Force7- Connected Commerce Website

FORCE 7 – KAMPAIGN

USER LEVEL CONSENT AGREEMENT (ULCA)

Effective Date: 01 October 2025

Last Updated: 01 April 2026

This User Level Consent Agreement ("Agreement") governs the collection, use, disclosure, storage, transfer, and processing of Personal Data and Business Data by Force7 Labs Pte Ltd ("Force7", "we", "us", or "our") through the Kampaign Application ("Platform").

Kampaign is an enterprise marketing campaign management and marketing intelligence platform that enables authorised users to create, manage, monitor, analyse, and optimise digital and offline marketing campaigns across multiple marketing channels.

The Platform supports campaign lifecycle management, campaign budgeting, marketing analytics, QR code campaign tracking, campaign attribution, return on investment (ROI) analysis, AI-powered campaign recommendations, executive dashboards, and integration with authorised advertising and marketing platforms.

This Agreement applies to:

• Personal Data provided by you as an authorised Platform user ("Your Data");

• Personal Data relating to customers, leads, campaign participants, employees, agencies, vendors, distributors, dealers, or other third parties processed through the Platform ("Third-Party Data");

• Campaign, operational, marketing, analytical, budgeting, reporting, attribution, and business intelligence information processed through the Platform ("Business Data").

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to this Agreement and the Force7 Kampaign Privacy Notice

1.DEFINITIONS

1.1 Authorised User

Means an authorised employee, contractor, marketing executive, campaign manager, digital marketing specialist, brand manager, sales manager, regional manager, branch manager, executive management, administrator, consultant, or any other individual authorised to use the Platform.

1.2 Customer Organisation

Means the organisation that has subscribed to the Platform and authorised your access.

1.3 Campaign Data

Means information relating to marketing campaigns including campaign names, objectives, budgets, schedules, marketing channels, QR code campaigns, creatives, advertising assets, campaign performance, campaign attribution, conversion metrics, engagement metrics, lead sources, ROI analysis, and campaign lifecycle information.

1.4 Business Data

Means operational reports, executive dashboards, marketing analytics, AI-generated recommendations, workflow information, campaign forecasting, budgeting information, attribution models, audit logs, and marketing performance information processed through the Platform.

2.PURPOSE OF DATA COLLECTION

2.1 For Authorised Users

Force7 processes your Personal Data to:

• Verify your identity;

• Manage user accounts;

• Authenticate authorised access;

• Maintain activity logs;

• Monitor Platform usage;

• Support campaign management operations;

• Generate executive dashboards;

• Provide technical support;

• Improve Platform functionality;

• Maintain security and governance;

• Detect unauthorised access or misuse.

2.2 For Marketing and Campaign Operations

Business Data is processed to:

• Create and manage marketing campaigns;

• Schedule campaigns;

• Activate, pause, resume, complete, or archive campaigns;

• Monitor campaign budgets;

• Track digital marketing performance;

• Track offline marketing campaigns;

• Monitor QR code campaign performance;

• Analyse lead attribution;

• Measure campaign effectiveness;

• Analyse return on investment (ROI);

• Compare marketing channels;

• Forecast campaign performance;

• Generate executive reports;

• Produce AI-powered marketing recommendations.

3.TYPES OF DATA COLLECTED

3.1 Authorised User Personal Data

The Platform may collect:

• Name;

• Business email address;

• Business phone number;

• Employee ID;

• Job title;

• Department;

• Organisation name;

• Login credentials;

• Login history;

• IP address;

• Browser information;

• Device information;

• User activity;

• Campaign approval history;

• Communications with Force7 support.

3.2 Campaign and Marketing Data

The Platform may process:

• Campaign names and identifiers;

• Campaign objectives;

• Campaign status;

• Campaign budgets;

• Campaign schedules;

• Marketing channels;

• Campaign creatives and digital assets;

• QR code campaign information;

• Audience segmentation information;

• Campaign engagement metrics;

• Impressions;

• Click-through rates;

• Leads generated;

• Conversion rates;

• Cost per lead;

• Cost per acquisition;

• ROI calculations;

• Attribution data;

• Campaign performance history;

• Executive dashboards;

• AI-generated optimisation recommendations.

3.3 Third-Party Data

Where applicable, the Platform may process:

• Advertising agency information;

• Media partner information;

• Vendor information;

• Dealer information;

• Branch information;

• Sales consultant information;

• Customer lead references;

• Campaign participant information;

• QR code interaction information;

• Landing page references.

4.CONSENT FOR DATA PROCESSING

By using the Platform, you acknowledge and agree to the processing described in this Agreement.

4.1 Legal Bases

Processing may be based upon:

• Contractual necessity;

• Consent;

• Legitimate interests;

• Legal obligations;

• Customer Organisation instructions where Force7 acts as a Data Processor.

4.2 Core Processing

Core processing includes:

• User authentication;

• Campaign management;

• Campaign monitoring;

• Budget tracking;

• QR campaign tracking;

• Marketing analytics;

• AI-generated recommendations;

• Executive dashboards;

• Audit logging;

• Security monitoring;

• Storage and processing within Force7 systems.

