Privacy Policy

Information We Collect

Personal Information You Provide

When you sign up for our learning programs or contact us, we collect basic information that helps us provide better service. This includes your name, email address, phone number, and mailing address. If you're enrolling in paid programs, we'll also need payment information—though we don't store full credit card details on our servers.

Sometimes you'll share additional details with us. Maybe you're filling out a questionnaire about your investment goals, or you're participating in one of our educational forums. That information helps us tailor content to what people actually need, not just what we think they want.

Automatically Collected Data

Like most websites, we automatically gather certain technical information when you visit. This includes your IP address, browser type, device information, and how you navigate through our site. We use this data to improve the user experience and identify technical issues before they become problems.

How We Use Your Information

Your data serves specific purposes, and we don't use it for anything beyond what's necessary to run our educational services. Here's what we actually do with it:

• Deliver educational content and program materials you've signed up for
• Process enrollment and handle payment transactions securely
• Send updates about programs, schedule changes, or new educational resources
• Respond to your questions and provide customer support
• Improve our curriculum based on aggregated usage patterns
• Comply with legal obligations under Canadian financial education regulations
• Prevent fraud and maintain platform security

We don't sell your personal information to third parties. Period. That's not our business model, and it never will be. Your trust matters more than any short-term revenue opportunity.

Data Sharing and Disclosure

There are limited situations where we share your information with other parties. We're transparent about when this happens and why.

Service Providers

We work with third-party companies that help us operate our platform—payment processors, email delivery services, hosting providers, and analytics tools. These partners only access the data they need to perform their specific services, and they're contractually bound to protect your information.

Legal Requirements

Sometimes we're legally required to disclose information. This might happen if we receive a valid court order, need to comply with regulatory investigations, or have to respond to legitimate law enforcement requests. In Canada, financial education providers have specific reporting obligations under certain circumstances.

Business Transfers

If Xretech is ever acquired or merged with another company, your information would be transferred as part of that transaction. You'd be notified in advance, and the new entity would be required to honor the commitments made in this privacy policy.

Your Privacy Rights

Under Canadian privacy law, specifically the Personal Information Protection and Electronic Documents Act (PIPEDA), you have several rights regarding your personal data. We take these obligations seriously.

To exercise any of these rights, contact us at help@xretech.vip. We'll respond within 30 days, though complex requests might take a bit longer. There's no fee for reasonable requests, though we may charge for excessive or repetitive inquiries.

Keep in mind that some rights have limitations. For instance, we can't delete information we're legally required to retain for tax or regulatory purposes. And if you withdraw consent for essential data processing, we may not be able to continue providing certain services.

Data Security Measures

We use industry-standard security practices to protect your information. This isn't just about checking compliance boxes—it's about actual, practical security that prevents unauthorized access.

All data transmission between your device and our servers uses TLS encryption. Your password is hashed using bcrypt, which means even our own staff can't see your actual password. Our databases are behind firewalls, and access is strictly limited to employees who need it for their job functions.

We conduct regular security audits and penetration testing to identify vulnerabilities before bad actors can exploit them. Our hosting infrastructure includes automated backups and disaster recovery procedures.

Despite our best efforts, no system is completely impenetrable. If we ever experience a data breach that affects your personal information, we'll notify you promptly and explain what happened, what data was compromised, and what steps we're taking to address the situation.

Data Retention and Deletion

We don't keep your information forever. Our retention periods depend on the type of data and why we collected it in the first place.

Active account information is retained as long as your account remains open. If you stop using our services but don't formally close your account, we'll keep your basic information for three years before archiving it. Financial transaction records are kept for seven years to comply with Canadian tax requirements.

When you request account deletion, we remove your personal information within 30 days. Some data may persist in backup systems for up to 90 days, but it's no longer accessible for operational purposes. We'll retain anonymized data for analytics—your learning patterns might help improve our curriculum, but they won't be connected to your identity.

Certain legal obligations require us to retain specific records even after you close your account. For example, if you've filed a complaint or were involved in a dispute resolution process, we'll keep those records as required by law.

Third-Party Services and Links

Our educational platform sometimes links to external resources—research papers, financial news sites, regulatory databases. These third-party websites have their own privacy policies that we don't control. When you click an external link, you're leaving our platform and entering a different privacy environment.

We use several third-party services to operate our platform effectively. Google Analytics helps us understand how people use our site. Stripe processes payments securely. SendGrid delivers educational emails. Each of these services has been vetted for security and privacy compliance, but they operate under their own privacy policies.

If you're concerned about third-party tracking, browser extensions like Privacy Badger or uBlock Origin can help you control what data external services collect.

Children's Privacy

Our services are designed for adults making investment decisions. We don't knowingly collect information from anyone under 18 years old. If you're a parent and believe your child has provided us with personal information, contact us immediately and we'll delete it.

Some of our educational content might be appropriate for older teenagers learning about personal finance. If parents want to share our resources with their children, that's fine—but account creation requires being 18 or older.

International Data Transfers

Xretech operates primarily in Canada, and your data is stored on Canadian servers. However, some of our service providers have infrastructure in other countries, which means your information might occasionally be processed outside Canada.

When this happens, we ensure that appropriate safeguards are in place. Our contracts with international service providers include data protection clauses that meet or exceed Canadian privacy standards. We don't transfer data to countries with inadequate privacy protections unless there's a specific legal basis and appropriate safeguards.

Changes to This Policy

Privacy regulations evolve, and our services change over time. When we update this policy, we'll post the new version here with a revised "Last Updated" date. Significant changes will be communicated via email to active users.

We encourage you to review this policy periodically. Continued use of our services after changes take effect means you accept the updated terms. If you disagree with modifications, your option is to stop using our platform and request account deletion.

Regulatory Compliance

As a Canadian financial education provider, Xretech complies with PIPEDA requirements and provincial privacy legislation where applicable. We also follow industry best practices outlined by the Office of the Privacy Commissioner of Canada.

If you believe we've violated your privacy rights or mishandled your personal information, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada. We'd prefer you contact us first so we can address your concerns directly, but regulatory complaints are your right as a Canadian resident.