Privacy Policy

Maple Exchange ("we," "us," or "our") operates a cryptocurrency exchange platform accessible through our mobile application. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our services. By using Maple Exchange, you consent to the practices described in this policy.

Account InformationWhen you create an account, we collect your email address, display name, and a password (stored in hashed form).

Identity Verification (KYC)To comply with Canadian regulatory requirements, we collect your full legal name, date of birth, residential address, occupation, phone number, and identity verification documents including photo ID and video verification.

Payment InformationWe collect your Interac e-Transfer email address for the purpose of facilitating fiat currency transactions. We do not store bank account numbers or credit card details.

Transaction DataWe record details of all trades, deposits, withdrawals, and other transactions conducted on our platform, including amounts, asset types, wallet addresses, timestamps, and transaction hashes.

Device and Usage InformationWe automatically collect device type, operating system version, IP address, and general usage analytics to improve our services and detect fraudulent activity.

We use your personal information to:

• Create and maintain your account
• Process cryptocurrency trades, deposits, and withdrawals
• Verify your identity to comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detect and prevent fraud, unauthorized access, and other illegal activities
• Send transaction confirmations, security alerts, and service updates
• Comply with applicable Canadian laws and regulations, including reporting obligations under FINTRAC
• Respond to your support requests
• Improve and optimize our platform

We implement industry-standard security measures including:

• AES-256-GCM encryption for wallet private keys
• Bcrypt hashing for passwords
• TLS/SSL encryption for all data in transit
• JWT-based session management with automatic token expiry
• Biometric authentication (Face ID) support
• Rate limiting to prevent brute-force attacks
• Comprehensive audit logging of all administrative actions

We do not sell or rent your personal information. We may share your information only in the following circumstances:

• Regulatory compliance: We may disclose information to FINTRAC or law enforcement as required by Canadian law, including Large Virtual Currency Transaction Reports (LVCTRs) and Suspicious Transaction Reports (STRs).
• Service providers: We use third-party blockchain infrastructure (public RPC nodes) to process transactions. No personal data is shared with these providers beyond public blockchain addresses.
• Legal obligations: We may disclose information in response to valid legal process, court orders, or to protect our rights and the safety of our users.

We retain your personal information for as long as your account is active, and for a minimum of five (5) years after account closure to comply with Canadian record-keeping requirements under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA). Transaction records are retained indefinitely for audit and compliance purposes.

Under Canadian privacy law (PIPEDA), you have the right to:

• Access your personal information held by us
• Request correction of inaccurate information
• Withdraw consent for non-essential data processing
• Request account deletion (subject to regulatory retention requirements)

To exercise these rights, contact us at privacy@maplecx.app.

Our mobile application uses local device storage (Keychain) to securely store authentication tokens. Our web-based admin interface uses cookies for session management. We do not use third-party tracking cookies or advertising trackers.

Maple Exchange is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email. Continued use of our services after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

Maple Exchange
Email: privacy@maplecx.app
Website: maplecx.app