PRIVACY POLICY

---

TULONG TECH WEBSITE PRIVACY POLICY

Last Updated: February 2026

PRIVACY POLICY FOR TULONG WEBSITE

Context

TULONG Technologies Inc. and its subsidiaries (referred to herein as "TULONG" or "we" or "us") values our customers and respects your privacy.

This Privacy Policy ("Policy") applies to visitors of our marketing website at www.tulong.tech (the "Website"). This Policy describes how we collect, use, and protect information when you visit the Website, contact us by phone or email, or engage with us on social media.

This Website Privacy Policy applies ONLY to the marketing website. It does NOT apply to the Tulong Platform application or marketplace services, which have a separate Platform Privacy Policy accessible within the Platform application.

We may update this Policy from time to time, as specified in the "Changes to This Privacy Policy" section below.

PRIVACY OFFICER

For privacy-related questions, data access requests, correction requests, deletion requests, or complaints about our privacy practices, please contact:

Email: contact@tulong.tech Subject: "Privacy Request - [Specify: Access/Correction/Deletion/Complaint]"

Our designated Privacy Officer will respond to your inquiry within thirty (30) days.

Your Consent

You should read this entire Policy before submitting information to us or using our Website. Whenever you submit personal information to us, you consent to the collection, use, disclosure, transfer and storage of that information in accordance with this Policy.

We may make full use of all information that is de-identified, aggregated, or otherwise not in personally identifiable form.

By using the Website, you acknowledge that you have read and understood this Privacy Policy and consent to our data collection and use practices as described herein.

If you do not agree with this Privacy Policy, you must not use the Website or provide any personal information to us.

Information Collection and Use

We collect personal information from Website visitors using three methods:

1. from you directly; 2) using automated technology when you visit our Website or communicate with us through email; and 3) through third party sources including our service providers.

All personal information will be used as stated in this Policy. We will retain your personal information for the period necessary to fulfill the purposes outlined in this Policy and as otherwise needed to comply with applicable law and internal company policies.

We may combine data collected from these disparate sources unless we tell you otherwise.

SPECIFIC INFORMATION WE COLLECT FROM WEBSITE VISITORS:

A. Information You Provide Directly:

When you interact with the Website, you may voluntarily provide:

● Contact information when you submit inquiries, contact forms, or demo requests (name, email address, phone number, company name, job title)

● Information in newsletter signup forms or content download requests (email address, name, interests)

● Feedback, questions, comments, or testimonials you submit

● Job application information if you apply for employment positions (resume, cover letter, work history, references)

● Survey responses or poll answers

● Information you provide when engaging with us on social media platforms

B. Information Collected Automatically:

When you access and browse the Website, we and our service providers automatically collect:

● Device information: Internet Protocol (IP) address, browser type and version, operating system, device type and identifiers, screen resolution

● Usage data: Pages visited, date and time of visits, time spent on pages, click paths, navigation patterns, referring URLs (the website you came from), exit pages

● Location data: Approximate geographic location based on IP address (city, province, country)

● Cookies and similar tracking technologies (see "Cookies and Other Automated Technology" section below for details)

C. Information from Third-Party Service Providers:

We receive information from:

● Google Analytics: Aggregated and anonymized usage statistics, traffic sources, user behavior patterns, and Website performance metrics

● SendGrid: Email delivery status, bounce reports, open rates, and click rates for emails we send

● Web hosting providers: Server logs, access logs, and technical performance data

HOW WE USE INFORMATION

We use Website visitor information for the following purposes:

1. Responding to Your Inquiries and Providing Support:

● Responding to contact form submissions, questions, demo requests, and customer support inquiries

● Providing information about Tulong's services and solutions

● Scheduling demos, consultations, or sales calls

● Following up on your requests

2. Communications:

● Sending information you specifically request (newsletters, product updates, whitepapers, case studies, demo materials)

● Responding to your feedback, comments, or survey responses

● Following up on incomplete contact forms or demo requests

● Sending confirmations of your submissions

3. Website Analytics and Improvement:

● Analyzing Website traffic, usage patterns, and visitor behavior to understand how the Website is used

● Identifying popular content, pages, features, and user navigation paths

● Detecting and resolving technical errors, bugs, broken links, and performance issues

● Improving Website design, functionality, user experience, and content relevance

