1. PURPOSE

This Cookie Policy explains how ELSE DIGITAL SOLUTIONS INC. ("Else Digital," "Servisfy," "we," "our," or "us") uses cookies and similar technologies when individuals access or use:

• Servisfy Web Platform
• Servisfy Desktop Application
• Servisfy Customer Mobile Applications
• Servisfy Business Mobile Applications
• Servisfy APIs
• Servisfy Marketplace
• Servisfy AI Services
• websites operated under the servisfy.com domain and affiliated subdomains

This Policy should be read together with our:

• Privacy Policy
• Enterprise Terms of Service
• Data Processing Addendum
• AI Transparency & Responsible AI Policy

Where local privacy laws require consent before storing or accessing information on your device, Servisfy will request and record your preferences through an appropriate cookie consent mechanism.

2. WHAT ARE COOKIES?

Cookies are small text files that websites place on your browser, computer, tablet, or mobile device.

Cookies allow websites to:

• recognize returning visitors;
• remember user preferences;
• maintain authenticated sessions;
• improve website functionality;
• enhance security;
• understand website performance;
• personalize user experiences.

Cookies do not typically contain information that directly identifies an individual, but may become associated with personal information depending on how the Service is used.

3. SIMILAR TECHNOLOGIES

In addition to cookies, Servisfy may use related technologies, including:

• Local Storage
• Session Storage
• IndexedDB
• Web Beacons
• Pixels
• Software Development Kits (SDKs)
• Device Identifiers
• API Tokens
• Authentication Tokens
• Mobile Application Storage
• Browser Cache
• Server-Side Session Identifiers

For the purposes of this Policy, references to "cookies" include these technologies unless otherwise specified.

4. WHY WE USE COOKIES

Servisfy uses cookies and similar technologies to support the secure, reliable, and efficient operation of the platform.

Our objectives include:

• authenticating users;
• securing accounts;
• maintaining active sessions;
• remembering user preferences;
• improving performance;
• detecting fraud;
• analyzing usage patterns;
• enhancing accessibility;
• supporting AI-powered personalization where enabled;
• complying with legal obligations.

We do not use cookies to sell your personal information.

5. COOKIE CATEGORIES

Servisfy classifies cookies into five primary categories.

A. Strictly Necessary Cookies

These cookies are essential for the operation of the platform.

Without these cookies, many services cannot function.

Examples include:

• user authentication;
• session management;
• security validation;
• load balancing;
• fraud prevention;
• CSRF protection;
• account login;
• consent management.

These cookies generally cannot be disabled through the cookie preference center because they are necessary to provide requested services.

B. Functional Cookies

Functional cookies remember user-selected preferences to improve the experience.

Examples include:

• preferred language;
• preferred timezone;
• interface settings;
• dashboard configuration;
• accessibility preferences;
• recently viewed content;
• notification preferences.

These cookies improve usability but are not strictly required.

C. Performance & Analytics Cookies

Analytics cookies help us understand how visitors use the platform.

Examples include:

• page visits;
• navigation flows;
• feature usage;
• performance bottlenecks;
• browser compatibility;
• session duration;
• crash analytics.

Analytics information is generally aggregated and used to improve platform performance.

Where required by law, these cookies are activated only after consent.

D. Security Cookies

Security cookies help protect users and the platform.

Examples include:

• bot detection;
• suspicious activity monitoring;
• authentication verification;
• login protection;
• account integrity;
• abuse detection;
• rate limiting.

These cookies contribute directly to cybersecurity.

E. Personalization Cookies

Where enabled and legally permitted, personalization technologies may be used to:

• remember user preferences;
• tailor dashboards;
• recommend features;
• improve AI interactions;
• optimize workflows.

Personalization does not authorize automated legal or similarly significant decisions without appropriate safeguards.

6. FIRST-PARTY COOKIES

First-party cookies are placed directly by Servisfy.

They are used primarily for:

• authentication;
• platform functionality;
• security;
• performance;
• user preferences;
• AI experience optimization.

These cookies remain under Else Digital's control.

7. THIRD-PARTY COOKIES

Some platform features rely upon trusted third-party providers.

Depending on enabled services, cookies may be placed by providers supporting:

• cloud infrastructure;
• authentication;
• payment processing;
• messaging;
• analytics;
• customer communications;
• security monitoring;
• fraud detection.

