Privacy Policy

Your privacy matters to us. Here's how we protect and handle your personal information.

Last Updated: March 15, 2025

Information We Collect

At Movixa, we collect information that helps us provide better investment portfolio optimization services. This isn't just about gathering data - it's about understanding how we can serve you more effectively.

Personal Information: Your name, email address, phone number, and mailing address when you create an account or contact us
Financial Data: Investment preferences, risk tolerance levels, and portfolio information you choose to share
Technical Information: IP address, browser type, device information, and how you interact with our platform
Communication Records: Messages you send us, support tickets, and feedback you provide
Usage Analytics: Which features you use most, time spent on different sections, and platform performance data

We're pretty transparent about this stuff because, honestly, trust is everything in financial services. You're sharing sensitive information with us, and we take that responsibility seriously.

How We Use Your Information

Your data isn't just sitting in some digital filing cabinet. We use it actively to make your experience with Movixa more valuable and personalized.

Purpose	Data Used	Legal Basis
Account Management	Name, email, contact details	Contract performance
Portfolio Optimization	Financial preferences, risk tolerance	Legitimate interest
Platform Improvements	Usage analytics, technical data	Legitimate interest
Customer Support	Communication records, account info	Contract performance
Security Monitoring	IP address, login patterns	Legitimate interest

We also use aggregated, anonymized data to understand broader trends in investment behavior. This helps us develop better tools and features for everyone using our platform.

Data Sharing and Third Parties

Let me be straight with you - we don't sell your personal information to random companies. That's not our business model, and frankly, it goes against everything we believe about privacy.

However, we do share information in specific situations:

Service Providers: Companies that help us operate our platform (cloud hosting, email services, analytics tools) under strict data processing agreements
Legal Requirements: When required by Canadian law, court orders, or regulatory authorities
Business Transfers: If Movixa is acquired or merged, your information may transfer to the new entity (with continued privacy protections)
Safety and Security: To prevent fraud, investigate security incidents, or protect our users and platform

All our third-party partners sign agreements ensuring they handle your data with the same care we do. We regularly audit these relationships to make sure everyone's following the rules.

Your Privacy Rights

You have significant control over your personal information. These aren't just theoretical rights - we've built systems to make them actually usable.

Access Right: Request a copy of all personal information we have about you
- Includes data sources and how long we plan to keep it
- Response within 30 days of verified request
- Free for your first request each year
Correction Right: Update or fix inaccurate information in your account
- Most corrections can be made directly in your account settings
- Contact support for complex changes
Deletion Right: Request removal of your personal information
- Some information may be retained for legal compliance
- Account closure triggers automatic deletion of most data
Portability Right: Get your data in a format you can use elsewhere
- Available as JSON, CSV, or PDF formats
- Includes all data you've provided to us

Data Security Measures

Security isn't just about having the right technology - though we definitely have that. It's about creating a culture where protecting your information is part of everything we do.

Encryption: All data is encrypted both in transit (TLS 1.3) and at rest (AES-256)
Access Controls: Multi-factor authentication required for all staff accessing user data
Regular Audits: Monthly security assessments and annual third-party penetration testing
Data Minimization: We only collect and keep what we actually need for service delivery
Incident Response: 24/7 monitoring with immediate response protocols for any security events
Staff Training: Regular privacy and security training for all team members

We also maintain cyber insurance and work with leading security firms to stay ahead of emerging threats. Your financial information deserves nothing less than enterprise-grade protection.

Data Retention and Deletion

We don't keep your information forever. Different types of data have different retention periods based on their purpose and legal requirements.

Data Type	Retention Period	Reason
Account Information	Active account + 2 years	Service delivery and support
Financial Data	7 years from last use	Canadian financial regulations
Communication Records	3 years	Customer service and dispute resolution
Technical Logs	90 days	Security monitoring and debugging
Marketing Data	Until withdrawal of consent	Communication preferences

When data reaches its retention limit, it's permanently deleted using secure deletion methods that meet Canadian government standards. We can provide certificates of deletion upon request.

International Data Transfers

Since we operate primarily in Canada, most of your data stays within Canadian borders. However, some of our technology partners have servers in other countries with strong privacy laws.

When data does cross borders, we ensure it's protected through:

Standard contractual clauses approved by privacy regulators
Adequacy decisions recognizing equivalent privacy protections
Additional technical and organizational safeguards
Regular compliance monitoring and auditing

We maintain detailed records of all international transfers and can provide specific information about where your data is processed upon request.

Children's Privacy

Movixa's services are designed for adults managing investment portfolios. We don't knowingly collect personal information from anyone under 18 years old.

If we discover we've inadvertently collected information from a minor, we'll delete it immediately and may suspend the associated account until we can verify the user's age or obtain appropriate parental consent.

Policy Updates

Privacy laws evolve, and so do our services. When we make significant changes to this policy, we'll notify you through:

Email notification to your registered address
Prominent notice on our platform for 30 days
In-app notification when you next log in

Minor updates (like contact information changes or clarifications) will be reflected here with an updated "Last Modified" date. We recommend checking this page periodically, especially if you're privacy-conscious.

Contact Us About Privacy

Questions about this privacy policy? Want to exercise your privacy rights? We're here to help.

Email: support@movixa.com
Phone: +1 (705) 727-4267
Mail: 2008 Queensbury Dr, Oshawa, ON L1L 0S1, Canada

For privacy-specific inquiries, please include "Privacy Request" in your subject line to ensure faster routing to our privacy team.