● Conducting A/B testing and optimization experiments

● Understanding traffic sources and marketing effectiveness

4. Security and Fraud Prevention:

● Detecting and preventing security threats, cyberattacks, unauthorized access, and fraudulent activity

● Protecting the Website, our systems, and users from malicious activity

● Investigating violations of Website Terms or suspicious behavior

● Maintaining logs for security auditing and incident response

5. Legal Compliance and Protection:

● Complying with legal obligations, court orders, subpoenas, and governmental requests

● Enforcing our Website Terms of Service

● Protecting our rights, property, safety, and those of our users

● Resolving disputes and defending against legal claims

6. Marketing Our Services (With Consent Where Required):

● Sending marketing communications about Tulong's services (with your consent where required)

● You may opt out anytime by clicking "unsubscribe" or contacting contact@tulong.tech

HOW WE SHARE INFORMATION

We share Website visitor information with:

1. Third-Party Service Providers:

● Google Analytics (GA4): Website usage analytics (United States) - Privacy Policy: https://policies.google.com/privacy

● SendGrid (Twilio): Email communications (United States) - Privacy Policy: https://www.twilio.com/legal/privacy

● Web hosting providers: Website infrastructure

These providers are contractually obligated to protect your information.

2. Legal Requirements: We may disclose information when required by law, regulation, legal process, or to protect our rights.

3. Business Transfers: If Tulong is involved in a merger, acquisition, or asset sale, your information may be transferred. You will be notified.

4. Aggregated Data: We may share aggregated, anonymized data that cannot identify you for analytics, research, or marketing.

We do NOT sell, rent, or trade your personal information to third parties.

INTERNATIONAL DATA TRANSFERS

Your information is processed in Canada but may be transferred to service providers in the United States (Google Analytics, SendGrid, web hosting).

By using the Website, you consent to these transfers. Information in the United States is subject to U.S. laws, including potential government access under the U.S. CLOUD Act.

Retention of Data

We will retain your personal information (collected through the Website) for as long as it is necessary for the purposes described in this Policy. We will also retain and use your personal information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

SPECIFIC RETENTION PERIODS FOR WEBSITE VISITORS:

Contact Form Inquiries and Support Requests:

● Retained for two (2) years from the date of inquiry to respond to follow-up questions and maintain communication history

● Deleted after two (2) years unless there is an ongoing business relationship or legal requirement to retain

Newsletter Subscriptions:

● Retained until you unsubscribe by clicking "unsubscribe" in any newsletter email or contacting contact@tulong.tech

● Deleted within thirty (30) days of unsubscribe request

Analytics Data:

● Collected and retained by Google Analytics according to their data retention settings (typically 26 months for user and event data)

● Aggregated analytics may be retained indefinitely as it cannot identify individual visitors

Job Applications:

● Retained for one (1) year from application date for hiring consideration and compliance with employment laws

● Deleted after one (1) year unless you are hired (in which case employment records retention applies)

Legal Compliance:

● Information may be retained longer when required by applicable laws, regulations, court orders, or legal proceedings

● Records related to disputes, claims, or investigations retained until resolution plus applicable limitation periods

Intended Audience of Website

Our Website, social media accounts and online activities are not directed to children under the age of 18. As a result, our Website does not request or knowingly collect personal data from individuals under the age of 18. If you are not 18 or older, you should not visit or use our Website or provide any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under 18 without verified parental consent, we will delete that information promptly.

If you are a parent or guardian and believe we have collected information from your child, please contact us immediately at contact@tulong.techso we can delete the information.

Security

We take reasonable and appropriate steps to protect personal data from loss, misuse and unauthorized access, disclosure, alteration or destruction, whether in transmission or storage. Please keep in mind, however, that there is no such thing as perfect security, and no Internet transmission is ever completely secure or error-free. We cannot guarantee absolute security of your information.

We offer the use of a secure server. All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology hosted by a third party and then encrypted into our payment gateway provider's database only to be accessible by those authorized with special access rights to such systems, and who are required to keep the information confidential.

