Data Protection and PIPEDA Compliance Framework
Version 5.0 – Last Updated: April 28, 2026
Article 1: Identification of the Organization
This Privacy Policy outlines the data processing protocols maintained by Cryptify Flows ("the Platform", "we", "us"), headquartered at Suite 2750, 161 Bay Street, Toronto, ON M5J 2S1, Canada. We operate as a data controller in strict accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). To ensure data integrity, our Privacy Officer can be reached at: [email protected].
Article 2: Categories of Data Processed
To provide institutional-grade analytical services and maintain a secure environment, we collect the following:
Identity Information: Full legal name, date of birth, and government-issued ID required for mandatory KYC (Know Your Customer) and AML (Anti-Money Laundering) verification.
Analytical Telemetry: IP addresses, device specifications, geographical metadata, and granular logs of user interaction with our technical interfaces.
Financial Context: Source of funds information and transaction history as required under FINTRAC regulations for digital asset monitoring.
Article 3: Legal Basis for Processing
In accordance with Canadian law, we process your data based on:
Contractual Necessity: To manage your account and deliver our core technological services.
Legal Obligation: Compliance with federal laws, including the Proceeds of Crime (Money Laundering) and Terrorist Financing Act.
Legitimate Interests: Proactive cybersecurity, fraud prevention, and technical optimization of the platform.
Consent: For the delivery of market insights and the use of non-essential cookies.
Article 4: Data Security and Sovereignty
Cryptify Flows utilizes enterprise-grade security:
Encryption: All sensitive data is stored using AES-256 encryption and transmitted via TLS 1.3.
Hosting: Data is processed on high-security servers with redundant backups, ensuring compliance with Canadian data residency and protection standards.
Article 5: Your Rights
Under PIPEDA, you have the right to access your personal information, challenge the accuracy of the data, and request corrections. Inquiries should be directed to [email protected].