Privacy Policy & Electronic Signature Consent

1. Who we are

This platform ("Mig Mig", "we", "us", or "our") is operated by PiTech Solutions Inc., a company incorporated in British Columbia, Canada. By registering an account on this platform you ("you", "your", "tenant", or "subscriber") enter into a binding agreement with us as described in our Terms and Conditions and you consent to this Privacy Policy.

2. By registering, you agree

By submitting the registration form, ticking the "I agree" checkbox, completing the SMS verification step (where applicable), and pressing the "Confirm" or equivalent button, you confirm that you have read, understood, and legally agreed to:

• the Mig Mig Terms and Conditions in force at the time of registration;
• this Privacy Policy and Electronic Signature Consent;
• the service agreement document presented to you on the registration page (the "Service Agreement"); and
• the execution of the Service Agreement on your behalf as described in Section 6 below.

Your acceptance is a binding contract. You acknowledge that you have had the opportunity to read the Service Agreement in full prior to registering, that you are not under duress, and that the person submitting the form has the legal authority to bind the business identified on the form.

3. Information we collect

During and after registration we collect and process:

• Identity & contact data: full name, email address, phone number (with country code), and business name.
• Technical data: public IP address, approximate geo-location derived from that IP, browser user-agent, device type, language, and timestamps of each registration step.
• Verification data: SMS one-time-passcode events and the phone number to which they were delivered.
• Agreement data: the version of the Terms, Privacy Policy and Service Agreement presented to you, the time of acceptance, the IP address from which acceptance was submitted, and the resulting DocuSign envelope identifier, signed PDF and Certificate of Completion.

We collect this information directly from you, from your device, and from third-party processors used to deliver the registration service (for example, our SMS gateway and DocuSign, Inc.).

4. How we use it

We use your information to:

• create and manage your tenant account;
• verify your identity and prevent fraud;
• execute and store the Service Agreement;
• communicate with you about your account, billing, and the service;
• comply with our legal, tax, audit and regulatory obligations under applicable Canadian, British Columbia, and other applicable laws.

5. Customer SMS/RCS & messaging (end customers)

This section applies to people who order food or book tables through Mig Mig or our restaurant partners - not to restaurant owners registering on the platform (see Sections 2–4 above).

How you opt in. You consent to receive SMS/RCS messages from Mig Mig when you:

• provide your mobile phone number at checkout or when booking a reservation, see the SMS/RCS disclosure next to the phone field, and complete the transaction; or
• send a text message to our platform number to place an order, make a reservation, or request support (user-initiated messaging).

What we send. Transactional SMS/RCS messages related to your request, such as order confirmations, reservation confirmations, pickup or delivery status updates, payment links, and replies to questions you asked us. We do not send unrelated promotional SMS without separate consent where required by law.

Automated & AI-assisted responses. To answer your texts quickly, messages sent to our platform number are handled by an automated assistant. To understand your request and generate a reply, the content of your messages, your earlier messages in the same conversation, the name associated with your number, and details of your active orders and reservations with our restaurant partners (for example order items, totals, status and estimated times, and reservation date, time and party size) are processed by us and shared with a third-party AI provider (currently OpenAI, L.L.C.) acting as our service provider, solely to produce a response. We do not use this information for advertising, and it is not used to train the AI provider's public models. Card numbers and similar payment details are automatically removed before a message is processed, and you can ask to speak with a person at any time by replying that you would like a real person.

Opt out. Reply STOP or ARRET to any message to unsubscribe. When you reply STOP, we stop sending further texts (such as status updates and reminders) for the order or reservation you had open at that time. If you later place a new order or make a new reservation, you will receive texts again for that new activity until you reply STOP again. Reply HELP or AIDEfor assistance. Message frequency varies. Message & data rates may apply.

Legal basis (Canada).For transactional messages tied to an order or reservation you requested, we rely on implied consent under Canada's anti-spam legislation (CASL). For conversational messaging, you opt in by texting us first. You may withdraw consent at any time via STOP without affecting messages already sent to fulfill an active order.