Else Digital carefully evaluates third-party providers before integrating their technologies.

Third-party providers remain responsible for their own cookie practices.

8. COOKIES USED FOR AUTHENTICATION

Authentication cookies help verify identity and maintain secure sessions.

Examples include:

• login session identifiers;
• refresh tokens;
• secure authentication state;
• multi-factor authentication continuity.

These cookies reduce repeated login prompts while maintaining security.

9. SECURITY COOKIES

Security-related cookies assist in:

• preventing account compromise;
• detecting suspicious activity;
• mitigating automated attacks;
• protecting AI services;
• maintaining platform integrity.

Disabling these cookies may reduce platform security.

10. SESSION COOKIES

Session cookies exist only while a browser session remains active.

They are generally deleted automatically when the browser is closed.

Session cookies commonly support:

• authenticated sessions;
• workflow continuity;
• navigation;
• temporary preferences.

11. PERSISTENT COOKIES

Persistent cookies remain on a device for a defined period or until manually removed.

Examples include:

• remembered preferences;
• language selection;
• accessibility settings;
• consent preferences.

Retention periods vary according to operational necessity.

12. MOBILE APPLICATION STORAGE

Because mobile applications do not always use browser cookies, Servisfy mobile applications may use secure device storage to retain:

• authentication tokens;
• encrypted session information;
• application preferences;
• offline settings;
• AI personalization preferences.

Equivalent privacy protections apply.

13. AI-RELATED COOKIES

Certain AI-powered platform features may rely upon locally stored preferences.

Examples include:

• preferred interaction language;
• interface customization;
• conversation continuity;
• accessibility preferences;
• selected AI assistant settings.

These technologies improve user experience but do not independently make automated legal decisions.

14. COOKIE CONSENT

Where required by applicable law, Servisfy requests consent before placing non-essential cookies.

Consent may be obtained through a Cookie Consent Banner or Privacy Preference Center.

Users may:

• accept all cookies;
• reject non-essential cookies;
• customize preferences;
• modify consent later.

Consent records may be retained for compliance purposes.

15. MANAGING COOKIE PREFERENCES

Users may manage cookie preferences by:

• using the Servisfy Cookie Preference Center;
• modifying browser settings;
• deleting existing cookies;
• adjusting mobile device privacy settings where applicable.

Please note that disabling certain cookies may affect platform functionality, security, and user experience.

COOKIE GOVERNANCE, THIRD-PARTY TECHNOLOGIES & GLOBAL COMPLIANCE

16. COOKIE INVENTORY MANAGEMENT

Else Digital maintains an internal inventory of cookies and similar technologies used throughout the Servisfy ecosystem.

The inventory supports:

• transparency;
• regulatory compliance;
• security governance;
• operational consistency;
• customer assurance.

The inventory is reviewed periodically and updated whenever significant platform changes occur.

17. COOKIE REGISTRY

The Servisfy Cookie Registry documents, where applicable:

• cookie name;
• category;
• purpose;
• first-party or third-party status;
• duration;
• associated service;
• legal basis (where applicable);
• applicable product;
• retention period.

The registry is maintained independently from this Policy to allow operational updates without requiring amendments to the Policy itself.

18. THIRD-PARTY SERVICE PROVIDERS

Servisfy may integrate with trusted third-party providers whose technologies may use cookies or similar identifiers to deliver requested functionality.

Examples may include providers supporting:

• cloud infrastructure;
• authentication;
• messaging;
• payment processing;
• analytics;
• monitoring;
• fraud prevention;
• customer communications;
• artificial intelligence;
• content delivery;
• customer support.

Third-party technologies are evaluated prior to deployment based upon security, privacy, operational reliability, and contractual safeguards.

19. GOOGLE CLOUD SERVICES

Where Google Cloud Platform services are used, cookies or similar technologies may support:

• secure application delivery;
• infrastructure resilience;
• authentication;
• performance optimization;
• API functionality.

Google acts as an infrastructure provider under contractual data protection obligations.

20. FIREBASE SERVICES

Mobile applications may utilize Firebase services for capabilities such as:

• authentication;
• application messaging;
• crash reporting;
• performance monitoring;
• secure notifications.

These technologies assist in maintaining application reliability and user experience.

21. STRIPE

Where Customers purchase subscriptions or other paid services, Stripe may utilize cookies or similar technologies to:

• process payments;
• prevent fraud;
• authenticate payment sessions;
• improve payment reliability.

