Privacy Policy

Your Privacy Rights and Data Protection

Effective Date: January 15, 2025

Introduction and Scope

Caltocron operates as an investment reporting service provider in Canada, and we take your privacy seriously. This policy explains how we handle personal information when you use our investment analysis tools, reporting services, and educational resources.

This privacy policy applies to all interactions with Caltocron services, including our website at caltocron.pro, client portal access, and any communication channels we maintain. We follow Canadian privacy legislation including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

By using our services, you acknowledge that you've read and understood how we collect, use, and protect your personal information in the context of financial reporting and analysis.

Information Collection Practices

We collect information necessary to provide accurate investment reporting and analysis services. The type of information depends on which services you use and how you interact with our platform.

Account Information

Contact details, account preferences, service selections, and authentication credentials for secure access to your investment reports.

Financial Data

Investment portfolio information, transaction history, account balances, and performance metrics needed for comprehensive reporting analysis.

Usage Analytics

Platform interaction patterns, report viewing history, feature usage statistics, and system performance data to improve our services.

Communication Records

Support conversations, consultation notes, feedback submissions, and any correspondence related to your service experience.

Third-Party Data Integration

When you authorize connections to external financial institutions or investment platforms, we receive limited data necessary for report generation. These integrations use secure APIs and follow industry-standard encryption protocols.

How We Use Your Information

Your personal information helps us deliver accurate, personalized investment reporting services. We use this data to create meaningful analysis that supports your financial decision-making process.

We process your financial data to generate investment performance reports, portfolio analysis, risk assessments, and market trend insights. This includes calculating returns, analyzing asset allocation, and identifying patterns in your investment behavior.

Our reporting algorithms use your historical data to create benchmarks and performance comparisons that help you understand your investment outcomes relative to market standards and personal goals.

We use account information to maintain secure access to your reports, send important service updates, and ensure that only authorized individuals can view your financial information.

Security monitoring includes analyzing login patterns, detecting unusual access attempts, and maintaining audit logs for compliance with financial service regulations.

Aggregated usage data helps us understand which features provide the most value, identify areas for enhancement, and develop new reporting capabilities that meet evolving client needs.

We analyze platform performance metrics to optimize report generation speed, improve user interface design, and ensure reliable service delivery across different devices and browsers.

Information Sharing and Disclosure

We maintain strict controls over who can access your personal information. Sharing is limited to specific circumstances that directly support our service delivery or comply with legal requirements.

  • Service Providers: Technical infrastructure partners, data processing vendors, and security service providers who help us deliver and protect our services
  • Financial Institutions: When you authorize data connections, we share authentication tokens but not your personal credentials or detailed financial information
  • Legal Compliance: Canadian regulatory authorities, tax agencies, or law enforcement when required by applicable laws or court orders
  • Business Continuity: In the event of a merger, acquisition, or asset transfer, your information may be transferred to ensure service continuity under equivalent privacy protection

Data Processing Agreements

All third-party service providers sign comprehensive data processing agreements that require them to maintain the same level of privacy protection we provide. These agreements include specific terms about data security, access limitations, and deletion requirements.

Data Security and Protection

Financial information requires exceptional security measures. We implement multiple layers of protection to safeguard your data against unauthorized access, theft, and accidental disclosure.

Technical Safeguards

All data transmissions use TLS encryption, and stored information is protected with AES-256 encryption standards. Our servers are hosted in secure Canadian data centers with 24/7 monitoring, redundant systems, and physical access controls.

Database access requires multi-factor authentication, and we maintain detailed audit logs of all system interactions. Regular security assessments and penetration testing help identify and address potential vulnerabilities.

Administrative Controls

Staff access to personal information is limited based on job requirements. Employees receive privacy training and sign confidentiality agreements. We conduct background checks for positions involving data access and regularly review access permissions.

Incident Response

In the unlikely event of a security breach, we have procedures in place to contain the incident, assess the impact, notify affected clients, and report to relevant authorities as required by Canadian privacy legislation.

Your Privacy Rights

Canadian privacy law gives you specific rights regarding your personal information. We've designed our systems and processes to make it easy for you to exercise these rights.

Access Your Information

Request a copy of the personal information we hold about you, including details about how we've used it and who we've shared it with.

Correct Inaccuracies

Update or correct any personal information that's outdated or incorrect. You can make some changes directly through your account settings.

Withdraw Consent

Revoke permission for certain uses of your information, though this may affect our ability to provide some services.

Request Deletion

Ask us to delete your personal information, subject to legal and business record-keeping requirements.

Data Portability

Receive your personal information in a structured format that you can transfer to another service provider.

File Complaints

Contact the Office of the Privacy Commissioner of Canada if you're not satisfied with how we handle your privacy concerns.

How to Exercise Your Rights

Contact our privacy team using the information below. We'll verify your identity and respond within 30 days. Some requests may take longer if they're complex or if we need additional information to complete your request safely.

Data Retention and Deletion

We keep your personal information only as long as necessary to provide services, comply with legal obligations, and protect our legitimate business interests.

  • Active Account Data: Maintained while your account is active and for up to 7 years after closure to meet financial record-keeping requirements
  • Transaction Records: Retained for 7 years as required by Canadian tax and financial regulations
  • Communication Logs: Stored for 3 years to support ongoing client relationships and service quality
  • Usage Analytics: Aggregated data may be retained indefinitely, but individual identifiers are removed after 2 years
  • Marketing Preferences: Maintained until you opt out or request deletion

Secure Deletion Process

When retention periods expire or you request deletion, we use secure deletion methods that make the information unrecoverable. This includes overwriting data storage locations and destroying physical media containing your information.

International Data Transfers

While our primary data processing occurs within Canada, some service providers may process information in other countries with adequate privacy protection standards.

Cross-Border Processing Safeguards

When we use service providers outside Canada, we ensure they provide equivalent privacy protection through contractual commitments, certification programs, or operations in countries with adequate privacy laws as recognized by Canadian authorities.

You have the right to know about any international transfers of your personal information and can contact us for specific details about the safeguards we use to protect your data across borders.

Policy Updates and Changes

We review this privacy policy regularly to ensure it accurately reflects our practices and remains compliant with applicable laws. Changes may be necessary as our services evolve or privacy regulations are updated.

Notification of Changes

For minor updates that don't affect your rights, we'll post the revised policy on our website with a new effective date. For significant changes that impact how we use your information, we'll notify you directly via email or through your account dashboard.

We encourage you to review this policy periodically, especially before providing new personal information or using new features of our service.

Privacy Questions and Concerns

Our privacy team is available to help with questions, concerns, or requests related to your personal information.

Email: [email protected]

Phone: +14033022826

Mail: Privacy Officer
Caltocron
705 Grande Côte E
Lavaltrie, Quebec J5T 3J9
Canada

We aim to respond to all privacy inquiries within 10 business days and will work with you to resolve any concerns about how we handle your personal information.

Document Version: 2025.1 | Last Reviewed: January 2025

This privacy policy was last updated on January 15, 2025, and reflects current Canadian privacy legislation and our service offerings.