Privacy Policy

Last Updated: September 18, 2026

This Privacy Policy describes how Ventbusters Instruments Inc. collects, uses and discloses information when You use the Application, and explains Your rights under Canadian privacy law.

The Application is industrial software used to configure a Ventbuster® Unit, to run a flow measurement test at a well site and upload the resulting Test Record to our secure IoT Dashboard. Almost all of the information it handles describes equipment and a well rather than a person. Where the Application does handle Personal Information, this policy explains why.

We collect and use information only for the purposes set out in this policy. We do not use it for advertising or marketing, and we do not sell it.

Interpretation and Definitions

Interpretation

Words with an initial capital letter have the meanings given below. Those meanings apply whether the word appears in the singular or the plural.

Definitions

For the purposes of this Privacy Policy:

• "Application" means Ventbusters Instrument APP, the software program provided by the Company and downloaded by You onto an Android Device.

• "Company" (referred to as "the Company", "We", "Us" or "Our") refers to Ventbusters Instruments Inc., 645 Woodside Court N.W., Airdrie, Alberta, T4B 2W2 Canada.

• "Comms Unit" means a Ventbuster® communications device installed at a well site, which the Application connects to over Bluetooth.

• "Country" refers to Canada.

• "Device" means the Android phone or tablet on which You have installed the Application.

• "Operator" means the individual using the Application to carry out a test, normally in the course of their employment.

• "Personal Information" means information about an identifiable individual, as that term is used in PIPEDA.

• "PIPEDA" means the Personal Information Protection and Electronic Documents Act (Canada).

• "Service" means the Application together with the backend systems that receive and store Test Records.

• "Service Provider" means a third party that processes information on the Company's behalf and under the Company's instructions.

• "Test Record" means the complete record of a measurement test, made up of the job and well information entered by the Operator and the measurement data downloaded from the Comms Unit.

• "You" means the individual using the Service, or the company or other legal entity on whose behalf that individual is using the Service.

Collecting and Using Your Information

Types of Data Collected

Job and well information

Before a test, the Operator enters the details that identify the job and configure the measurement:

• Well name, licensee, UWI or API number, and well license number

• AFE number

• Surface location and bottom-hole location

• Reason for the test and scope of work

• Alarm set points and gas mixture composition

• Free-text notes

• The Test Operator and Authorized By fields

Personal Information

The only Personal Information the Application collects are contained in the Test Operator and Authorized By fields, which hold the names of the individuals who performed and approved the test. We collect these names in a work context only, so that a Test Record can be attributed to a responsible person and later verified. They form part of the permanent record of the measurement. We do not use them for any other purpose.

Free-text notes are meant for observations about the well, the equipment and the job. Please do not enter Personal Information about Yourself or anyone else into these fields.

Measurement data from the Comms Unit

When the Application connects to a Comms Unit, it downloads the data that unit has recorded:

• Flow, pressure and temperature readings

• Voltages, currents, battery level and signal strength

• Fault flags and calibration states

• Timestamps

• GPS coordinates recorded by the Comms Unit

The GPS coordinates in a Test Record are the position of the Comms Unit hardware at the well site, recorded by that unit. They are not the location of Your Device. The Application does not request or use the location permission on Your Device.

Technical identifiers

So that a Test Record can be tied to the equipment that produced it, the Application collects the Comms Unit's Bluetooth name and serial number, the backend device ID assigned to that unit, the Comms Unit firmware version, and the Application version.

Information the Application does not collect

The Application does not collect Your Device's location, contacts, calendar, call logs, SMS messages, photos, or files unrelated to a test. It does not collect financial or payment information, health information, biometric information, or advertising identifiers. It does not use the microphone or camera.

Usage Data

The Application does not collect Usage Data. It contains no analytics, crash-reporting or advertising software development kits, and it does not record how You navigate the Application or how long You spend in it.

Tracking Technologies and Cookies

The Application does not use cookies, web beacons, pixels, local storage for tracking, or any similar tracking technology.

Use of your information

The Company uses the information described above for the following purposes, and no others:

• To configure the Comms Unit for the job, including alarm set points and gas composition.

• To produce a valid Test Record, including calculating, validating and displaying results.

• To assign measurements correctly to the right well, license, licensee and job.

• To make the record auditable by identifying which individual performed the test and which individual authorized it.

• To upload and store results so they can be reported to the customer who commissioned the test and, where required, to a regulator.

• To support the equipment and the Application, including diagnosing faults and verifying calibration states.

• To meet legal and regulatory obligations that apply to measurement records.

We collect only what these purposes require. If we later wish to use the information for a new purpose, we will update this policy and, where the law requires it, obtain consent first.

Sharing Your Information

We may share information in the following situations:

• With Service Providers. We share uploaded Test Records with Losant IoT Inc., which operates the platform that receives, processes and stores them, and with Amazon Web Services, which hosts our long-term archive. Neither is permitted to use the information for its own purposes.

