Privacy Policy

Effective 6 September 2026

AskIR is operated by Vantage Capital Corp ("Vantage", "we", "us"). This policy explains what personal information we collect through the AskIR website at askir.app, the AskIR assistant that appears on the investor websites of the public companies we work with (each an "Issuer"), and the AskIR portal, and how we use, share and protect it.

We are a British Columbia company and handle personal information in accordance with British Columbia's Personal Information Protection Act (PIPA), the federal Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies, and Canada's Anti-Spam Legislation (CASL).

1. Who is responsible for your information

On askir.app. Vantage is responsible for personal information you give us through the website, the "try it on your company" demo builder, the contact form and email to hello@askir.app.

On an Issuer's website. When you use the AskIR assistant on an Issuer's investor site, the Issuer has engaged Vantage to provide the assistant. Vantage processes your questions and any contact details you choose to leave on the Issuer's behalf and also uses them, as described below, to run and monitor the service. The Issuer's own privacy policy applies to your use of its website.

2. What we collect

Visitors to askir.app

• Nothing is collected simply by browsing. We use no advertising or analytics trackers. Our hosting provider keeps short-lived technical logs (IP address, browser type, pages requested) for security and operations.
• If you build a demo, we record the company you chose, your work email address, your name if you give it, a one-way hash of your IP address and the questions asked in that demo.
• If you use the contact form or email hello@askir.app, we keep your name, email address, company and the message you sent, so that we can reply and keep a record of the enquiry.

Users of the AskIR assistant on an Issuer's website

• The questions you ask and the answers given, with the documents cited.
• A random identifier stored in your browser so that a conversation can continue across pages, the address of the page you were on and the page that referred you.
• A one-way hash of your IP address, used only to enforce usage limits and detect abuse. We do not store the address itself.
• The exact consent wording shown to you and the time you first asked a question.
• If you choose to sign up for an Issuer's updates: your email address, your name and investor type if you provide them, the exact consent wording you agreed to and the time you agreed, and a record of the documents you open afterwards.

Portal and administrative users

• Your email address, the sign-in links we send you, a sign-in cookie and a log of the actions you take in the portal.

We do not ask for, and you should not enter, sensitive personal information such as account numbers or holdings.

3. How we use it

• To answer your questions from the Issuer's approved public documents, the AskIR investor glossary and public market data, and to show you where each answer came from.
• To let the Issuer see the questions asked on its site, the questions the public record could not answer, and the contact details of people who chose to leave them.
• To send an Issuer's investor updates only where you have given express consent, and to honour your withdrawal of that consent.
• To reply to your enquiries and demo requests.
• To operate, secure and improve the service: enforcing usage limits, detecting abuse, checking that answers are correctly grounded in their sources, and fixing faults.
• To meet legal and regulatory obligations and to keep the records a registered investor relations business is expected to keep.

We do not sell personal information. We do not use it for advertising. Your questions and personal information are not used to train artificial-intelligence models, by us or by our providers.

4. Who we share it with

The Issuer. Conversations that take place on an Issuer's website, and the details of anyone who signs up there, are visible to that Issuer's investor relations team in the AskIR portal. If you do not sign up, the Issuer sees your questions but no name or email address.

Service providers. We use a small number of providers to run AskIR. Each is bound by contract to use the information only to provide its service to us:

• Render (hosting and database, United States).
• Anthropic (the language model that drafts and checks answers; it receives your question and the relevant document passages).
• Voyage AI (text embeddings used to find relevant passages; it receives question text).
• Resend (delivery of sign-in links, notifications and email sent to askir.app addresses).

Market data providers (for example the London Bullion Market Association, the Bank of Canada and exchanges) receive no personal information.

Legal. We may disclose information where the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganisation of our business, in which case this policy continues to apply.

5. Where it is stored

AskIR is hosted in the United States. Information may therefore be accessed by authorities there under local law. Our providers are contractually required to protect it to a standard consistent with Canadian privacy law.

6. How long we keep it

• Conversations on Issuer websites: 24 months from the conversation, then deleted.
• Contact details left through the assistant: for as long as the Issuer uses AskIR, and for 36 months after you withdraw consent so that the withdrawal itself is honoured.
• Demo-builder details: 12 months.
• Enquiries to Vantage: for as long as reasonably needed to deal with the enquiry and as a business record.
• Portal accounts and audit logs: for the term of the Issuer's agreement with Vantage and a reasonable period afterwards.

Anonymous, aggregated statistics (for example how many questions were asked in a month) may be kept longer.

7. Security

All traffic to AskIR is encrypted in transit. Stored data is encrypted at rest by our hosting provider. IP addresses are hashed before storage. Links to documents and sign-in links are signed and expire. Access to personal information is limited to the people who need it to run the service or to serve the Issuer, and every administrative action is logged.

8. Cookies and browser storage

askir.app sets one cookie, and only when you sign in to the portal or admin, to keep you signed in. The assistant on Issuer websites keeps a random visitor identifier and the current conversation in your browser's own storage so that a conversation survives a page change. None of this is used to track you across other websites. Clearing your browser storage removes it.

9. Your choices and rights

• Consent for investor updates can be withdrawn at any time using the unsubscribe link in any message, or by emailing hello@askir.app. Withdrawal is honoured within ten business days as CASL requires and usually immediately.
• Access and correction. You may ask what personal information we hold about you, ask us to correct it, or ask us to delete it, subject to any legal requirement to keep it. Where the information was collected on an Issuer's website we will work with the Issuer to respond.
• Questions or complaints. Write to hello@askir.app. If you are not satisfied with our response you may contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.

10. Children

AskIR is intended for adults considering or holding investments. We do not knowingly collect information from anyone under 18.

11. Changes

We will post any change to this policy on this page and update the effective date. A material change to how we use information already collected will be notified to the Issuers concerned, and through the assistant where practical.

12. Contact

Vantage Capital Corp, operator of AskIR
hello@askir.app