Privacy Policy

1. Introduction

Inveritas Technologies Inc. ("Inveritas Technologies," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our investment management platform (the "Service"). This policy applies to information we collect through our website, applications, and any related services.

As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws. We also respect the privacy rights of users in other jurisdictions, including the United States (California Consumer Privacy Act - CCPA, where applicable) and other regions.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Identity Information: Name, username, title, company name
• Contact Information: Email address, phone number, mailing address
• Account Information: Username, password, security questions and answers
• Financial Information: Investment data, portfolio information, transaction history, account balances
• Professional Information: Job title, company information, investment preferences
• Technical Information: IP address, browser type, operating system, device identifiers
• Usage Information: How you use our Service, features accessed, time spent on pages

2.2 Automatically Collected Information

When you access our Service, we automatically collect certain information, including:

• Log data (access times, pages viewed, IP address)
• Device information (hardware model, operating system, unique device identifiers)
• Location data (general geographic location based on IP address)
• Cookies and similar tracking technologies (see our Cookies Policy)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our investment management platform
• Account Management: To create and manage your account, authenticate users, and provide customer support
• Communications: To send you technical notices, updates, security alerts, and administrative messages
• Analytics: To understand how users interact with our Service and improve user experience
• Security: To detect, prevent, and address technical issues, fraud, and security vulnerabilities
• Compliance: To comply with legal obligations, industry regulations, and financial reporting requirements
• Marketing: With your consent, to send promotional communications about new features, products, or services
• Research and Development: To develop new features, products, and services

4. Legal Bases for Processing (Canadian and International Users)

We process your personal information based on the following legal grounds:

• Consent: You have given explicit consent for processing your personal information
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you
• Legal Obligations: We must process your information to comply with applicable laws and regulations
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our Service, preventing fraud, and ensuring security

5. How We Share Your Information

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (e.g., cloud hosting, analytics, customer support), subject to confidentiality obligations
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred
• Legal Requirements: When required by law, court order, or government request, or to protect our rights, property, or safety
• With Your Consent: When you explicitly authorize us to share your information with third parties
• Aggregate Information: We may share anonymized, aggregated data that does not identify you personally

We do not sell your personal information to third parties. Any data sharing is conducted in compliance with applicable privacy laws, including PIPEDA and CCPA.

6. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit and at rest using TLS/SSL protocols
• Secure authentication mechanisms and access controls
• Regular security assessments and vulnerability testing
• Employee training on data protection and security best practices
• Physical, electronic, and procedural safeguards

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on:

• The nature of the information and why we collected it
• Legal, regulatory, tax, accounting, or reporting requirements
• Whether you have an active account with us
• Our legitimate business needs

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention and destruction policies.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 Rights for All Users

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal obligations
• Objection: Object to processing of your personal information for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Data Portability: Request a copy of your information in a structured, machine-readable format

8.2 Canadian Users (PIPEDA)

Under PIPEDA, you have the right to access your personal information, challenge its accuracy, and withdraw consent for certain uses, subject to legal or contractual restrictions.

8.3 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, disclose, and sell
• Right to delete personal information we have collected
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

8.4 Exercising Your Rights

To exercise any of these rights, please contact us at info@inveritastech.com. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

9. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than Canada, including the United States. These countries may have data protection laws that differ from Canadian laws. When we transfer your information internationally, we implement appropriate safeguards to protect your privacy, including:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with third-party service providers
• Compliance with cross-border data transfer regulations

10. Children's Privacy

Our Service is not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.

11. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, or services that are not owned or controlled by Inveritas Technologies. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)

Your continued use of our Service after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us:

14. Consent

By using our Service, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with our practices, please do not use our Service.