What we collect, and why

1. Definitions

"Klondike Trade AI", "we" and "us" mean the technology platform operating at klondiketradeai.com. "Personal data" means information relating to an identified or identifiable person, such as your name, email address or phone number. "Processing" covers anything we do with that data: storing, reading, sharing under this policy or deleting it.

2. Personal data we collect

We collect the data you give us through the registration and contact forms: first and last name, email address, phone number, and the content of any message you send. During verification we collect identity documents, your address and, for a small share of accounts, a short liveness video. Payment processing produces the minimum transaction data needed to move your funds. We never ask for passwords or card numbers in support conversations.

3. Usage data

When you use the site, we receive technical data: your IP address, browser type and language, the pages visited, referring page and approximate location derived from the IP. This serves security, by detecting abusive or fraudulent traffic, and basic diagnostics. Usage data never builds advertising profiles of you.

4. Cookies

The site uses a small number of strictly necessary cookies: session identifiers that keep you signed in, and a security token protecting forms against automated abuse. Both expire with the session or after a short period. We do not set advertising cookies; if analytics are enabled later, they will be described before they load.

5. Who is responsible (controller)

Klondike Trade AI is responsible for the personal data described in this policy. Where a service is delivered together with a licensed counterparty, each party is responsible for the data it processes, and the relevant party is identified during onboarding.

6. How we use your data

Purposes are concrete: answering your enquiries; creating, verifying and operating your account; executing deposits and withdrawals; providing the trading and reporting services; meeting legal obligations in Canada; keeping the platform secure; and, with your consent, service-related news. Withdrawing marketing consent stops the messages and changes nothing else.

7. Legal bases

Processing rests on recognized bases. Contract: data needed to create and operate the account you asked for. Legal obligation: verification, monitoring and record keeping required by Canadian law. Legitimate interest: site security, fraud prevention and complaint records. Consent: marketing and optional cookies, withdrawable at any time. Verification data serves verification and its attached legal obligations only.

8. How long we keep data

Retention follows purpose. Registration and contact enquiries: up to 24 months after the last contact, then deleted. Account data: for the life of the account. Verification and transaction records: for the period Canadian AML/ATF and tax rules require, generally several years after the relationship ends, then securely destroyed.

9. Where data is processed

Data is processed in Canada and, for some services, in other countries where our providers operate, under contractual protections that require equivalent handling. Transfers are limited to what the service needs: verification checks, payment processing and hosting.

10. Disclosure to third parties

We disclose personal data only to the categories described here: the identity-verification provider, payment processors, IT and hosting providers under contract, licensed counterparties delivering the service, and public authorities where the law requires it. We do not sell personal data, and we do not share it for anyone else's advertising.

11. Security

Data is protected by the controls described on the Security page: encryption in transit and at rest, restricted access, 2FA, session control and audit logging. No system is perfect, so we also maintain an incident process: if a breach affects your data, you are notified with the facts and the fix, in line with Canadian requirements.

12. Your rights

You can ask us to access the personal data we hold about you; correct what is wrong; delete what we no longer have a legal reason to keep; restrict processing while an accuracy dispute is resolved; object to processing based on legitimate interest; and withdraw marketing consent. Requests go to [email protected] and are answered within 30 days, after identity confirmation through the channel on file.

13. Service providers

Providers process data only on our instructions and only for their function: identity verification, payment processing, cloud hosting and email delivery. Each is bound by contract to equivalent confidentiality and security, and none may use your data for their own purposes.

14. Analytics and advertising

The site as delivered runs no third-party analytics, no advertising trackers and no retargeting pixels. A Google Analytics slot exists in the configuration and activates only when a GA4 identifier is pasted into it; until then, nothing loads.

15. Links, children and changes

Our pages link to services we do not operate, such as payment providers and regulators; those sites have their own rules from the moment you arrive. The service is for adults only: accounts are not offered to anyone under 18, and verification includes date of birth so the rule can be enforced. We may update this policy as the service or the law changes; material changes are announced before they take effect, and the previous version is available on request.

16. Contact

Privacy questions, data requests and complaints about handling go to [email protected], marked for the Client Support and Compliance team, during support hours (Monday to Friday, 9:00–17:30 ET (excluding public holidays)). Formal complaints follow the Complaints process, including escalation to OBSI.