Confidentiality Policy

Car-sharing Avigo Autopartage Inc.

Version 1.0  |  Effective Date: August 7, 2026  |  Last Updated: August 7, 2026

Car-sharing Avigo Autopartage Inc., doing business as avigo ("avigo", "we", "our" or "ours"), places great importance on the protection of personal information. This Privacy Policy (the "Policy") explains how we collect, use, communicate, retain, and protect personal information in the course of our activities and services.

The Policy aims to meet the applicable requirements of the Act respecting the protection of personal information in the private sector (Quebec), as amended notably by Bill 25, as well as other applicable Canadian laws regarding the protection of personal information, where they apply.

1. Scope of Application

The Policy applies to personal information collected through the avigomobility.com website and its forms, our communications, our business activities, our car-sharing services, our portal or application, customer support, and technologies associated with our vehicles.

It also applies to information processed through our suppliers and technological platforms, including Odoo, Google Workspace, Fleetster, Stripe, Twilio, Brevo, Google Analytics, and Geotab, depending on the features used. Third-party services may also be governed by their own privacy policies.

2. What is personal information?

A personal information is information that concerns an individual and allows, directly or indirectly, to identify them. Some information may be considered sensitive due to its nature or the context of its use, including identity, financial, or location information.

3. Information we may collect

Depending on your relationship with avigo and the services you use, we may collect the following categories of information:

3.1 Identification and contact information

• First and last name;

• Mailing or billing address;

• Email address and phone number;

• Information related to your organization, your employer, your building, or your project, when relevant.

3.2 Account and service eligibility

• Account creation and management information;

• Driver's license and information contained therein;

• Information necessary for identity verification, eligibility, or driving rights;

• Account status, verification history, and information necessary for service administration.

3.3 Reservations and car-sharing usage

• Reservations, dates, times, vehicles, and associated locations;

• Service usage history;

• Information related to the start and end of a reservation, vehicle access, and return;

• Reports, inspections, photos, damages, incidents, accidents, claims, and support communications, when applicable.

3.4 Vehicle, location, and telematics data

Vehicles may be equipped with telematics technologies, including those provided by Geotab. Depending on the vehicle and service configuration, these technologies can generate data such as vehicle location, movements, mileage, vehicle status, technical events, and other operational data.

When this data can be associated with a reservation or a user, it may constitute personal information. avigo may use it when necessary to operate and secure the service, locate or recover a vehicle, provide assistance, manage an incident or claim, verify compliance with applicable terms, prevent or investigate fraudulent or abusive use, and manage the fleet. We do not present this data as a tool for general user surveillance.

3.5 Payments and billing

• Billing information and transaction history;

• Amounts charged, refunds, balances, and payment status;

• Information necessary for processing disputes, fines, tolls, damages, or other applicable fees.

Card payments may be processed by Stripe. avigo does not necessarily have access to the full credit card data when it is entered and processed directly by the payment provider.

3.6 Communications and support

• Content of emails, SMS, forms, and support requests;

• History of exchanges with our team;

• Attachments or information you choose to send us.

3.7 Technical information and website data

• IP address;

• Device type, browser and operating system;

• Pages viewed, interactions, dates and times of visits;

• Online identifiers, cookies and similar technologies, according to your consent choices and applicable settings.

4. How we collect information

We may collect information directly from you, automatically when you use our sites, applications or vehicles, or from third parties where permitted by law and necessary for our operations.

This may occur when you fill out a form, create an account, provide your driver's license, make a reservation, use a vehicle, communicate with support, sign a document, make a payment, receive a text message or interact with our communications.

5. Why we use your information

We use personal information only for specified and legitimate purposes, including to:

• Create, manage and secure user accounts;

• Verify identity, driver's license and service eligibility;

• Facilitate reservations, access to vehicles and use of the car-sharing service;

• Operate, maintain, secure, locate and manage our fleet;

• Process payments, invoices, refunds and amounts owed;

• Manage damages, accidents, claims, tickets, tolls, investigations and incidents;

• Respond to requests and provide customer service;

• Prevent fraud, abuse, security breaches and unauthorized uses;

• Enhance our services, our processes and the user experience;

• Produce analyses and statistics, when permitted;

• Meet our legal, regulatory, tax, accounting, contractual and insurance obligations;

• Assert or defend our rights;

• Send commercial communications when you have consented or when permitted by law.

6. Consent and choice

When consent is required, avigo seeks to obtain explicit, free, informed consent given for specific purposes. The form of consent may vary depending on the nature of the information and the context.

You may withdraw your consent to certain uses or communications, subject to applicable legal or contractual restrictions and reasonable notice. However, withdrawal may make it impossible to provide a service that requires the relevant information, such as verifying a license or using the data necessary for the operation and safety of a shared vehicle.

7. Commercial communications

avigo may use Brevo or other authorized tools to send marketing communications. Commercial communications are distinct from transactional or operational messages necessary for the service. You can unsubscribe from marketing communications using the mechanism provided in the message or by contacting us. Unsubscribing from marketing communications does not prevent the sending of messages necessary for a reservation, security, billing, or account administration.

