At xerathionova, we collect various types of information to provide you with comprehensive working capital analysis services. This collection happens through multiple channels and serves specific purposes related to our financial platform operations.

Your information serves specific purposes within our working capital analysis platform. We've designed our data usage practices to align with Canadian privacy regulations while providing meaningful financial insights.

Service Delivery: We use your financial data to generate working capital analyses, create custom reports, and provide actionable insights about your business's financial position. This includes calculating liquidity ratios, identifying cash flow patterns, and generating predictive models.

Platform Enhancement: Usage data helps us understand how clients interact with our tools, which features provide the most value, and where we can make improvements. This information guides our development priorities and helps us create more effective analytical tools.

Communication: We use your contact information to send important account updates, notify you about new features, and provide support when you need assistance with our platform.

Security Monitoring: Technical data helps us detect unusual activity, prevent unauthorized access, and maintain the integrity of our systems. This is particularly important given the sensitive nature of financial information.

We maintain strict controls over information sharing and only disclose data under specific circumstances that align with Canadian privacy law and our commitment to protecting your financial information.

Service Providers: We work with carefully vetted third-party providers for cloud hosting, data analytics, and technical support. These providers operate under strict confidentiality agreements and are prohibited from using your data for their own purposes.

Legal Compliance: We may disclose information when required by Canadian law, court orders, or regulatory requests from authorized government agencies. We carefully review all such requests and only provide the minimum information necessary to comply.

Business Transfers: In the event of a merger, acquisition, or sale of xerathionova's assets, your information may be transferred as part of the transaction. We would notify you in advance and ensure the receiving party maintains equivalent privacy protections.

Aggregated Analytics: We may share anonymized, aggregated data that cannot identify individual users for research purposes or industry analysis. This information never includes specific financial details or personally identifiable information.

Under Canadian privacy legislation, including PIPEDA (Personal Information Protection and Electronic Documents Act), you have specific rights regarding your personal information. We've created straightforward processes to help you exercise these rights.

To exercise any of these rights, contact our Privacy Officer using the information provided below. We respond to all valid requests within 30 days and provide updates if additional time is needed for complex requests.

Financial data requires the highest levels of protection. We've implemented comprehensive security measures that exceed industry standards and comply with Canadian financial privacy requirements.

Encryption Standards: All data transmissions use TLS 1.3 encryption, while stored data is protected with AES-256 encryption. Financial information receives additional encryption layers and is stored in geographically separate, secure facilities within Canada.

Access Controls: We maintain strict role-based access controls, ensuring team members only access information necessary for their specific responsibilities. All access is logged and regularly audited by independent security firms.

Infrastructure Security: Our systems operate on secure, Canadian-based cloud infrastructure with 24/7 monitoring, automated threat detection, and regular security assessments. We maintain SOC 2 Type II certification and undergo annual penetration testing.

Incident Response: We maintain detailed incident response procedures and will notify affected users within 72 hours if a data breach occurs. Our response team includes security experts, legal advisors, and senior management.

We retain information only as long as necessary to provide services and meet legal obligations. Our retention periods vary based on data type and regulatory requirements.

Active Account Data: While your account remains active, we maintain your profile information and recent analytical data to ensure consistent service delivery. Financial analysis history is retained for 3 years to enable trend analysis and comparative reporting.

Inactive Accounts: If your account remains inactive for 24 months, we begin our deletion process. We'll notify you 90 days before deletion begins, giving you opportunity to reactivate your account or download your data.

Legal Retention: Some financial records must be retained for 7 years under Canadian tax and business regulations. This includes transaction logs, audit trails, and certain business correspondence.

Deletion Process: When retention periods expire, we securely delete data using NIST-approved deletion standards. This includes overwriting storage media multiple times and destroying physical hardware containing sensitive information.

xerathionova primarily processes and stores data within Canada to ensure compliance with Canadian privacy laws. However, some limited data transfers may occur for specific operational needs.

Cloud Infrastructure: Our primary data centers are located in Toronto and Vancouver, with backup facilities in Montreal. All financial analysis and storage occurs within Canadian borders.

Service Providers: Some technical support and analytics services operate from the United States under companies that participate in recognized privacy frameworks. These transfers are limited to non-financial technical data and operate under strict contractual protections.

Protection Measures: Any international transfers include contractual clauses that ensure equivalent privacy protection, regular audits of recipient organizations, and the ability to recall data if protection standards change.

We use cookies and similar technologies to improve your experience on our platform and gather insights about usage patterns. You have control over these technologies through your browser settings.

Essential Cookies: These cookies are necessary for basic platform functionality, including user authentication, session management, and security features. These cannot be disabled while using our services.

Analytics Cookies: We use analytics cookies to understand how users interact with our platform, which features are most valuable, and where we can make improvements. This data is anonymized and aggregated.

Preference Cookies: These remember your settings and preferences, such as dashboard layouts, default analysis parameters, and notification preferences.

Managing Cookies: You can control cookie settings through your browser, though disabling certain cookies may affect platform functionality. We provide detailed cookie management options in your account settings.

We review and update this privacy policy annually or when significant changes occur to our data practices. Changes are driven by evolving regulations, new service features, or feedback from users and privacy advocates.

Notification Process: We'll notify you of material changes through email and prominent notices on our platform at least 30 days before changes take effect. Minor updates, such as contact information changes, may be posted directly without advance notice.

Version History: Previous versions of this policy are archived and available upon request. This helps you understand how our practices have evolved and ensures transparency in our data handling approaches.

Consent for Changes: Continued use of our platform after policy updates constitutes acceptance of the changes. If you disagree with updates, you can request account deletion before the changes take effect.