. you voluntarily provide Personal Data through any other feature of the Websites.

5. AI-Assisted Communications

MIP may use artificial intelligence ("AI") systems to assist in responding to inquiries submitted through the Websites. This section explains how AI is used and how your data is handled:

(a) Use of AI

MIP may use AI systems to initially review, respond to, and potentially resolve inquiries submitted through contact forms or other communication channels on the Websites. Human representatives may review and respond to inquiries that require additional attention or that cannot be resolved by AI systems.

(b) Third-Party AI Service Providers

MIP may utilize third-party AI services (such as OpenAI's ChatGPT or Anthropic's Claude) to assist in providing responses. When your inquiry is processed by such third-party AI services, the data is transmitted privately and securely using enterprise-grade API connections that do not use your data to train AI models.

(c) Information Processed by AI Systems

When you submit an inquiry through the Websites, the following information may be processed by AI systems: the content of your inquiry or message; your name and email address; and any other information you voluntarily include in your submission.

(d) Information You Should Avoid Including

You should avoid including the following in inquiries unless absolutely necessary: passwords, API keys, or authentication credentials; sensitive personal information (such as government identification numbers or financial account details); and personal data of third parties.

6. How We Use Personal Data

MIP uses Personal Data we collect through the Websites to:

1. respond to your inquiries and requests;
2. provide information about our products and services;
3. send newsletters and marketing communications (with your consent);
4. improve the Websites' features and functionality;
5. detect, prevent, and address technical issues or security concerns;
6. comply with legal obligations.

7. Communications

MIP may communicate with you via email or other means. It is important that you understand the difference between types of communications:

(a) Transactional Communications (No Opt-In Required)

MIP may send you transactional communications at any time without your prior consent. You cannot opt out of these communications as they are essential to our business relationship. These communications include, but are not limited to: responses to your inquiries or requests; security alerts and notifications; changes to our Terms of Use, Privacy Policy, or other legal documents; legal notices or communications required by law; and any other communications reasonably necessary to respond to your interactions with the Websites.

(b) Marketing Communications (Opt-In Required)

MIP will only send you marketing and promotional communications if you have expressly opted in to receive such communications in accordance with applicable laws. Marketing communications include, but are not limited to: newsletters; promotional offers and discounts; new product or feature announcements; event invitations and webinar announcements; and other promotional content.

If you have opted in to receive marketing communications, you may opt out at any time by: clicking the "unsubscribe" link included in any marketing email; or contacting us at Privacy@MissionImpact.Partners.

8. How We Share Personal Data

MIP may share Personal Data in the following circumstances:

(a) Service Providers

MIP may share Personal Data with third-party service providers as MIP deems necessary for such providers to perform their duties required for the Websites to function. For example, the Websites may utilize hosting providers, email service providers, analytics providers, or AI service providers. Such third-party service providers are not authorized to retain, share, store, or use Personal Data for any purposes other than to provide the services for which they have been retained.

(b) AI Service Providers

As described in Section 5 (AI-Assisted Communications), MIP may share inquiry content with third-party AI service providers such as OpenAI or Anthropic. These providers process data under enterprise agreements that prohibit the use of your data for AI model training and require appropriate security and confidentiality measures.

(c) Legal Requirements

In rare cases, MIP may be required, or may, acting in good faith, believe it is required, to share certain information with legal authorities. In such cases, MIP will provide only the minimum amount of information required and, unless prohibited by law, MIP will notify you of the Personal Data it has provided. Such cases include: if required by law, court order, or governmental regulation; to protect or defend MIP, you, or others against legal liability or immediate danger; and to investigate a possible crime, such as fraud or identity theft.

(d) Business Transfers

Personal Data may be transferred to MIP's affiliates or as part of a merger, acquisition, or sale of substantially all of the assets of MIP. In such cases, each such party will be required to hold Personal Data and not disclose Personal Data except in accordance with terms at least as restrictive as those contained in this Privacy Policy.

(e) No Sale of Personal Data

MIP does NOT sell Personal Data to third parties. MIP does NOT share Personal Data with unrelated third parties for their direct marketing purposes.

9. How We Use and Share Aggregate Information

MIP uses Aggregate Information to: provide and improve the Websites; monitor and analyze usage of the Websites; research, compile, and report on usage trends, user demographics, and user behaviors; and for other legitimate business purposes.

MIP may share Aggregate Information with its affiliates and certain third parties, such as investors, potential investors, and third-party service providers we use to provide and facilitate the Websites.

Aggregate Information is anonymized and does not have the capacity to be used to identify an individual. No Personal Data will be disclosed to third parties through the sharing of Aggregate Information.

10. Data Retention

MIP retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context and our legal obligations.

When Personal Data is no longer required, MIP will securely delete or anonymize it. If deletion is not possible (for example, because the information has been stored in backup archives), MIP will securely store the Personal Data and isolate it from further processing until deletion is possible.

