Privacy Policy
How panthirelivo protects and manages your personal information
Information We Collect
At panthirelivo, we collect information that helps us provide better financial education services to our Canadian users. The data we gather falls into several categories, each serving specific purposes in delivering personalized learning experiences and maintaining platform security.
Personal Information
Usage Information
How We Use Your Information
Your personal data serves multiple purposes within our educational platform. We process this information under various legal bases, including legitimate business interests, contractual obligations, and your explicit consent where required by Canadian privacy legislation.
Educational content personalization represents our primary use of your data. We analyze your learning patterns, quiz performance, and stated preferences to suggest relevant courses, adjust difficulty levels, and provide targeted resources that align with your financial education goals.
Account Security & Fraud Prevention
We monitor account activity patterns to detect unauthorized access attempts and protect against fraudulent behavior. This includes analyzing login locations, device fingerprints, and unusual activity patterns that might indicate security threats.
Your Privacy Rights
Under Canadian privacy laws, including PIPEDA (Personal Information Protection and Electronic Documents Act), you possess comprehensive rights regarding your personal information. We've designed our systems to honor these rights efficiently and transparently.
Access & Portability
Request a complete copy of your personal data in a structured, machine-readable format. This includes learning progress, account information, and communication history.
Correction & Updates
Modify inaccurate information or update outdated details through your account dashboard or by contacting our privacy team directly.
Deletion Rights
Request complete removal of your personal data, subject to legal retention requirements and legitimate business needs for completed transactions.
Processing Restrictions
Limit how we process your information for specific purposes while maintaining essential account functionality and security measures.
Data Sharing & Third Parties
We maintain strict standards for data sharing and only work with trusted partners who demonstrate compliance with Canadian privacy standards. Our approach prioritizes transparency and user control over information sharing practices.
Payment processing requires sharing billing information with certified financial institutions and payment processors operating within Canadian regulatory frameworks. These partners access only the minimum data necessary to complete transactions and are bound by strict confidentiality agreements.
Educational content providers occasionally receive anonymized usage statistics to improve course quality and relevance. This data never includes personal identifiers and focuses solely on learning outcomes and engagement metrics.
No Data Sales Policy
panthirelivo never sells personal information to third parties. We don't participate in data brokerage activities or provide user information to marketing companies, advertisers, or other commercial entities seeking customer lists.
Data Retention Periods
Our retention policies balance user privacy rights with legitimate business needs and legal compliance requirements. Different types of information have varying retention periods based on their purpose and regulatory obligations.
Active Account Period
Personal information and learning data remain accessible while your account is active and for up to 12 months after your last login.
3 Years - Financial Records
Payment information, billing records, and transaction history are retained for tax and accounting compliance as required by Canadian revenue regulations.
7 Years - Legal Compliance
Records related to disputes, regulatory inquiries, or legal proceedings are maintained according to applicable limitation periods and legal requirements.
Anonymized Analytics
De-identified usage patterns and educational effectiveness metrics may be retained indefinitely for research and platform improvement purposes.
Security Measures
Protecting your personal information requires comprehensive security measures across technical, administrative, and physical domains. We employ industry-standard encryption, access controls, and monitoring systems to safeguard data throughout its lifecycle.
All data transmission occurs through encrypted channels using TLS 1.3 protocols. Our servers utilize AES-256 encryption for data at rest, with encryption keys managed through secure hardware modules and regular rotation schedules.
Access to personal information is strictly limited to authorized personnel who require such access for their job responsibilities. All staff members undergo privacy training and sign confidentiality agreements before accessing user data systems.
Incident Response Protocol
In the unlikely event of a data security incident, we maintain rapid response procedures including immediate containment, forensic analysis, affected user notification within 72 hours, and coordination with relevant privacy authorities as required by law.
International Data Transfers
While panthirelivo primarily operates within Canada, some technical infrastructure and service providers may be located in other jurisdictions. We ensure adequate protection for any cross-border data transfers through contractual safeguards and regulatory compliance measures.
Cloud storage services operate within Canadian data centers where possible, with backup systems in jurisdictions providing equivalent privacy protection standards. Any transfers to countries without adequacy decisions are protected through approved transfer mechanisms and enhanced security measures.
Policy Updates & Changes
Privacy practices evolve alongside technology and regulatory changes. We review this policy regularly and notify users of material changes through email notifications and prominent website announcements at least 30 days before implementation.
Minor clarifications or administrative updates may be made without prior notice, but will always be reflected in the "Last Updated" date at the top of this policy. Significant changes affecting data processing purposes or user rights will always require advance notification.