Privacy Policy

1. Introduction

Lexivault Security Corp. ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website and when using our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our encryption and security services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services. By accessing and using our website and services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you provide directly to us, including:

• Contact information (name, email address, phone number)
• Company information (organization name, address, industry)
• Account credentials and authentication details
• Payment information (processed securely by third-party providers)
• Communications you send us (emails, support tickets, inquiries)
• Information provided through forms, surveys, or questionnaires
• Content you create, upload, or store using our services

2.2 Information Collected Automatically

When you access our website and services, we automatically collect certain information:

• Device information (IP address, browser type, operating system, device identifiers)
• Usage information (pages visited, time spent, referring URL, clickstream data)
• Location information (country, region, city based on IP address)
• Cookies and similar tracking technologies
• Log data (access timestamps, transaction records, error logs)
• Analytics data regarding your use of our services

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Payment processors and financial institutions
• Service providers and business partners
• Publicly available sources
• Marketing and analytics partners
• Law enforcement or regulatory authorities (when required)

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing, maintaining, and improving our encryption and security services
• Processing transactions and sending transaction-related communications
• Creating and managing your account
• Responding to your inquiries and providing customer support
• Sending promotional emails, newsletters, and marketing communications (with consent)
• Analyzing usage patterns to optimize our services and user experience
• Conducting security monitoring and detecting fraud or unauthorized access
• Complying with legal obligations and enforcing our terms and policies
• Conducting internal audits and administrative functions
• Personalizing your experience and delivering targeted content
• Training and improving our security infrastructure
• Investigating and resolving disputes or complaints

4. Legal Basis for Processing (GDPR Compliance)

For users in the European Union and other jurisdictions with GDPR or equivalent privacy laws, we process your personal data based on the following legal bases:

• Contract: Processing necessary to provide our services and fulfill contractual obligations
• Legitimate Interests: Processing for fraud prevention, security, service improvement, and business operations
• Consent: Processing for marketing communications and non-essential analytics (with your explicit consent)
• Legal Obligation: Processing required by applicable laws, regulations, or court orders
• Vital Interests: Processing necessary to protect the safety and security of individuals

5. How We Share Your Information

5.1 Service Providers

We may share your information with third-party service providers who assist us in operating our website, conducting our business, and serving you. These providers are contractually obligated to maintain the confidentiality and security of your information.

5.2 Business Partners

With your consent, we may share information with business partners for joint marketing initiatives or complementary services.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or other legal processes, or if we believe in good faith that disclosure is necessary to:

• Comply with legal obligations or governmental requests
• Protect the safety and security of our users and the public
• Enforce our Terms of Service and other agreements
• Prevent fraud, abuse, or illegal activity
• Protect our rights and property

5.4 Business Transfers

If we are involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5.5 Aggregated and De-identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for marketing, analytics, research, and other purposes without restriction.

6. Data Security

We implement comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• End-to-end encryption of sensitive data in transit and at rest
• Multi-factor authentication for account access
• Regular security audits and penetration testing
• Secure data storage in geographically distributed data centers
• Access controls and role-based permissions
• Employee training on data protection and privacy practices
• Incident response procedures for security breaches
• Compliance with industry standards and best practices

While we strive to protect your information using reasonable security measures, no system is completely secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials.

7. Data Retention

We retain your personal information for as long as necessary to provide our services, fulfill the purposes outlined in this Privacy Policy, and comply with legal obligations. The retention period may vary depending on the type of information and the purposes for which we use it:

• Account information is retained for the duration of your account and for 3 years after account termination
• Transaction records are retained for 7 years for tax and audit purposes
• Communication records are retained for 2 years unless required longer by law
• Marketing data is retained until you opt-out
• Log files and technical data are retained for 90 days

Upon request, we will delete or anonymize your personal information, subject to legal and contractual obligations to retain certain data.

8. Your Privacy Rights

8.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy in a portable, machine-readable format.

8.2 Correction and Updates

You have the right to request correction of inaccurate or incomplete personal information. You can update your account information directly through your account settings.

8.3 Deletion and Erasure

You have the right to request deletion of your personal information, subject to certain exceptions for legal compliance and legitimate business purposes.

8.4 Objection and Restriction

You have the right to object to or restrict our processing of your personal information for marketing, profiling, or other purposes.

8.5 Withdrawal of Consent

You have the right to withdraw your consent to our processing of your personal information at any time. This will not affect the lawfulness of processing conducted prior to withdrawal.

8.6 Exercising Your Rights

To exercise any of these rights, please submit a request to secure@lexivault.bond with:

• A clear description of your request
• Your full name and email address
• Proof of identity (copy of government-issued ID)
• Any additional information to help us locate your records

We will respond to your request within 30 days in accordance with applicable privacy laws.

9. Cookies and Tracking Technologies

9.1 Types of Cookies

We use the following types of cookies on our website:

• Essential Cookies: Required for website functionality and security
• Performance Cookies: Analyze how you use our website to improve performance
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track your activity for targeted advertising (with consent)
• Third-party Cookies: Set by external services for analytics and advertising

9.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of our website. For more information, visit www.allaboutcookies.org.

9.3 Pixel Tags and Tracking

We may use pixel tags, web beacons, and similar technologies to track your interactions with our website and emails. These technologies help us measure the effectiveness of our marketing and improve your experience.

10. Third-Party Links

Our website may contain links to third-party websites and services that are not operated by us. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites before providing personal information.

11. Children's Privacy

Our services are not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information and terminate the child's account. If you believe we have collected information from a child under 13, please contact us immediately at secure@lexivault.bond.

12. International Data Transfers

Lexivault Security Corp. is based in Canada. Your personal information may be transferred to, stored in, and processed in Canada and other countries where we operate. These countries may have data protection laws that differ from your country of origin. By using our services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

For transfers from the EU to Canada, we rely on adequacy decisions or Standard Contractual Clauses (SCCs) to ensure adequate protections for your information.

13. Contact Information and Data Protection Officer

If you have questions about this Privacy Policy or our privacy practices, please contact us:

14. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the revised policy on our website and updating the "Last Updated" date. Your continued use of our services following notification of changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Regulatory Compliance

15.1 GDPR Compliance

For users in the European Union, we comply with the General Data Protection Regulation (GDPR). You have the rights described in Section 8 of this Privacy Policy. If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority.

15.2 Canadian Privacy Laws

As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial privacy legislation. We are committed to transparency, accountability, and protecting the privacy of Canadian residents.

15.3 Other Privacy Laws

We comply with applicable privacy laws in jurisdictions where we operate, including CCPA (California), LGPD (Brazil), and equivalent regulations in other countries.

16. Disclaimer

While we implement comprehensive security measures to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. Any information you provide is at your own risk.

Document Information: This Privacy Policy was last updated in January 2026 and is effective immediately. It replaces all previous versions of Lexivault Security Corp.'s Privacy Policy.