Payment information is processed in accordance with Stripe's applicable privacy and security commitments.

Servisfy does not store full payment card information on its own systems.

22. TWILIO

Communication services utilizing SMS, voice, and WhatsApp messaging may involve session identifiers necessary for:

• message delivery;
• communication routing;
• fraud prevention;
• telecommunications compliance.

Such technologies primarily support communication reliability rather than behavioral advertising.

23. OPENAI AND AI SERVICE PROVIDERS

Where AI-powered functionality is enabled, Servisfy may interact with approved AI service providers.

Cookies themselves are generally not used to train AI models.

Instead, locally stored preferences may facilitate:

• conversation continuity;
• language selection;
• interface preferences;
• AI personalization settings;
• session continuity.

Customer data is handled in accordance with applicable contractual and privacy commitments.

24. ANALYTICS PROVIDERS

Where analytics technologies are enabled, they may collect aggregated operational information concerning:

• feature usage;
• page performance;
• navigation patterns;
• browser compatibility;
• application responsiveness;
• system reliability.

Analytics data assists Else Digital in improving platform quality.

Where legally required, analytics technologies operate only after user consent.

25. PERFORMANCE MONITORING

Performance monitoring technologies assist in identifying:

• slow-loading pages;
• application bottlenecks;
• failed requests;
• infrastructure latency;
• user experience issues.

Collected information is used to improve operational reliability.

26. CRASH REPORTING

Crash reporting technologies may capture technical diagnostic information following application failures.

Illustrative information may include:

• operating system version;
• application version;
• device model;
• memory state;
• error identifiers;
• stack traces.

Crash reports generally exclude unnecessary personal information.

27. FRAUD DETECTION TECHNOLOGIES

Certain cookies and similar technologies assist in detecting potentially fraudulent activity.

Illustrative objectives include:

• preventing account takeover;
• identifying automated abuse;
• detecting credential stuffing;
• recognizing suspicious authentication patterns;
• mitigating spam.

Fraud detection supports platform integrity.

28. BOT DETECTION

Security technologies may distinguish legitimate users from automated systems.

Detection mechanisms may consider:

• interaction behavior;
• request frequency;
• authentication patterns;
• device characteristics;
• network indicators.

These technologies reduce automated abuse while minimizing disruption to legitimate users.

29. CONTENT DELIVERY NETWORKS (CDNs)

Servisfy may utilize Content Delivery Networks to improve:

• page loading;
• global performance;
• resilience;
• availability.

CDN technologies may store technical session information necessary to optimize content delivery.

30. API SESSION IDENTIFIERS

Authenticated API requests may rely upon secure tokens rather than conventional browser cookies.

These identifiers support:

• authorization;
• session continuity;
• request validation;
• secure communication.

API tokens are governed by Servisfy's Security & Trust Center.

31. DEVICE IDENTIFIERS

Mobile applications may utilize secure device identifiers to:

• recognize trusted devices;
• improve authentication;
• enhance fraud detection;
• maintain application integrity.

Device identifiers are managed in accordance with applicable privacy laws.

32. LOCAL STORAGE

Servisfy may use browser Local Storage for non-sensitive operational information such as:

• user preferences;
• interface configuration;
• accessibility settings;
• dashboard layout;
• language selection.

Sensitive credentials are not intentionally stored in unsecured browser storage.

33. SESSION STORAGE

Session Storage may be used for temporary information that exists only during an active browsing session.

Examples include:

• temporary workflow state;
• navigation continuity;
• short-term application data.

Session Storage is generally cleared automatically when the browser session ends.

34. INTERNATIONAL DATA TRANSFERS

Cookies and similar technologies may involve information processed outside a user's country of residence.

Where international transfers occur, Else Digital implements appropriate safeguards, which may include:

• Standard Contractual Clauses (SCCs);
• contractual commitments;
• adequacy decisions;
• organizational safeguards;
• technical protections.

International transfers are conducted in accordance with applicable privacy legislation.

35. GDPR COMPLIANCE

For individuals located within the European Economic Area (EEA), Servisfy processes cookies in accordance with:

• General Data Protection Regulation (GDPR);
• ePrivacy Directive;
• applicable national implementing legislation.

Non-essential cookies are deployed only after obtaining valid consent where required.

