1. Introduction

Crest Fundgrove ("we," "us," or "our") is committed to protecting your privacy and being transparent about how we handle your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered crypto analytics platform and related services (collectively, the "Services").

As a Canadian company, we comply with applicable Canadian privacy laws including the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial privacy legislation where applicable.

2. Information We Collect

Crest Fundgrove collects several types of information to provide and improve our Services, including:

Exchange Connection Data: When you connect your cryptocurrency exchange accounts, we collect read-only trading data including portfolio holdings, transaction history, and account balances. We never collect exchange API keys with trading or withdrawal permissions.

Minimal Data Collection: Crest Fundgrove follows the principle of data minimization, collecting only what is necessary to provide our Services. You can use many features without providing personal information.

3. How We Use Your Information

Crest Fundgrove uses your information for legitimate business purposes, including:

• Service Provision: To provide, operate, and maintain our AI-powered crypto analytics platform
• Account Management: To create and manage your Crest Fundgrove account and authenticate your identity
• Communication: To send service updates, security alerts, and support messages
• Analytics: To analyze platform usage and improve our Services and user experience
• Security: To detect, prevent, and address technical issues, fraud, or abuse
• Compliance: To comply with legal obligations and regulatory requirements
• Research & Development: To develop new features and improve existing Services (using aggregated, anonymized data)

4. Legal Basis for Processing

Under Canadian law, we process your personal information based on the following legal grounds:

• Consent: When you explicitly consent to specific processing activities
• Contractual Necessity: When processing is necessary to perform our contractual obligations to you
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided they don't override your rights and interests
• Legal Obligation: When processing is necessary to comply with applicable laws and regulations

You can withdraw consent at any time by contacting our Privacy Officer or adjusting your account settings, subject to legal or contractual restrictions.

5. Data Sharing and Disclosure

Crest Fundgrove does not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our platform (e.g., hosting, analytics, email delivery) under strict confidentiality agreements
• Legal Requirements: When required by law, regulation, or legal process, or to protect our rights, property, or safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate privacy protections
• With Your Consent: When you explicitly consent to specific sharing arrangements

International Transfers: While we primarily store data on Canadian servers, some service providers may process data in other countries. In such cases, we ensure appropriate safeguards are in place, such as standard contractual clauses or Privacy Shield certification where applicable.

6. Data Security

Crest Fundgrove implements comprehensive security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict role-based access controls and authentication mechanisms
• Security Audits: Regular security assessments and penetration testing
• Infrastructure Security: Enterprise-grade hosting with multiple layers of security
• Employee Training: Security and privacy training for all team members
• Incident Response: Comprehensive incident response and breach notification procedures

7. Your Privacy Rights

As a user of Crest Fundgrove Services, you have specific rights regarding your personal information under Canadian privacy laws:

To exercise these rights, contact our Privacy Officer using the information provided in Section 10. We will respond to legitimate requests within 30 days, as required by law.

8. Cookies and Tracking Technologies

Crest Fundgrove uses cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for basic platform functionality and security
• Analytics Cookies: Help us understand how users interact with our platform
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used for advertising and campaign tracking (with consent)

You can control cookies through your browser settings. However, disabling certain cookies may affect platform functionality. Our Cookie Policy provides detailed information about specific cookies we use.

9. Data Retention

Crest Fundgrove retains personal information only as long as necessary for the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Our retention periods consider:

• The purpose for which we collected the information
• Legal, regulatory, and contractual requirements
• Statutory limitation periods
• Business needs and historical analysis
• User requests for deletion

When information is no longer needed, we securely delete or anonymize it. Backup copies may be retained for additional periods as part of our disaster recovery procedures.

10. Children's Privacy

Crest Fundgrove Services are not intended for individuals under the age of majority in their jurisdiction (typically 18 or 19 in Canada). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take appropriate steps to remove such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email or platform notification for significant changes
• Provide advance notice when required by law

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.