11. Data Security

MIP takes appropriate security measures to protect Personal Data against unauthorized access, alteration, disclosure, or destruction.

Such measures include internal reviews of MIP's data collection, storage, and processing practices and security measures, as well as physical security measures to guard against unauthorized access to systems where Personal Data is stored.

MIP restricts access to Personal Data to its employees, service providers, and agents who need to know such information in order to operate, develop, or improve the Websites. These individuals are bound by confidentiality obligations and are required to treat such Personal Data confidentially and in accordance with this Privacy Policy.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

12. International Data Transfers

MIP is headquartered in Ontario, Canada. Your Personal Data may be transferred to, stored, and processed in Canada or other countries where MIP or its service providers maintain facilities.

If you are located outside of Canada, please be aware that the data protection laws in Canada and other countries may differ from those of your country of residence. By using the Websites, you consent to the transfer of your Personal Data to Canada and other countries as described in this Privacy Policy.

For transfers of Personal Data from the European Economic Area (EEA), United Kingdom, or Switzerland, MIP relies on appropriate safeguards, such as standard contractual clauses approved by the European Commission.

13. Your Privacy Rights

Depending on your location, you may have certain rights regarding your Personal Data:

1. Access and Portability: You may have the right to request access to your Personal Data and receive a copy of your Personal Data in a structured, commonly used, and machine-readable format.
2. Correction: You may have the right to request that MIP correct any inaccurate or incomplete Personal Data.
3. Deletion: You may have the right to request that MIP delete your Personal Data, subject to certain exceptions.
4. Restriction and Objection: You may have the right to restrict or object to certain processing of your Personal Data.
5. Withdrawal of Consent: Where processing is based on your consent, you may have the right to withdraw your consent at any time.
6. Non-Discrimination: MIP will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, please contact MIP using the contact information provided below. MIP will respond to your request within the timeframe required by applicable law.

14. Additional Rights for Specific Jurisdictions

(a) European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority. MIP is the data controller for your Personal Data collected through the Websites.

(b) California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including: the right to know what Personal Data is collected, used, shared, or sold; the right to delete Personal Data held by MIP and by extension, service providers; the right to opt-out of sale or sharing of Personal Data (note: MIP does not sell Personal Data); the right to non-discrimination for exercising your privacy rights; and the right to correct inaccurate Personal Data.

(c) Quebec Residents (Law 25)

If you are a resident of Quebec, Canada, you have additional rights under Quebec's Law 25 (Act respecting the protection of personal information in the private sector), including the right to access and correct your Personal Data, the right to data portability, and the right to withdraw consent.

(d) Canadian Residents (PIPEDA)

MIP complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) for the collection, use, and disclosure of Personal Data in Canada.

15. Children's Privacy

The Websites are not directed to individuals under the age of 18. MIP does not knowingly collect Personal Data from children under 18. If you are a parent or guardian and believe that your child has provided Personal Data to MIP, please contact us immediately. If we become aware that we have collected Personal Data from a child under 18 without verification of parental consent, we will take steps to delete that information.

16. Do Not Track Signals

Some web browsers may transmit "Do Not Track" signals. MIP does not currently respond to "Do Not Track" signals because there is no industry standard for how to respond to such signals.

17. Changes to This Privacy Policy

MIP may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on the Websites and updating the "Effective" date at the top of this Privacy Policy. We encourage you to review this Privacy Policy periodically for any changes.

Your continued use of the Websites after the posting of changes constitutes your acceptance of such changes.

18. Communication Language

Deutsch: Jegliche Kommunikation bezüglich dieser Datenschutzrichtlinie oder damit zusammenhängender Angelegenheiten erfolgt ausschließlich in englischer Sprache. MIP ist nicht verpflichtet, auf Mitteilungen in anderen Sprachen als Englisch zu antworten oder Übersetzungen bereitzustellen.

English: All communications regarding this Privacy Policy or any related matters shall be conducted exclusively in English. MIP is not obligated to respond to or provide translations of any communications in languages other than English.

Español: Todas las comunicaciones relacionadas con esta Política de Privacidad o cualquier asunto asociado deberán llevarse a cabo exclusivamente en inglés. MIP no está obligada a responder ni a proporcionar traducciones de ninguna comunicación en idiomas distintos del inglés.

Français: Toutes les communications concernant la présente Politique de confidentialité ou toute question connexe seront menées exclusivement en anglais. MIP n'est pas tenu de répondre ou de fournir des traductions de toute communication dans des langues autres que l'anglais.

19. Contact MIP

We have a designated privacy channel available to you if you have any questions or concerns about this Privacy Policy.

Email: Privacy@MissionImpact.Partners

Website: https://missionimpact.partners/lets-talk or https://datamission.io/lets-talk

— End of Privacy Policy —

Version 1.0

Copyright © 2026 Mission Impact Partners Ltd. All rights reserved.