Official privacy and data protection framework.
## Privacy Policy and Data Governance
Version 5.0 – Last Updated: April 29, 2026
Our Privacy Commitment:
Nyxalor Frostvorn ("the Platform", "we", "us") is dedicated to the highest standards of data protection.
We operate in strict accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).
Our administrative headquarters is located at Suite 2850, 161 Bay Street, Toronto, ON M5J 2S1, Canada.
Information Collection Protocols:
Identity Metrics: We collect legal names, dates of birth, and government-issued identification for mandatory KYC and AML verification.
Technical Telemetry: We record IP addresses, browser specifications, hardware IDs, and geographical metadata to prevent unauthorized access.
AI Usage Data: Granular logs of user interaction with our proprietary analytical interfaces and neural models.
Legal Basis for Processing:
Contractual Necessity: Required to maintain user accounts and deliver our core technical services.
Statutory Obligations: Compliance with federal laws, including the Proceeds of Crime (Money Laundering) and Terrorist Financing Act.
Legitimate Interests: Necessary for proactive threat detection, platform optimization, and enhancing cybersecurity.
Informed Consent: For the delivery of market reports and the use of non-essential cookies.
Data Security and Residency:
Encryption: All sensitive data at rest is secured via AES-256 encryption; data in transit is protected by TLS 1.3.
Canadian Residency: We prioritize the use of high-security Canadian server nodes to ensure compliance with national data sovereignty standards.
Internal Access: Data access is restricted to authorized personnel through multi-factor authentication (MFA).
Rights of the Data Subject:
Access and Accuracy: You have the right to request a copy of your personal info and challenge its accuracy.
Rectification: Users may update or correct their datasets via the platform settings or through a support request.
Right to Erasure: The right to request account deletion, subject to mandatory 7-year regulatory retention periods for financial activity.
All requests should be addressed to our Privacy Officer at: [email protected].
If concerns remain unresolved, you may contact the Office of the Privacy Commissioner of Canada.