ClinGate Privacy Notice

Version: PUBLIC-SNAPSHOT-PRIVACY-1.0
Effective date: July 30, 2026

Who is responsible

Kian Shoaie Nia is the Canadian individual
responsible for personal information handled for the ClinGate service.
ClinGate by Pr3ventive is the service presentation and is not a separate
legal entity.

The designated contact is:

Privacy Officer
Email: info@qurazone.com
Suggested subject: ClinGate privacy request

Scope

This notice applies to the PUBLIC-SNAPSHOT-1.0 service for business buyers.
The service reviews one public iOS App Store listing and publicly linked web
surfaces. It does not ask for source code, app binaries, credentials, private
exports, confidential app material, patient information, or health records.

Information handled and why

ClinGate may handle:

• a buyer’s business name, country, billing address, and applicable tax
  identifier to qualify the order, prepare transaction records, meet tax and
  accounting duties, and prevent fraud;
• a fulfillment email and a minimized transaction reference to communicate
  about the order, deliver the snapshot, handle a factual correction, and
  resolve a dispute;
• one public App Store URL and dated observations from public App Store or
  publicly linked web pages to produce the ordered snapshot;
• accepted terms and privacy versions and their content hashes to preserve the
  agreed transaction boundary; and
• minimal security, correction, hold, and deletion evidence needed to protect
  the service and demonstrate that controls were followed.

This information is collected and used only where reasonably necessary for the
requested transaction, contractual steps and performance, applicable legal
obligations, or legitimate security and dispute-handling purposes.

Sources, service providers, and transfers

Information comes from the buyer, Stripe’s transaction readback, and the
public app and web locations within the order scope.

• Stripe processes hosted checkout, payment, billing, tax-related fields,
  fraud, and transaction records under its terms. ClinGate does not receive or
  retain full payment-card details.
• one.com / QuraZone WordPress hosts the public ClinGate pages and may
  process ordinary security and access logs.
• Google Workspace may process the transaction-only email needed for
  qualification, delivery, correction, refund, or dispute handling.
• The seller uses a bounded owner-controlled workspace to prepare and verify
  the public-source snapshot.

These providers may process information outside the buyer’s province or
country under their applicable contractual and security controls. ClinGate
does not add a CRM, advertising pixel, marketing list, scheduler, or behavioral
analytics service to this offer.

Retention and deletion

• Prohibited private, credential, or health material is isolated without
  review where possible and deleted within 24 hours after the incident
  decision.
• Working public captures, generated workspaces, the fulfillment contact, and
  ordinary order correspondence are deleted or anonymized no later than 30
  days after the five-business-day correction window closes.
• Billing, tax, payment, invoice, and refund records are kept separately for
  six years from the end of the year to which they relate, or longer only when
  a documented legal hold or regulator direction requires it.
• Security, correction, hold, and deletion evidence is minimized and retained
  only for its documented purpose.
• Provider-held records follow provider terms and available account controls.

A legal hold applies only to identified data classes, with a documented
reason, owner, review date, and expiry. Ordinary deletion resumes when the hold
ends.

Your choices and rights

Subject to applicable law and necessary identity verification, an individual
may ask about the personal information under the seller’s control, request
access or correction, withdraw consent where consent is the applicable basis,
or make a privacy complaint. A request will not require app credentials,
patient information, or unnecessary identity documents.

Email the Privacy Officer at
info@qurazone.com. A person may also contact the
applicable provincial or territorial privacy regulator and/or the Office of
the Privacy Commissioner of Canada about rights or a complaint.

Safeguards and incidents

ClinGate limits collection, uses Stripe-hosted payment pages, separates
transaction records from working public-source material, restricts operational
access, verifies generated artifacts, and maintains deletion and incident
procedures. No internet system is risk-free. If an incident occurs, the seller
will investigate, contain, document, and provide any notice required by
applicable law.

Changes

The version accepted for an order governs that order. Material changes receive
a new version and effective date and do not retroactively alter an accepted
order.