SECURITY MEASURES WE EMPLOY:

Technical Safeguards:

● SSL/TLS encryption for all data transmitted between your browser and our servers

● Secure HTTPS protocol for all Website pages

● Encrypted storage of any personal information collected through contact forms

● Regular security updates, patches, and vulnerability assessments

● Firewall protection and intrusion detection systems

Organizational Safeguards:

● Employee and contractor confidentiality agreements

● Limited access to personal information on a need-to-know basis

● Privacy and security training for personnel who handle personal information

● Privacy Officer oversight and accountability

Physical Safeguards:

● Secure data center facilities through our hosting providers

● Environmental and access controls for server infrastructure

While we implement industry-standard security practices, you should be aware that:

● No security measures are 100% effective or impenetrable

● Unauthorized third parties may unlawfully intercept transmissions or access data

● You are responsible for maintaining the security of your own devices, passwords, and communications

If you have reason to believe that your interaction with us is no longer secure (for example, if you suspect unauthorized access to any information you provided), please notify us immediately at contact@tulong.tech.

Cookies and other automated technology

A "cookie" is a small text file that is placed onto an Internet user's web browser or device and is used to remember and/or obtain information about the user. A "web beacon" is a small object or image that is embedded into a web page, application, or email and is used to track activity. They are also sometimes referred to as pixels and tags. To find more information about cookies please visit www.allaboutcookies.org. Most browsers are initially set to allow cookies, but also offer the option to restrict cookies or warn you of their use. By disabling cookies, you won't be able to enjoy the convenience provided by our customization.

TYPES OF COOKIES WE USE ON THE WEBSITE:

Essential Cookies (Required):

● Necessary for basic Website functionality, security, page navigation, and access to secure areas

● Cannot be disabled without significantly affecting Website functionality

● Examples: Session cookies, security cookies, load balancing cookies

Analytics Cookies (Google Analytics GA4):

● Used to understand how visitors interact with and use the Website

● Collect information about pages visited, time spent, traffic sources, user journey, device types, and behavior patterns

● Data is aggregated and primarily anonymized

● Helps us improve Website performance, content, and user experience

Functional Cookies:

● Remember your preferences, settings, and choices (language, region)

● Enhance Website functionality and personalization

● Examples: Preference cookies, customization cookies

MANAGING AND CONTROLLING COOKIES:

You can control and manage cookies through your web browser settings. Most browsers allow you to:

● View which cookies have been set and delete them individually or all at once

● Block third-party cookies

● Block all cookies from specific websites

● Block all cookies from being set (note: this may significantly impair Website functionality)

● Receive a warning before a cookie is stored

● Delete all cookies when you close your browser

To learn how to manage cookies on your specific browser:

● Chrome: https://support.google.com/chrome/answer/95647

● Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

● Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac

● Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge

Please note that disabling or blocking certain cookies may limit your ability to use certain Website features or result in reduced functionality.

Analytics Disclaimer

We and/or third parties including our service providers on our behalf, may use cookies, web beacons and other similar technology, to collect information for the purposes described in this privacy statement including analytics, and monitoring performance and improvement of our Website (traffic, errors, page load time, popular pages, bounce rates, user engagement, conversion funnels, traffic sources, etc.)

We use Google Analytics 4 (GA4) to understand how our Website, services, and products perform and how you use them. Google Analytics collects information such as how often users visit the Website, what pages they visit, what other sites they used prior to visiting, and demographic information (age range, gender, interests) in aggregated form.

To learn more about how Google processes your data, please visit https://www.google.com/policies/privacy/. To opt out of Google Analytics please visit https://tools.google.com/dlpage/gaoptout.

Google Analytics Data Retention: Data collected by Google Analytics is retained according to Google's retention settings. We have configured Google Analytics to retain user and event data for 26 months. After this period, data is automatically deleted by Google.

You can also opt out of Google Analytics tracking by:

● Installing the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout)

● Adjusting your browser's cookie settings to block Google Analytics cookies

● Using privacy-focused browsers or browser extensions that block tracking

YOUR PRIVACY RIGHTS UNDER PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights regarding your personal information:

1. Right to Know: You have the right to be informed about what personal information we collect, how we use it, and with whom we share it. This Privacy Policy provides that information.

2. Right to Access: You have the right to request access to the personal information we have collected about you. We will provide a copy of your information in a commonly used electronic format within thirty (30) days of your verified request.

3. Right to Correction: If you believe your personal information is inaccurate, incomplete, or out-of-date, you may request that we correct it. We will make corrections within a reasonable timeframe and notify any third parties to whom the information was disclosed (where appropriate).

4. Right to Deletion: You may request deletion of your personal information, subject to legal or regulatory obligations that require us to retain certain information. We will delete your information within a reasonable timeframe upon verified request.

5. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time by:

● Unsubscribing from marketing emails (click "unsubscribe" link in any email)

● Contacting contact@tulong.tech

● Adjusting cookie settings in your browser to block or delete cookies

Note: Withdrawal of consent may limit our ability to provide certain services or respond to your inquiries. You cannot withdraw consent for processing necessary to fulfill legal obligations.

6. Right to Object: You may object to our processing of your information based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims.

7. Right to Data Portability: You have the right to request your personal information in a structured, commonly used, machine-readable format for transmission to another organization (where technically feasible).

8. Right to Complain: If you believe we have not complied with Canadian privacy laws or this Privacy Policy, you have the right to file a complaint with:

● Tulong: contact@tulong.tech

● Office of the Privacy Commissioner of Canada (OPC): www.priv.gc.ca or toll-free: 1-800-282-1376

HOW TO EXERCISE YOUR PRIVACY RIGHTS:

Email: contact@tulong.tech Subject Line: "Privacy Rights Request - [Specify: Access/Correction/Deletion/Withdrawal/Objection/Portability]"

In your request, please include:

● Your full name

● Email address used when interacting with the Website

● Specific right you wish to exercise

● Details of your request

We will:

● Verify your identity before processing requests (may require additional information for verification)

● Respond to your request within thirty (30) days, or notify you if we require additional time (up to 60 days for complex requests)

● Provide the requested information or action, or explain any reasons for denial

There is no fee for exercising your privacy rights unless your request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or refuse the request.

Contact for More Information

For information and questions about the use of your personal information or this Policy, you may contact us at contact@tulong.tech

For specific types of inquiries:

● General privacy questions: contact@tulong.tech

● Data access, correction, or deletion requests: contact@tulong.tech

● Privacy complaints or concerns: contact@tulong.tech

● Unsubscribe from marketing emails: Click "unsubscribe" in any email or contact contact@tulong.tech

If you are not satisfied with our response to your privacy inquiry or complaint, you may escalate to:

Office of the Privacy Commissioner of Canada Website: www.priv.gc.ca Phone: 1-800-282-1376 Email: Available through their website contact form

Changes to This Privacy Policy

This Policy may be revised from time to time for any reason, including changes to our data practices, legal or regulatory requirements, new features or services, or improvements to privacy protections.

If this Policy changes, the revised policy will include a new effective date, and we will notify you of such changes by posting the revised policy prominently on the Website.

For material changes that significantly affect how we collect, use, or share your information, we may also provide additional notice via email (if you have provided your email address) or through a prominent banner or alert on the Website.

Changes to this Privacy Policy take effect immediately upon posting on the Website.

Be sure to check the Policy whenever you submit personal information or use our Website, services, or engage with our social media accounts. Your continued use of the Website after changes are posted constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Previous versions of this Privacy Policy may be available upon request by contacting contact@tulong.tech.

ADDITIONAL PRIVACY INFORMATION

Do Not Track (DNT) Signals:

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Currently, there is no industry consensus or standard regarding how to respond to DNT signals.

Our Website does not currently respond to or honor DNT browser signals. However, you can control tracking through:

● Browser cookie settings

● Google Analytics opt-out browser add-on

● Privacy-focused browser extensions

California and U.S. State Privacy Rights:

If you are a resident of California or another U.S. state with specific privacy laws (such as Virginia, Colorado, Connecticut, or Utah), you may have additional privacy rights under state law.

While Tulong is a Canadian company, we respect the privacy rights of users in all jurisdictions. If you believe you have additional rights under U.S. state privacy laws, please contact contact@tulong.techfor information.

European Union (EU) and GDPR:

If you are located in the European Union, European Economic Area, or United Kingdom, you may have rights under the General Data Protection Regulation (GDPR) or UK GDPR.

While Tulong's primary operations and user base are in Canada, if we process data of EU/UK residents, we will comply with applicable GDPR requirements, including:

● Providing lawful basis for processing

● Honoring data subject rights (access, rectification, erasure, restriction, portability, objection)

● Using Standard Contractual Clauses for international data transfers

● Notifying supervisory authorities of data breaches where required

For EU/UK privacy inquiries, contact: contact@tulong.tech

Accessibility:

If you have difficulty accessing this Privacy Policy or any portion of the Website due to a disability, please contact contact@tulong.techand we will work with you to provide the information in an alternative accessible format.

END OF TULONG WEBSITE PRIVACY POLICY