Information We Collect

When you interact with our investment platform, we gather different types of information to provide you with personalized financial services and maintain secure operations.

Personal Identification Information

We collect basic details when you create an account or use our services. This includes your full name, email address, phone number, date of birth, and residential address. For Canadian residents, we also verify your Social Insurance Number when required by financial regulations.

Financial Information

To facilitate investment activities, we need access to certain financial data. This covers your bank account details, investment preferences, risk tolerance assessments, transaction history, and portfolio holdings. We also track your investment goals and time horizons to provide suitable recommendations.

Technical and Usage Data

Our system automatically collects technical information when you access our platform. This includes IP addresses, device types, browser information, operating systems, and usage patterns. We analyze this data to improve our application's performance and user experience.

Communication Records

We keep records of your interactions with our support team, including emails, chat transcripts, and phone call recordings. These help us resolve issues efficiently and improve our service quality.

How We Use Your Information

The information we collect serves specific purposes related to providing and improving our investment services.

Data Sharing and Third Parties

Running a financial services platform requires collaboration with various partners. Here's who might access your information and why.

Service Providers

We work with trusted companies that help us deliver our services. This includes payment processors who handle transactions, cloud storage providers who host our data securely, and identity verification services that confirm your details. Each provider signs strict confidentiality agreements and can only use your data for specified purposes.

Financial Institutions

Your investment activities involve banks, brokerage firms, and clearing houses. We share necessary information with these institutions to execute your trades and manage your accounts properly.

Regulatory Bodies

Canadian financial regulations sometimes require us to report certain information. This includes the Canada Revenue Agency for tax purposes, the Investment Industry Regulatory Organization of Canada (IIROC), and provincial securities commissions. We only share what's legally mandated.

Legal Requirements

In rare cases, we might need to disclose information in response to court orders, subpoenas, or to comply with other legal processes. We'll notify you when possible unless prohibited by law.

Your Privacy Rights

Canadian privacy law gives you significant control over your personal information. You can exercise these rights by contacting our privacy team.

To exercise any of these rights, send a written request to our privacy officer. We'll verify your identity and respond within the timeframes required by Canadian law. There's no fee for most requests, though we might charge reasonable costs for excessive or repetitive requests.

Security Measures

Protecting your financial information is our top priority. We employ multiple layers of security to safeguard your data from unauthorized access, disclosure, or destruction.

Encryption and Technical Safeguards

All data transmitted between your device and our servers uses bank-level TLS encryption. Your sensitive information is encrypted both in transit and at rest using AES-256 encryption standards. We regularly update our security protocols to address emerging threats.

Access Controls

Only authorized personnel can access your information, and only when necessary for their job functions. We use multi-factor authentication, role-based access controls, and maintain detailed audit logs of all data access.

Physical Security

Our data centers feature 24/7 surveillance, biometric access controls, and environmental monitoring. These facilities comply with SOC 2 Type II standards and undergo regular security audits.

Employee Training

Every team member receives comprehensive privacy and security training. They sign confidentiality agreements and understand their responsibilities for protecting your information.

Despite our efforts, no system is completely foolproof. If a data breach occurs, we'll notify affected users within 72 hours and report to relevant authorities as required by PIPEDA.

Data Retention

We don't keep your information longer than necessary. Here's how long we typically retain different types of data.

• Active Account Data: Maintained as long as your account remains open and for seven years after closure, as required by Canadian financial regulations
• Transaction Records: Kept for seven years to comply with tax and securities laws
• Communication Records: Stored for three years to resolve potential disputes and improve service
• Marketing Preferences: Retained until you withdraw consent or close your account
• Technical Logs: Automatically deleted after 18 months unless needed for security investigations

When retention periods expire, we securely delete or anonymize your information. Deletion methods include cryptographic erasure for encrypted data and secure wiping protocols for physical storage devices.

Cookies and Tracking Technologies

Our platform uses cookies and similar technologies to function properly and provide a better experience. Here's what you should know.

Essential Cookies

These are necessary for basic platform operation. They remember your login status, secure your session, and enable core features. You can't disable these without losing access to key functionality.

Analytics Cookies

We use these to understand how people use our platform. They help us identify popular features, spot problems, and make informed improvements. The data is aggregated and doesn't personally identify you.

Preference Cookies

These remember your settings like language preferences, display options, and notification choices. They make your experience more convenient across sessions.

You can manage cookie preferences through your browser settings. Keep in mind that blocking certain cookies might affect platform functionality. We don't use third-party advertising cookies or sell tracking data to advertisers.

International Data Transfers

While we primarily serve Canadian residents and store data within Canada, some service providers operate internationally. When we transfer data outside Canada, we ensure appropriate safeguards are in place.

Any international transfers comply with PIPEDA requirements. We use standard contractual clauses, verify that recipient countries have adequate privacy protections, and conduct due diligence on foreign service providers. You can request details about specific international transfers by contacting our privacy team.

Children's Privacy

Our investment services are designed for adults. We don't knowingly collect information from anyone under 18 years old without parental consent. If you're a parent and believe your child has provided us with personal information, please contact us immediately so we can delete it.

Registered Education Savings Plans (RESPs) for minors require a parent or guardian to manage the account. In these cases, the adult account holder controls all information related to the minor beneficiary.

Changes to This Policy

Financial regulations and our services evolve over time. We might update this privacy policy to reflect these changes or new legal requirements.

When we make significant changes, we'll notify you by email and display a prominent notice on our platform. The "Last Updated" date at the top of this page shows when the most recent changes took effect. We encourage you to review this policy periodically.

Continuing to use our services after changes take effect means you accept the updated policy. If you disagree with changes, you can close your account, though we'll still retain certain information as required by law.

Additional Information for British Columbia Residents

If you're located in British Columbia, you have additional rights under the Personal Information Protection Act (PIPA). This includes enhanced consent requirements and specific complaint procedures through the Office of the Information and Privacy Commissioner for BC.