Legal

Privacy Policy

Effective date: January 1, 2025  ·  Last updated: June 15, 2025

app-venn Inc. ("app-venn", "we", "our", or "us") is committed to protecting the privacy of our users. This policy explains how we collect, use, share, and safeguard your personal information when you use our platform.

1

Information We Collect

We collect information you provide directly, including your name, email address, business name, phone number, and financial account details when you register or use app-venn services.

We automatically collect usage data such as IP addresses, browser type, device identifiers, and transaction metadata to operate and improve our platform.

We may collect identity verification documents (e.g., government-issued ID, articles of incorporation) as required by Canadian anti-money laundering (AML) regulations.

2

How We Use Your Information

To provide, maintain, and improve our business banking services, including processing payments, issuing cards, and managing accounts.

To comply with legal obligations under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and other applicable Canadian law.

To send transactional notifications, security alerts, and — with your consent — marketing communications about app-venn products.

3

Cookies & Tracking Technologies

We use essential cookies to authenticate sessions and prevent fraud. These cannot be disabled while using the platform.

With your consent, we use analytics cookies (e.g., via Plausible or Segment) to understand how users navigate app-venn and improve the experience.

You may manage or withdraw cookie consent at any time via your browser settings or our cookie preference centre.

4

Third-Party Sharing

We share data with regulated financial partners, payment processors, and identity verification providers strictly to deliver our services.

We do not sell your personal information to advertisers or data brokers.

Subprocessors are contractually bound to process data only on our instructions and in compliance with applicable privacy law.

5

Your Rights

Under PIPEDA and provincial equivalents, you have the right to access, correct, or request deletion of your personal information.

If you are in the EU/EEA, GDPR grants you additional rights including data portability, restriction of processing, and the right to object to automated decision-making.

California residents have rights under the CCPA, including the right to know what data is collected and to opt out of data sales (we do not sell data).

6

Data Retention

We retain account and transaction data for a minimum of 7 years as required by Canadian financial regulations.

Marketing preferences and analytics data are retained for up to 2 years or until you withdraw consent.

Upon verified deletion request, data not subject to legal retention obligations is purged within 30 days.

7

Security

app-venn employs AES-256 encryption at rest, TLS 1.3 in transit, multi-factor authentication, and regular third-party penetration testing.

Access to personal data is role-restricted and logged; our security program is reviewed annually against SOC 2 Type II criteria.

In the event of a breach affecting your data, we will notify affected users and the Office of the Privacy Commissioner of Canada within 72 hours.

8

Children's Privacy

app-venn is designed exclusively for businesses and individuals aged 18 and over.

We do not knowingly collect personal information from minors. If we become aware of such data, we will delete it immediately.

9

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated via email or an in-app notice at least 14 days before taking effect.

Continued use of app-venn after the effective date constitutes acceptance of the updated policy.

10

Contact Us

For privacy inquiries, access requests, or to exercise your rights, contact our Privacy Officer at [email protected].

You may also write to us at: app-venn Inc., 100 King Street West, Suite 5600, Toronto, ON M5X 1C9, Canada.

If you are unsatisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Questions about this policy?

Reach our Privacy Officer at [email protected] — we aim to respond within 5 business days.