Privacy Policy

Information We Collect

Running an investment platform means we need certain information to provide you with our services and keep your account secure. Here's what we gather and why it matters.

Information You Provide Directly

When you create an account or interact with our services, you give us information directly. This includes:

• Your name, email address, phone number, and residential address
• Financial information like bank account details for transactions
• Government-issued ID numbers as required by Canadian financial regulations
• Employment information and income details for investment suitability assessments
• Investment preferences and risk tolerance data
• Communications you send us through support channels or feedback forms

Information Collected Automatically

Our systems collect certain technical information when you use our platform. This helps us keep things running smoothly and spot any unusual activity that might indicate security issues.

• Device information including IP address, browser type, and operating system
• Usage data showing how you navigate through our platform
• Login timestamps and session duration
• Transaction history and investment activity records
• Geolocation data when you access our mobile applications

Information From Third Parties

Sometimes we receive information about you from other sources, particularly when verifying your identity or processing financial transactions.

• Credit bureaus provide verification data as part of our Know Your Client obligations
• Banking partners share transaction confirmation details
• Identity verification services confirm documentation authenticity
• Market data providers supply information for portfolio analysis

How We Use Your Information

We're not in the business of collecting data just for the sake of it. Everything we gather serves a specific purpose related to providing and improving our investment services.

Legal Basis for Processing (PIPEDA Compliance)

Canada's Personal Information Protection and Electronic Documents Act requires us to have a lawful reason for processing your personal information. Here's our basis for handling your data:

• Consent: You've explicitly agreed to our data collection when creating your account
• Contractual Necessity: We need your information to fulfill our service agreement with you
• Legal Obligations: Canadian financial regulations require us to collect and retain certain data
• Legitimate Interests: We process some data to prevent fraud and maintain platform security

How We Share Your Information

We don't sell your personal data to advertisers or data brokers. Period. But running a financial services platform does mean we need to share certain information with specific parties.

Service Providers

We work with carefully vetted companies that help us operate our platform. These include:

• Cloud hosting providers who store our databases securely
• Payment processors who handle transaction authorization
• Identity verification services that confirm your documentation
• Customer support tools that help us respond to your inquiries
• Analytics platforms that show us how people use our services

All service providers sign strict confidentiality agreements and can only use your data for the specific purposes we've authorized.

Regulatory and Legal Requirements

Sometimes the law requires us to share information. This happens when:

• Canadian securities regulators request account information during audits or investigations
• Tax authorities need transaction records for compliance verification
• Law enforcement agencies issue valid legal orders
• Court proceedings require disclosure of specific account details

Business Transfers

If Vrathex merges with another company or sells part of our business, your information may transfer to the new entity. You'll receive notice before this happens, and the new company must honor the commitments we've made in this privacy policy.

Data Security Measures

Protecting your financial information isn't just good practice — it's fundamental to everything we do. We've built multiple layers of security into our systems.

Technical Safeguards

• 256-bit SSL encryption for all data transmitted between your device and our servers
• End-to-end encryption for sensitive financial documents
• Multi-factor authentication required for account access
• Automated monitoring systems that detect suspicious login patterns
• Regular security audits conducted by independent cybersecurity firms
• Database encryption protecting stored information

Organizational Safeguards

• Access controls limiting which employees can view personal data
• Background checks for all staff with data access
• Mandatory security training for our entire team
• Incident response protocols ready to deploy if breaches occur
• Regular backup systems ensuring data isn't lost

Your Privacy Rights

Your personal information belongs to you. Canadian privacy law gives you several rights regarding how we handle your data, and we've built systems to make exercising these rights straightforward.

Access Your Information

You can request a copy of all personal data we hold about you. We'll provide this in a readable format within 30 days. There's no charge for your first request each year; additional requests may incur a reasonable administrative fee.

Correct Inaccurate Data

Spotted something wrong in your profile? You can update most information directly through your account settings. For changes to verified information like your legal name or address, contact our support team with appropriate documentation.

Delete Your Information

You can request deletion of your account and associated data. Keep in mind that Canadian financial regulations require us to retain certain transaction records for seven years, even after account closure. We'll delete everything else within 90 days of your request.

Restrict Processing

You can ask us to temporarily stop using your data for specific purposes. For example, you might restrict marketing use while maintaining your investment account. We'll honor these requests unless we have compelling legal grounds to continue processing.

