Privacy Policy

This Privacy Policy explains what information iBnk(collectively, “we,” “our,” or “us”) collects, how we use it, and the choices you have regarding your personal information. iBnk is a global brand under which a group of licensed affiliated entities operates regulated payments services across Canada, Australia, and the United States. The iBnk affiliate that provides services to you in your region acts as the data controller of your personal information. By accessing the iBnk website or using any iBnk services, you consent to the practices described below. We may amend this policy from time to time, and any updates will be posted to this page with a new effective date.

Information We Collect

Personal information you provide

When you create an account or apply for our services, we collect identifying details including your name, email address, phone number, date of birth, government-issued identification, and residential address — as required for onboarding, verification, and ongoing compliance with KYC and AML obligations.

Business information

For business users, we collect company name, registered address, incorporation documents, jurisdiction, tax identification numbers, business registration numbers, ultimate beneficial owner information, and any wallet addresses or bank account details associated with the entity.

Automatically collected information

When you visit our site or use our services, we automatically capture browser type, device and operating system information, IP address, approximate location, wallet addresses you connect, on-chain transaction data, and interaction metrics such as page views and clicks via analytics tools.

Transactional data

We process transaction amounts, types, dates, times, originating and destination wallet addresses, on-chain records, counterparty and merchant information, bank account details used for fiat on/off-ramp, and payment histories.

Cookies and similar technologies

We use session cookies to keep you signed in, preference cookies to remember your settings, and security cookies to detect and prevent fraud. You can configure your browser to refuse cookies, but some parts of the site may not function as intended.

Information from third parties

We may supplement what you provide with data from credit bureaus, identity verification and fraud detection services, sanctions and PEP screening vendors, blockchain analytics providers, and our banking and payment partners — to the extent permitted by applicable law.

How We Use Information

We use the information we collect to: assess your eligibility for our services; create and maintain your account; process and settle transactions; provide customer support; improve and develop the iBnk product; send service-related communications and, where you have consented, marketing communications; comply with our legal and regulatory obligations including KYC, AML, sanctions, and Travel Rule requirements; detect, investigate, and prevent fraudulent or unauthorised activity; and enforce our Terms of Use.

Sharing Information

We share personal information with: service providers who help us operate the platform (cloud hosting, analytics, customer support tools, communications); banking, custody, and card-issuing partners; KYC, AML, and sanctions verification providers; blockchain networks and on-chain analytics partners; affiliates within the iBnk corporate group; regulators, law enforcement, courts, and other government authorities where legally required; and counterparties to a corporate transaction such as a merger, acquisition, or financing.

Aggregated or De-identified Information

We may share aggregated or de-identified information that cannot reasonably be linked to an identifiable individual without restriction.

Safeguarding Information

We maintain administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage, however, is fully secure. You are responsible for keeping your account credentials confidential and must notify us immediately at support@ibnk.xyz if you suspect any unauthorised access.

Retention

We retain personal information for as long as necessary to provide our services, fulfil the purposes described in this policy, resolve disputes, enforce our agreements, and comply with our legal, accounting, and regulatory obligations — including the customer-due-diligence and transaction-record retention requirements imposed on us under FINTRAC (Canada), AUSTRAC (Australia), and FinCEN (United States), which generally require records to be kept for at least five to seven years following the end of the customer relationship.

Children

Our services are not directed to anyone under 18 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us and we will delete it.

Your Account and Choices

You can access, update, or request deletion of your account information by contacting support@ibnk.xyz. We will retain information that we are legally required to keep, that is necessary for fraud prevention, or that relates to ongoing disputes. On-chain transactions written to a public blockchain are permanently recorded by the network and cannot be deleted by us.

Regional Operations

iBnk services are operated by a group of licensed affiliated entities under the iBnk global brand, including IBNK VAULT INC. in Canada and corresponding entities in Australia and the United States. No single entity controls the others; each is the responsible party for the region in which it is licensed. Where a regional affiliate is the operating entity for a service you use, it acts as the data controller under this same policy. Region-specific registration details are available on request.

International Data Transfers

iBnk operates across Canada, Australia, and the United States, and works with service providers in additional jurisdictions. Your information may therefore be transferred to and processed in countries other than your own. Where required, we put appropriate safeguards in place — including standard contractual clauses or equivalent measures — to protect your information consistent with applicable law.

Do Not Track

Our site does not currently respond to Do Not Track signals from web browsers.

Your Rights — Canada (PIPEDA)

If you are located in Canada, you have the right to access the personal information we hold about you, request that we correct inaccuracies, and withdraw consent (subject to legal or contractual restrictions). Complaints can be directed to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Your Rights — Australia (Privacy Act 1988)

If you are located in Australia, you have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, including the right to access and correct your personal information, request a complaint review, and ask how your information has been used or disclosed. Complaints regarding our handling of your information can be directed to the Office of the Australian Information Commissioner at oaic.gov.au.

Your Rights — United States

Residents of US states with applicable privacy laws — including California (CCPA / CPRA), Virginia, Colorado, Connecticut, and Utah — may have rights to know, access, correct, delete, and request portability of their personal information, as well as to opt out of certain “sales” or “sharing” of personal information. iBnk does not sell personal information. To exercise these rights, contact us at support@ibnk.xyz. Anti-money-laundering record-keeping obligations under the US Bank Secrecy Act may limit deletion requests.

Your Rights — EU/UK (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data, subject to our legal obligations;
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time, where processing is based on consent.

Our legal bases for processing include performance of a contract, compliance with legal obligations, legitimate interests in operating and securing our services, and your consent where applicable. Complaints can be lodged with your local data protection authority — for the UK, the Information Commissioner's Office at ico.org.uk.

Contact Us

For privacy questions, data subject requests, or complaints, contact us at:

Email: support@ibnk.xyz

Canadian affiliate— IBNK VAULT INC.
Incorporation No. BC1571168 · FINTRAC MSB N3000001312
Registered office: 200–7404 King George Boulevard, Surrey, BC V3W 1N6, Canada

iBnk also operates through licensed affiliated entities in Australia and the United States. These entities operate independently in their respective jurisdictions under the iBnk global brand. Region-specific registration details are available on request.