36. UK GDPR COMPLIANCE

For users located within the United Kingdom, cookie processing complies with:

• UK GDPR;
• Data Protection Act 2018;
• Privacy and Electronic Communications Regulations (PECR).

37. CANADIAN PRIVACY COMPLIANCE

Servisfy supports compliance with Canada's privacy framework, including:

• Personal Information Protection and Electronic Documents Act (PIPEDA);
• substantially similar provincial legislation;
• evolving Canadian privacy reforms.

Cookie practices reflect principles of transparency, accountability, and meaningful consent.

38. UNITED STATES PRIVACY COMPLIANCE

Where applicable, Servisfy supports compliance with relevant U.S. privacy legislation, including:

• California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA);
• Virginia Consumer Data Protection Act (VCDPA);
• Colorado Privacy Act (CPA);
• Connecticut Data Privacy Act (CTDPA);
• Utah Consumer Privacy Act (UCPA);
• and other applicable state privacy laws.

Users may exercise applicable privacy rights through Servisfy's designated privacy channels.

39. DO NOT TRACK (DNT)

Some web browsers transmit "Do Not Track" signals.

Because there is no universally accepted technical standard governing DNT responses, Servisfy does not currently respond differently to browser-based DNT signals.

If industry standards become established, Else Digital may revise this practice accordingly.

40. GLOBAL PRIVACY CONTROL (GPC)

Where legally required and technically supported, Else Digital intends to recognize valid Global Privacy Control (GPC) signals as requests relating to applicable privacy rights.

Support for GPC may vary depending upon platform capabilities and evolving regulatory guidance.

41. COOKIE RETENTION

Cookie retention periods vary according to operational necessity.

Illustrative durations include:

• Session Cookies — Deleted automatically when the browsing session ends.
• Short-Term Cookies — Typically retained for several hours or days.
• Preference Cookies — Retained until expiration or user deletion.
• Security Cookies — Retained only as necessary to protect platform integrity.
• Consent Records — Retained for an appropriate period to demonstrate compliance with applicable legal obligations.

Retention periods are periodically reviewed.

42. COOKIE SECURITY

Cookies used by Servisfy incorporate appropriate security protections where applicable.

Security measures may include:

• Secure attribute;
• HttpOnly attribute;
• SameSite restrictions;
• encrypted session identifiers;
• token expiration;
• rotation mechanisms.

These controls reduce risks associated with interception and misuse.

43. USER RESPONSIBILITIES

Users are encouraged to protect their own privacy by:

• maintaining updated browsers;
• using trusted devices;
• enabling security updates;
• protecting account credentials;
• avoiding shared devices where possible;
• reviewing browser privacy settings.

These practices complement Servisfy's security measures.

44. CHANGES TO THIS COOKIE POLICY

Else Digital may update this Cookie Policy from time to time to reflect:

• changes in technology;
• legal developments;
• regulatory guidance;
• platform enhancements;
• new integrations;
• operational improvements.

Material changes will be communicated through appropriate channels, including updates to the "Last Updated" date and, where required, through in-product notifications or other reasonable means.

Continued use of the Services after the effective date of an updated Cookie Policy constitutes acceptance of the revised Policy, except where additional consent is required by applicable law.

45. CONTACT US

Questions regarding this Cookie Policy or Servisfy's use of cookies and similar technologies may be directed to:

ELSE DIGITAL SOLUTIONS INC.
Operating as Servisfy

Privacy Officer
Email: privacy@servisfy.com (recommended)

General Support: support@servisfy.com

Website: https://servisfy.com

APPENDIX A — ILLUSTRATIVE COOKIE REGISTER

The following table illustrates the types of cookies that may be used within the Servisfy ecosystem. Actual cookies may vary depending on the services enabled, user preferences, and third-party integrations.

This register is maintained as an operational document and may be updated independently of this Policy.

APPENDIX B — COOKIE PREFERENCE CENTER

Servisfy provides or intends to provide a centralized Cookie Preference Center that allows users to:

• Accept all cookies;
• Reject non-essential cookies;
• Enable or disable cookie categories individually (where technically feasible);
• Review descriptions of each cookie category;
• Withdraw or modify consent at any time without affecting previously lawful processing.

Changes to preferences will generally take effect on subsequent interactions. Certain strictly necessary cookies cannot be disabled because they are essential for the secure operation of the Services.