6. Electronic Signature & Authorization to Sign on Your Behalf

The Service Agreement is executed electronically using DocuSign, Inc. (or a comparable e-signature provider we may choose from time to time). By submitting the registration form you expressly authorize Mig Mig to cause the Service Agreement to be electronically signed in your name and on your behalf using the identity, business name, email address and IP address you provided, as soon as the registration is confirmed.

You acknowledge and agree that:

• the act of submitting the registration form constitutes your electronic signature on, and your express written authorization to apply your electronic signature to, the Service Agreement;
• this electronic signature is legally equivalent to a handwritten signature and produces a binding agreement under the British Columbia Electronic Transactions Act, S.B.C. 2001, c. 10, the federal Personal Information Protection and Electronic Documents Act (PIPEDA), and the U.S. ESIGN Act and UETA where applicable;
• you irrevocably waive any defence based on the absence of a wet-ink signature, the absence of physical presence at signing, the fact that the signature was applied by an automated process operated by Mig Mig on your behalf, or the fact that the IP address recorded on the Certificate of Completion may belong to Mig Mig's signing infrastructure rather than your personal device;
• the registration record (form contents, IP address, geo-location, user-agent, SMS verification record and timestamps) together with the resulting DocuSign envelope, signed PDF and Certificate of Completion constitute conclusive evidence of your acceptance of the Service Agreement, and you agree not to dispute the authenticity, validity or enforceability of that signature on the basis that it was executed electronically or on your behalf;
• you have the legal authority to bind yourself and the business named on the form, and you warrant that all information you provided is true, current and complete.

If you do not wish your electronic signature to be applied on your behalf in this way, do notcomplete the registration. You may instead contact us at the address in Section 12 to request a manual signing process.

7. Service providers we share data with

We share the minimum personal information necessary with carefully selected service providers, including:

• DocuSign, Inc. - to generate, deliver, sign and store the Service Agreement and its Certificate of Completion;
• Twilio Inc. (or a comparable SMS provider) - to deliver phone verification codes for restaurant registration, and transactional and conversational SMS to customers (order and reservation updates, support replies, and related messaging);
• OpenAI, L.L.C.(or a comparable AI provider) - to process the content of inbound customer messages, related conversation history, and associated order/reservation details in order to generate automated assistant replies, as described in Section 5;
• SMTP / email delivery providers - to send transactional email;
• Hosting and database providers located in Canada and/or other jurisdictions - to host the platform and store your tenant record.

These providers may store and process personal information outside of British Columbia or Canada. By accepting this Privacy Policy you consent to that cross-border processing for the purposes set out above.

8. Retention

We retain your registration data, signed Service Agreement, Certificate of Completion and related audit records for the duration of your relationship with Mig Mig and for as long thereafter as is required to comply with our legal, tax and regulatory obligations, to defend or assert legal claims, and to maintain a complete audit trail of agreements executed on the platform (typically not less than seven (7) years after the agreement terminates).

Customer messaging content - including SMS conversation history processed by our automated assistant and the associated order and reservation details - is retained only for as long as needed to provide and support the messaging and ordering service and to meet our legal obligations, after which it is deleted or de-identified.

9. Security

We use industry-standard technical and organizational safeguards (encryption in transit, encryption-at-rest of sensitive credentials, access controls, least-privilege administration and audit logging) to protect personal information. No system is perfectly secure; you submit information at your own risk.

10. Your rights

Subject to applicable law, you may request access to the personal information we hold about you, ask us to correct inaccurate information, or withdraw consent for future processing (which may prevent us from continuing to provide the service to you). Withdrawal of consent does not affect the validity, binding nature, or enforceability of any Service Agreement already executed on your behalf, nor of the audit record associated with it. Submit requests to the contact address in Section 12.

11. Changes

We may update this Privacy Policy from time to time. The "Effective date" at the top of this page indicates the latest revision. Material changes will be communicated via the platform or by email. Continued use of the platform after the effective date of an update constitutes acceptance of the updated policy.

12. Contact

Questions, access requests or complaints regarding this Privacy Policy or your personal information may be sent to info@pitech.ca.