Last updated: November 13, 2026
1.Who we are
Kaizech INC. ("Kaizech", "we", "us") is a Canadian company registered with the
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) as a Money Services
Business (MSB registration M23799658) and with the Bank of Canada as a Payment
Service Provider under the Retail Payment Activities Act. We provide multi-currency
wallets, international money transfers, foreign exchange and digital-asset services.
This policy explains our practices under the Personal Information Protection and
Electronic Documents Act (PIPEDA) and other applicable privacy laws. It applies to our
websites, dashboards, APIs and mobile experiences (together, the "Services").
2.What we collect
Information you provide
- Identity information — name, date of birth, address, phone number, email,
government-issued ID documents, photographs/liveness captures, and for businesses:
corporate records, directors and beneficial-ownership information.
- Financial information — bank account details, transaction instructions,
source-of-funds information where the law requires us to ask.
- Correspondence — messages you send our support and compliance teams.
Information collected automatically
- Transaction records — amounts, currencies, counterparties, timestamps and
blockchain addresses connected with transfers you make through the Services.
- Device and usage data — IP address, device identifiers, browser type,
login timestamps and security events (for example, sign-ins from a new location).
Information from third parties
- Identity-verification partners — results of document, biometric and watchlist
checks performed by our verification providers.
- Fraud-prevention and sanctions-screening services — risk signals about
transactions, devices, phone numbers and wallet addresses.
As a regulated money services business we are legally required to collect and verify
identity information before providing most services. If you choose not to provide it, we
may be unable to serve you.
3.How we use it
- Providing the Services — opening and operating your account, executing transfers
and exchanges, showing balances and history, and supporting you.
- Legal and regulatory compliance — identity verification (KYC/KYB), sanctions and
watchlist screening, transaction monitoring, and reporting required under the
Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA).
- Security and fraud prevention — detecting unauthorized access, confirming
sign-ins from new locations, and protecting customer funds.
- Service improvement — understanding how the Services are used so we can make
them better, using aggregated or de-identified data wherever possible.
- Communications — service notices (always) and marketing (only with your consent,
which you can withdraw at any time).
4.When we share it
We do not sell personal information. We share it only:
- With service providers who help us operate — identity-verification providers,
cloud-hosting providers, banking and liquidity partners, and communications providers —
each bound by contract to protect your information and use it only for the service they
provide to us.
- With regulators and authorities where the law requires or permits it — including
reports to FINTRAC and responses to lawful requests from law enforcement.
- With counterparty institutions to the extent required to complete a transfer you
instruct (for example, the receiving institution needs the recipient details you gave us).
- In a business transaction — if Kaizech is involved in a merger, financing or sale,
information may be disclosed under confidentiality protections consistent with this policy.
5.How long we keep it
We keep personal information only as long as needed for the purposes above — but note that
Canadian AML law sets mandatory minimums: most identity and transaction records must be
retained for at least five years after the record is created or the business
relationship ends. After retention periods expire, we securely delete or anonymize the data.
6.How we protect it
- Encryption in transit and at rest for personal and financial data.
- Multi-factor authentication, withdrawal address allow-listing with cooling periods, and
new-location confirmation on sensitive actions.
- Access controls on our side: staff access is role-based, logged and audited; privileged
actions require step-up authentication.
- Independent security reviews of our infrastructure and continuous monitoring.
No system is perfectly secure. If a breach creates a real risk of significant harm, we will
notify you and the Office of the Privacy Commissioner of Canada as the law requires.
7.International transfers
Some of our service providers process data outside Canada (for example, cloud infrastructure
in the European Union or the United States, and identity-verification providers with global
operations). When personal information leaves Canada it remains protected by contractual
safeguards, but it may be subject to lawful access by authorities in those jurisdictions.
8.Cookies & analytics
Our websites use strictly-necessary cookies for sign-in sessions and security (for example,
remembering your authenticated session), and limited analytics to understand aggregate site
usage. We do not use cross-site advertising trackers. You can control cookies in your
browser settings; blocking essential cookies may prevent sign-in.
9.Your rights
- Access — ask us what personal information we hold about you and how it's used.
- Correction — ask us to fix inaccurate or incomplete information.
- Consent withdrawal — withdraw consent for optional uses (like marketing) at any
time; this cannot override retention and reporting the law requires of us.
- Complaint — raise concerns with us first; you may also complain to the
Office of the Privacy Commissioner of Canada (priv.gc.ca).
We respond to access requests within 30 days as PIPEDA requires, and we will tell you if a
legal exception prevents us from disclosing something (for example, records tied to an
ongoing AML report, which we are prohibited from revealing).
10.Children
The Services are not directed to individuals under 18, and we do not knowingly collect
personal information from them. If you believe a minor has provided us information,
contact us and we will delete it.
11.Changes to this policy
When we change this policy we will update the date at the top and, for material changes,
notify you through the Services or by email before they take effect. Continued use of the
Services after a change takes effect means the updated policy applies.
Questions, access requests and complaints go to our Privacy Officer: