Privacy Policy
1. Information We Collect
To provide our service and comply with FINTRAC recordkeeping and identity verification requirements as a registered Money Services Business, we collect:
- Contact information: full name, email address, phone number
- Identity information: date of birth, government-issued ID details (type, number, expiry, issuing country), and a photo/selfie captured during identity verification
- Residential address and occupation
- Transaction information: amounts, dates, wallet addresses, network used, exchange rates, and transaction references
- Account information: login credentials (stored as a salted cryptographic hash, never in plain text), session activity
- Technical information: IP address, device/browser information, for fraud prevention and security purposes
2. Why We Collect It
- To verify your identity as required under Canadian anti-money-laundering law (the Proceeds of Crime (Money Laundering) and Terrorist Financing Act)
- To process your transactions and provide the service you request
- To detect and prevent fraud, money laundering, and other illegal activity
- To communicate with you about your account and transactions
- To meet our legal recordkeeping obligations to FINTRAC
3. Who We Share It With
- Identity verification provider: we use a third-party identity verification service to confirm your identity documents and perform liveness checks.
- FINTRAC and other regulators/law enforcement: where required by law, including large transaction reports and suspicious transaction reports.
- Service providers: email delivery and infrastructure providers who process data on our behalf under confidentiality obligations.
- We do not sell your personal information to third parties.
4. How Long We Keep It
Canadian law requires us to retain identity and transaction records for at least five years. We retain your information for this period at minimum, and may retain it longer where required by law or an active investigation.
5. Your Rights
Under Canada's federal privacy law (PIPEDA), you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Ask questions about how your information is used
- File a complaint with us, or with the Office of the Privacy Commissioner of Canada, if you believe your privacy rights have been violated
Some information cannot be deleted on request where we are legally required to retain it (e.g., FINTRAC recordkeeping obligations).
6. Security
We use industry-standard safeguards to protect your information, including encrypted storage of credentials, restricted access controls, and secure transmission of data. No system is completely secure, and we encourage you to use a strong, unique password for your account.
7. Contact Us
Questions about this policy or your personal information can be directed to:
DEFI SOLUTIONS INC.
205 Placer Ct, Unit 301, North York, ON M2H 0A9
[email protected] · (403) 815-9090