Effective Date: 20 Jan 2026
Last Updated: 20 Jan 2026

Introduction

KrypitalX Exchange Inc. (“KrypitalX”, “we”, “our”, or “us”) is committed to protecting your privacy and maintaining the highest standards of data protection and transparency.

This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you use our services, visit our website, or interact with any KrypitalX products or affiliates.

KrypitalX operates under the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws. We also align our data protection practices with the General Data Protection Regulation (GDPR) principles.

By using KrypitalX’s website or services, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect only the information necessary to deliver our services securely and to comply with Canadian financial regulations (including Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements).

Personal Identification Data

• Full name, date of birth, nationality.
  
  
• Residential and mailing addresses.
  
  
• Identification documents (e.g., passport, driver’s license, national ID).
  
  
• Proof of address (e.g., utility bill, bank statement).
  
  

Financial and Transaction Data

• Payment information (bank account or card data, if applicable).
  
  
• Deposit and withdrawal records.
  
  
• Wallet addresses, blockchain transaction details.
  
  
• Trade and order history.
  
  

Technical Data

• IP address, device identifiers, browser type, and operating system.
  
  
• Log data for platform security and fraud prevention.
  
  
• Cookies and session analytics.
  
  

Communication Data

• Email correspondence, live chat transcripts, and recorded support interactions.
  
  
• Feedback, surveys, and service requests.
  
  

2. How We Use Your Information

Your information is used strictly for legitimate business and compliance purposes:

1. Service Delivery – To verify your identity, open accounts, process transactions, and provide customer support.
   
   
2. Regulatory Compliance – To fulfill legal obligations under FINTRAC and AML/CFT regulations.
   
   
3. Security and Fraud Prevention – To protect against unauthorized activity, money laundering, or fraud.
   
   
4. Platform Improvement – To analyze usage and improve performance, usability, and features.
   
   
5. Communication – To send account updates, security alerts, and service notices (no spam or unsolicited marketing).
   
   

3. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Consent: When you agree to provide information voluntarily (e.g., registration, newsletter).
  
  
• Legal Obligation: Compliance with financial and AML regulations.
  
  
• Contractual Necessity: To fulfill our service agreement with you.
  
  
• Legitimate Interests: Platform security, risk management, and fraud prevention.
  
  

4. Data Retention

KrypitalX retains data for the period required by FINTRAC and Canadian regulatory standards — typically five (5) years after account closure or final transaction, unless longer retention is mandated by law.

Data is securely deleted, anonymized, or archived once retention obligations expire.

5. Data Protection and Security

We use industry-leading safeguards to protect all personal data:

• Encryption: AES-256 for storage, TLS 1.3 for transmission.
  
  
• Access Control: Multi-tier authentication for internal systems.
  
  
• Physical Security: Secure data centers and restricted-access infrastructure.
  
  
• Continuous Monitoring: 24/7 threat detection and intrusion prevention.
  
  

No transmission method over the internet is 100% secure, but KrypitalX employs all reasonable measures to minimize risk.

6. Data Sharing and Third Parties

We never sell or rent your information.
We may share limited data only with:

• Regulatory authorities (FINTRAC, law enforcement), when legally required.
  
  
• Service providers performing critical operations (e.g., payment processors, KYC verification vendors).
  
  
• Auditors and legal advisors bound by confidentiality agreements.
  
  

All third-party partners are vetted and contractually bound to protect your information.

7. International Data Transfers

Your information may be processed in countries outside of Canada where KrypitalX or its service providers operate.
We ensure all transfers meet equivalent privacy protections as required under PIPEDA and GDPR.

8. Your Rights

You have the right to:

• Access and request a copy of your personal data.
  
  
• Correct or update inaccurate information.
  
  
• Withdraw consent (where applicable).
  
  
• Request deletion of data (subject to regulatory retention rules).
  
  
• File a complaint with the Office of the Privacy Commissioner of Canada.
  
  

Requests can be submitted to privacy@krypitalx.com.

9. Cookies and Analytics

We use cookies to improve functionality, analyze performance, and ensure security.
You may disable cookies in your browser, but some site features may not function correctly.

10. Updates to This Policy

We may update this Privacy Policy periodically.
The revised version will be posted on our website with an updated “Effective Date.”

Contact Information

KrypitalX Exchange Inc.
privacy@krypitalx.com