8. Cookies and Google Analytics

Our site may use cookies, pixels, or similar technologies. Some are necessary for the operation of the site; others may be used to measure audience, understand site usage, or improve our services.

We specifically use Google Analytics when it is enabled. When the law requires your consent for a non-essential technology, we seek to obtain that consent before activation. You can modify your choices using the cookie management tools available on the site. Additional information will be provided in our Cookie Policy.

9. Service providers and communication to third parties

avigo may share personal information with service providers who process it on our behalf or as part of the services we use. Access must be limited to the information necessary for the relevant functions.

Our providers may include:

• Odoo: website, CRM, forms, Helpdesk, and electronic signature;

• Google Workspace: emails, collaboration, documents, and internal operations;

• Fleetster: application and features related to the car-sharing service;

• Stripe: payment processing;

• Twilio: SMS communications;

• Brevo: email communications and marketing;

• Google Analytics: audience measurement and site analysis;

• Geotab: telematics, operational data, and vehicle location.

We may also disclose information when the law permits or requires it, including to insurers, experts, professional advisors, public authorities, emergency services, law enforcement agencies, or other relevant parties in the context of an incident, a claim, an investigation, a legal proceeding, or the protection of our rights.

In the event of reorganization, financing, merger, acquisition, sale, or other business transaction permitted by law, certain information may be disclosed under the conditions and with the protections required by applicable legislation.

10. Processing or storage outside of Quebec

Some avigo providers may process or store personal information outside of Quebec or Canada. In this case, the information may be subject to the laws of the jurisdiction where it is processed and may be accessible to authorities that have legal jurisdiction there.

Before disclosing personal information outside of Quebec when required by law, avigo takes the necessary measures to assess privacy-related factors and to frame the disclosure with contractual measures or other appropriate measures.

11. Retention and destruction

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal, regulatory, tax, accounting, contractual, insurance, or evidentiary obligations.

Retention periods may vary depending on the nature of the information and the context. Upon the expiration of the applicable period, the information is securely destroyed or, where permitted by law and applicable requirements are met, anonymized in accordance with the rules in effect.

12. Information Security

avigo implements reasonable administrative, technical, and physical measures that are appropriate to the sensitivity of the information to protect it against loss, theft, unauthorized access, use, disclosure, copying, or modification.

These measures may include access controls, authentication, rights management based on roles, security measures provided by our suppliers, staff awareness, and internal procedures. However, no method of electronic transmission or storage can guarantee absolute security.

13. Privacy Incidents

avigo maintains processes to detect, assess, and manage privacy incidents. When an incident poses a risk of serious harm, avigo takes the actions required by law, including notifying affected individuals and the Information Access Commission when applicable, and maintaining the required record.

14. Your Rights

Subject to the conditions and exceptions provided by law, you may request:

• Confirmation of the existence of personal information about you;

• Access to the personal information we hold about you;

• Correction of inaccurate, incomplete, or ambiguous information;

• The withdrawal of consent where permitted;

• Information on the use or disclosure of your information, where required by law;

• The cessation of dissemination or de-indexing of certain information in the circumstances provided by law;

• The communication, in a structured and commonly used technological format, of certain computerized information collected from you, where the right to portability provided by law applies.

We may need to verify your identity before processing a request. Some requests may be denied or limited where permitted or required by law. A written response will be provided within the timeframes set by applicable legislation.

15. Automated decisions and profiling

If avigo ever uses personal information to make a decision based solely on automated processing, or implements technology to identify, locate, or profile a person in a context where specific transparency obligations apply, avigo will provide the information and choices required by law. Vehicle telematics is described in section 3.4 of this Policy.

16. Information regarding minors

The driving services of avigo are intended for individuals who meet the applicable age and eligibility criteria. We do not knowingly seek to collect personal information from a minor without the required permissions by law. If you believe a minor has provided us with information inappropriately, please contact us.

17. Links and third-party services

Our sites or communications may contain links to sites, applications, or services operated by third parties. avigo is not responsible for their privacy practices. We encourage you to review their policies before providing them with personal information.

18. Changes to the Policy

We may modify this Policy to reflect changes in our practices, technologies, services, or legal obligations. The date of the last update is at the beginning of the document. When required by law, we will notify affected individuals of changes and obtain any necessary consent.

19. Person Responsible for the Protection of Personal Information

The person with the highest authority within avigo serves as the person responsible for the protection of personal information, subject to any written delegation in accordance with the law.

Responsible: David Blondot

Position: CEO - Person Responsible for the Protection of Personal Information

Email: info@avigomobility.com

20. Questions, Requests, and Complaints

For any questions regarding this Policy, to exercise a right related to your personal information, or to file a complaint regarding our privacy practices, you can contact avigo at the following coordinates:

Car-sharing Avigo Autopartage Inc.

5500 Royalmount Avenue, Suite 100

Mont-Royal (Quebec) H4P 1H7

General email: contact@avigomobility.com

Person Responsible for the Protection of Personal Information: info@avigomobility.com

We will process requests and complaints in accordance with the requirements and timelines set forth by applicable laws.

21. Applicable Law

This Policy is to be interpreted in accordance with the laws applicable in Quebec and Canada, as the context requires. Nothing in this Policy limits the rights that a person has under any applicable public order law.