PIPEDA · Canada
Privacy Policy
How Vault collects, uses, discloses, retains, and protects personal information under Canadian privacy law.
Personal information we collect
During onboarding we collect your legal name, date of birth, Canadian address, government-issued ID, a biometric liveness capture, and — where required — SIN and source-of-funds information. We collect transaction, device, and location metadata to power Sentinel fraud detection.
How we use it
We use your information to verify your identity (KYC), issue and fund virtual cards, detect and prevent fraud, meet FINTRAC record-keeping obligations, and communicate service updates. We do not sell your personal information.
Disclosure
We disclose information to our card issuer, payment networks (Visa / Mastercard), our KYC vendor, our cloud infrastructure providers, and to Canadian regulators or law enforcement when legally required.
Retention
KYC and transaction records are retained for at least five years after account closure as required by the PCMLTFA. Non-mandatory data is deleted or anonymized within 90 days of a verified deletion request.
Your rights
You may access, correct, or request deletion of your personal information, and withdraw consent for non-essential uses. To exercise these rights, contact privacy@getvaultapp.app.
Contact
Privacy Officer, Vault. Email privacy@getvaultapp.app. You may also file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).
This document is app-owner content maintained by Vault to answer common questions. It is not legal advice and does not create a certification. Contact privacy@getvaultapp.app for the authoritative version.