• With the customer. We share the Test Record with the licensee, operator or service company that commissioned the test, because the record is the product they engaged us to produce.

• With regulators. The well owner may share records with a regulator, such as the Alberta Energy Regulator, when a report is required by law.

• For business transfers. We may share or transfer information in connection with a merger, financing, or sale of some or all of our business, in which case the recipient will be bound by terms no less protective than this policy.

• With Your consent. We may disclose information for any other purpose with Your consent.

We do not share information with advertisers, ad networks, analytics companies, data brokers, or marketing partners.

Retention of Your Information

We keep information only as long as the purposes in this policy require, together with any period the law requires:

Where it is held

On Your Device

Losant Platform

Amazon S3 Archive

Google Drive

Archived Test Records are kept permanently because a measurement record is evidence of what was measured, when, by whom and with which instrument. Audits, regulatory reporting, and disputes over production or emissions volumes can arise years after a test, and a record without attribution cannot be verified. Ventbuster Instruments Inc. also maintains a historical record in the instance where a client requires a copy of historical tests.

Transfer of Your Information

Our Service Providers store and process data on servers located in the United States. Information held in another country is subject to the laws of that country, and courts, law enforcement and national security authorities there may be able to compel access to it.

We use contractual and security measures to require a comparable level of protection from our Service Providers, but we cannot override foreign legal process. By using the Service and submitting information through it, You acknowledge this transfer. For more detail about our handling of information outside Canada, contact our Privacy Officer.

Disclosure of Your Information

Business transactions

If the Company is involved in a merger, acquisition or sale of assets, information may be transferred. We will give notice before information is transferred and becomes subject to a different privacy policy.

Law enforcement

We may be required to disclose information where the law requires it, or in response to a valid request by a public authority such as a court, a regulator or a government agency.

Other legal requirements

We may disclose information where we believe in good faith that doing so is necessary to comply with a legal obligation, to protect and defend the rights or property of the Company, to investigate possible wrongdoing connected with the Service, to protect the personal safety of users or the public, or to protect against legal liability.

Security of Your Information

• Uploads from the Application to our backend use HTTPS with TLS encryption.

• Records on Your Device are written to the Application's private internal storage, which Android isolates from other applications. They are not written to shared or external storage.

• Access to stored records on our backend is restricted to authorized Ventbuster Instruments Inc. personnel and controlled by account credentials.

• Internal access is limited to staff who need the information to do their job.

No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security. If a breach of our security safeguards creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

Your Privacy Rights

Access

You may ask what Personal Information we hold about You, how we have used it, and to whom we have disclosed it. Contact our Privacy Officer using the details below. We will need enough information to confirm Your identity and locate the records, and we will respond within 30 days at no charge for a routine request. In limited cases the law allows us to withhold information, for example where releasing it would reveal Personal Information about another individual. Where that applies, we will tell You the reason.

Correction

You may ask us to correct Personal Information that is inaccurate or incomplete. Where a correction affects a Test Record that has already been reported, we will record the correction alongside the original rather than overwrite it, so that the audit trail stays intact.

Deletion

On Your Device, the Application includes controls for deleting individual Test Records. You can remove all local data by uninstalling the Application, or by clearing its storage in Android Settings under Apps.

To ask us to delete information held on our backend, email us with the well name, the date of the test and, if You have it, the Comms Unit serial number. We will delete what we can. We may not be able to delete an uploaded Test Record in full, because the measurement is a business and regulatory record we are required to keep. Where we cannot delete a record, we will tell You why and, where it can be done without compromising the integrity of the record, we will remove or restrict the Personal Information within it instead.

Withdrawing consent

You may withdraw consent to our collection and use of Your Personal Information at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent means You can no longer be recorded as the Operator or approver of a test, which may prevent You from using the Application for its intended purpose.

Children's Privacy

The Service is industrial equipment software intended for use by adults in the course of their employment. It is not directed to children, and we do not knowingly collect Personal Information from anyone under 18. If You believe a child has provided us with Personal Information, contact us, and we will take steps to remove it.

Links to Other Websites

The Service is not designed or written to have links to websites we do not operate.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date at the top. Where a change materially affects how we handle Personal Information, we will give notice in the Application before the change takes effect. We encourage You to review this policy periodically.

Contact Us

If You have questions about this Privacy Policy, or wish to make an access, correction or deletion request, contact our Privacy Officer:

Deanne Layher, Ventbuster Instruments Inc.

deanne.layher@ventbusters.com

645 Woodside Court N.W., Airdrie, Alta. T4B 2W2

We will acknowledge a complaint promptly and investigate it. If You are not satisfied with our response, You may take the matter to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or to the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca.

Ventbusters Instruments Inc. · Privacy Policy ·