Introduction

At aroielyaakeon, we understand that your financial data is sensitive. This isn't something we take lightly. We've built our finance control platform with privacy as a core principle, not an afterthought.

This policy explains how we collect, use, and protect your information when you use our services. We're based in Richmond, British Columbia, and we comply with Canadian privacy legislation including PIPEDA (Personal Information Protection and Electronic Documents Act) and provincial privacy laws applicable in BC.

Information We Collect

We collect different types of information depending on how you interact with aroielyaakeon. Here's what we gather and why:

Account Information

When you create an account, we need basic details to set up your profile and secure your access. This includes your name, email address, and password (which we encrypt immediately). If you're setting up business accounts, we might also collect your company name and business number.

Financial Data

Since aroielyaakeon helps you control your finances, we process transaction data, account balances, and spending patterns. This information stays encrypted both when it's stored and when it's moving between our servers. We never sell this data to third parties.

Usage Information

We collect technical data about how you use our platform. This includes your IP address, browser type, device information, and which features you access. This helps us improve the platform and catch potential security issues early.

How We Use Your Information

Your data serves specific purposes, and we don't use it beyond what's necessary to run the service you signed up for. Here's what we do with it:

• Provide and maintain your finance control dashboard and all associated features
• Process transactions and categorize spending based on your preferences
• Send you account alerts, spending notifications, and important service updates
• Detect and prevent fraudulent activity or unauthorized access to your account
• Improve our platform based on usage patterns and user feedback
• Comply with legal obligations under Canadian financial regulations
• Respond to your support requests and resolve technical issues

Data Storage and Security

Your data is stored on secure servers located in Canada. We use industry-standard encryption protocols (AES-256 for data at rest, TLS 1.3 for data in transit). Our security measures include regular vulnerability assessments, firewalls, and intrusion detection systems.

Access to your personal and financial information is restricted to authorized personnel who need it to perform their jobs. All team members undergo background checks and sign confidentiality agreements.

Backup and Recovery

We maintain encrypted backups of your data to ensure business continuity. These backups are stored separately from our primary systems and are subject to the same security standards. Backup data is retained for 90 days and then securely deleted.

Sharing Your Information

We keep your information within aroielyaakeon except in these specific situations:

Service Providers

We work with third-party companies that help us run our platform. These include cloud hosting providers, payment processors, and email service providers. They only get access to the information they need to do their job, and they're contractually required to protect it.

Legal Requirements

If we receive a valid legal request from law enforcement or regulatory authorities in Canada, we may need to disclose information. We'll notify you about these requests unless we're legally prohibited from doing so.

Business Transfers

If aroielyaakeon is acquired or merged with another company, your information would be transferred as part of that transaction. You'd be notified beforehand, and the new entity would still be bound by this privacy policy.

Your Rights Under Canadian Law

PIPEDA gives you specific rights regarding your personal information. Here's what you can do:

• Access: Request a copy of all personal information we hold about you
• Correction: Ask us to fix inaccurate or incomplete information
• Deletion: Request that we delete your account and associated data
• Withdrawal of Consent: Stop us from processing your data for specific purposes
• Data Portability: Get your data in a machine-readable format to transfer elsewhere
• Complaint: File a complaint with the Privacy Commissioner of Canada if you're not satisfied with our response

To exercise any of these rights, contact us at contact@aroielyaakeon.com. We'll respond within 30 days, as required by PIPEDA. Some requests might take longer if they're complex, but we'll keep you updated.

Data Retention

We keep your information only as long as necessary to provide our services or comply with legal obligations. Here's our retention schedule:

• Active account data: Retained while your account is active
• Transaction records: Seven years after account closure (required by Canadian tax law)
• Communication logs: Three years from last contact
• Technical logs: 90 days unless needed for security investigations
• Marketing consent records: Retained until you withdraw consent

When you close your account, we'll delete or anonymize your personal information within 90 days, except where we're legally required to keep records longer. Financial transaction data needs to be kept for seven years to comply with CRA requirements.

Cookies and Tracking

aroielyaakeon uses cookies to keep you logged in and remember your preferences. We also use analytics cookies to understand how people use our platform. You can control cookies through your browser settings, though some features might not work properly if you disable them.

We don't use third-party advertising cookies. The tracking we do is limited to improving your experience with aroielyaakeon and ensuring the platform works properly.

Children's Privacy

aroielyaakeon isn't designed for anyone under 18. We don't knowingly collect information from minors. If you're a parent and believe your child has created an account with us, contact us immediately and we'll delete the account.

International Data Transfers

Your data is stored in Canada and generally doesn't leave the country. If we need to transfer data internationally for any reason, we'll ensure adequate protections are in place through standard contractual clauses or other approved mechanisms under PIPEDA.

Changes to This Policy

We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you via email or through a prominent notice on our platform at least 30 days before the changes take effect.

The date at the top of this policy shows when it was last updated. We encourage you to review it periodically, especially if you're concerned about how your information is handled.