Without this processing, the Platform cannot be provided.

4.3 Optional Consent

Separate consent may be obtained for:

• Marketing communications from Force7;

• Customer satisfaction surveys;

• Product improvement programmes;

• Use of anonymised or aggregated marketing data for benchmarking, analytics, research, and product enhancement.

5.THIRD-PARTY DATA DECLARATION

Where you process customer, lead, employee, agency, vendor, dealer, distributor, campaign participant, or other third-party information, you acknowledge that:

• Your Customer Organisation is responsible for obtaining all necessary legal authority to process such information;

• You are authorised to access and process such information;

• You will use such information only for authorised marketing and business purposes;

• You will maintain confidentiality at all times;

• You will comply with applicable privacy, advertising, consumer protection, marketing, and data protection laws.

You agree to indemnify and hold Force7 harmless against any claims arising from your failure, or your organisation's failure, to obtain the necessary authority or comply with this Section.

6.DISCLOSURE OF DATA

Personal Data and Business Data may be disclosed to:

• The Customer Organisation;

• Authorised management personnel;

• Marketing teams;

• Campaign managers;

• Brand managers;

• Sales management;

• Cloud hosting providers;

• Analytics providers;

• AI infrastructure providers;

• Marketing automation providers;

• CRM providers;

• Advertising platform integration providers;

• Professional advisers;

• Regulatory authorities where required by law.

Force7 does not sell Personal Data.

7.THIRD-PARTY ADVERTISING PLATFORM INTEGRATIONS

The Platform may integrate with third-party services including:

• Google Ads;

• Meta platforms (Facebook and Instagram);

• TikTok;

• LinkedIn;

• YouTube;

• X (formerly Twitter);

• Email marketing platforms;

• SMS platforms;

• WhatsApp Business;

• CRM systems;

• Marketing automation platforms;

• Analytics platforms;

• QR code platforms;

• Other supported advertising or marketing services.

Data exchanged with third-party platforms is subject to the permissions granted by the Customer Organisation and the terms and privacy policies of those third-party providers.

Force7 is not responsible for the availability, functionality, security, accuracy, or policy changes of third-party services.

8.CROSS-BORDER DATA TRANSFER

Personal Data and Business Data may be transferred outside Singapore where necessary to provide the Platform.

Force7 implements appropriate contractual, organisational, and technical safeguards to maintain protection consistent with applicable data protection laws.

9.DATA RETENTION

Personal Data and Business Data will be retained only for as long as necessary:

• To provide the Platform;

• To maintain campaign history;

• To support marketing operations;

• To support audit and governance;

• To fulfil Customer Organisation requirements;

• To comply with legal, regulatory, and contractual obligations.

Upon termination of your account, certain campaign records and audit logs may continue to be retained where required by law or legitimate business purposes.

10.DATA SECURITY

Force7 implements commercially reasonable technical and organisational safeguards including:

• Encryption in transit;

• Encryption at rest where appropriate;

• Secure authentication;

• Role-Based Access Control (RBAC);

• Audit logging;

• Security monitoring;

• Backup procedures;

• Administrative safeguards.

Users remain responsible for protecting their login credentials.

11.ACCESS AND CORRECTION

Subject to applicable law, you may request access to or correction of your Personal Data.

Requests may be made by contacting admin@force7.ai.

Where Force7 acts as a data processor, we may refer your request to the Customer Organisation for handling.

Force7 will respond to requests within a reasonable timeframe and in accordance with applicable law.

12.COOKIES AND SIMILAR TECHNOLOGIES

The Platform may use:

• Cookies;

• Browser storage;

• Session identifiers;

• Log files;

• Analytics technologies.

These technologies support authentication, security, campaign analytics, performance optimisation, and user experience.

13.YOUR RESPONSIBILITIES

You agree to:

• Maintain the confidentiality of your login credentials;

• Protect campaign and marketing information;

• Ensure campaign information entered into the Platform is accurate;

• Use the Platform only for authorised business purposes;

• Comply with applicable advertising, consumer protection, privacy, and marketing laws;

• Immediately report suspected unauthorised access, security incidents, or data breaches.

14.AUDIT LOGGING

The Platform maintains audit records including:

• • User authentication;

• Campaign creation;

• Campaign updates;

• Campaign approvals;

• Budget modifications;

• Campaign scheduling;

• Campaign activation, pausing, completion, and archiving;

• Administrative actions;

• Report exports;

• Configuration changes;

• Security events.

Audit logs may be retained for governance, compliance, legal, and operational review purposes.

15.UPDATES TO THIS AGREEMENT

Force7 may update this Agreement from time to time.

Material changes will be communicated through the Platform or by email at least fourteen (14) days in advance, where practicable.

Continued use of the Platform after the effective date of revised terms constitutes acceptance of the updated Agreement.

16.GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of Singapore.

17.CONTACT INFORMATION

For questions regarding this Agreement or your Personal Data, please contact:

Force7 Labs Pte Ltd

20A Tanjong Pagar Road

Singapore 088443

Email: admin@force7.ai