Data Portability

Want to move your data to another investment platform? We'll provide your information in a machine-readable format that other services can import. This includes your account details, transaction history, and portfolio information.

Object to Processing

You can object to how we use your data for purposes like marketing or analytics. We'll stop unless we can demonstrate compelling reasons that override your interests.

Withdraw Consent

For data processing based on your consent, you can withdraw that consent anytime. This doesn't affect the lawfulness of processing before you withdrew consent, but we'll stop going forward.

Data Retention and Deletion

We don't keep your information forever. Here's how long we retain different types of data and why.

After retention periods expire, we securely delete or anonymize data so it can no longer be linked to you. Deletion means complete removal from our active systems, backups, and archives — not just marking it as inactive.

International Data Transfers

While Vrathex primarily operates within Canada, some of our service providers have servers in other countries. When your data leaves Canada, we take extra precautions.

Our cloud infrastructure provider maintains data centers in the United States. Canadian data protection laws recognize that US privacy standards may differ from ours, so we've implemented additional safeguards:

• Standard contractual clauses approved by Canadian privacy authorities
• Additional encryption for data stored outside Canada
• Regular audits ensuring foreign providers meet our security standards
• Contractual provisions requiring immediate notification if foreign governments request access to Canadian user data

Your financial transaction data stays within Canadian borders. Only non-sensitive technical information like anonymized usage statistics may be processed internationally.

Cookies and Tracking Technologies

Like most websites, we use cookies and similar technologies to make our platform work properly and understand how people use it.

Essential Cookies

These cookies are necessary for basic platform functionality. They remember your login status, maintain your session security, and store temporary transaction data. You can't disable these without breaking the platform, but they don't track you across other websites.

Analytics Cookies

We use analytics tools to understand which features people use most, where they encounter problems, and how we can improve. These cookies tell us things like "users on mobile devices struggle with this form" or "most people abandon signup at this step." The data is aggregated and anonymized.

Preference Cookies

These remember your choices like display language, dashboard layout, or chart settings. They make your experience more personalized without tracking your broader behavior.

Managing Cookies

You can control cookies through your browser settings. Blocking all cookies will prevent you from using our platform, but you can selectively disable analytics and preference cookies while keeping essential ones. Visit your account settings for granular control over which tracking technologies we use.

Children's Privacy

Our investment services aren't designed for anyone under 18. We don't knowingly collect information from minors, and Canadian securities law prohibits us from opening investment accounts for individuals who haven't reached the age of majority in their province.

If we discover we've accidentally collected data from someone under 18, we'll delete it immediately and close any associated accounts. Parents or guardians who believe their child has provided us with personal information should contact us right away.

In New Brunswick (where our head office is located), the age of majority is 19. Investment accounts require proper legal capacity to enter binding contracts.

Third-Party Links and Services

Our platform may contain links to external websites — financial news sources, educational resources, or partner services. Once you leave vrathex.info, this privacy policy no longer applies.

We're not responsible for the privacy practices of other websites, even if we've linked to them. Before providing personal information to any third-party site, review their privacy policy to understand how they'll handle your data.

Some third-party services integrate directly with our platform through APIs. For example, our market data provider supplies real-time pricing information. These integrations are covered by our service provider agreements described earlier in this policy.

Changes to This Privacy Policy

We update this policy occasionally to reflect new practices, legal requirements, or service changes. When we make significant modifications, we'll notify you through:

• Email sent to your registered address at least 30 days before changes take effect
• Prominent notice on our platform homepage and login screen
• In-app notification when you next access your account

For minor changes like clarifying existing practices or fixing typos, we'll update the "Effective Date" at the top of this page without additional notification.

You can always find the current version of our privacy policy at vrathex.info/privacy-policy. We also maintain an archive of previous versions — contact us if you need to reference historical policy language.

If you disagree with policy changes, you have the right to close your account before the new terms take effect. We'll process your data under the previous policy version during the account closure process.

Your California Privacy Rights (CCPA)

While Vrathex operates primarily in Canada, some California residents may access our educational content or informational resources. If you're a California resident, you have additional rights under the California Consumer Privacy Act.

California users can request information about what personal data we've collected, where it came from, how we use it, and whether we've shared it. You can also request deletion of your data, subject to the same regulatory retention requirements that apply to all users.

We don't sell personal information to third parties, so California's "Do Not Sell" provisions don't apply to our practices. However, you can still exercise your CCPA rights by contacting us using the information below.