Privacy Policy

XAU Signals ("we", "us", "our") operates xausignals.ca and all associated products including Agent Levz™, the XAU Security Agent, and the XAU Signals Skool community (collectively, the "Services"). This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights under Canadian privacy law.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

We collect the following categories of personal information across our products:

• Your trading account credentials or exchange API keys
• The contents of files on your machine
• Your wallet addresses or crypto balances
• Biometric data of any kind
• Information about anyone under 18 — our Services are for adults only

• Delivering the Services you purchased — signals, license keys, community access
• Sending transactional emails — purchase confirmations, license delivery, security alerts
• Providing customer support when you contact us
• Improving our products based on aggregated usage patterns
• Meeting our legal obligations under Canadian tax and business law
• Detecting and preventing fraud, abuse, or Terms of Service violations

We share your information only with the following service providers, and only to the extent necessary to deliver our Services:

We may also disclose your information where required by law, court order, or government authority in Canada.

Your personal information is stored on servers located in the United States (Render) and is subject to US data protection laws in addition to Canadian law. By using our Services, you consent to this cross-border transfer.

• Encrypted data transmission (HTTPS/TLS) for all web traffic
• Encrypted storage for license and account data on Render
• Stripe PCI DSS compliance for all payment data — we never store card numbers
• Access controls limiting who can access personal data

xausignals.ca uses cookies for session management, analytics, and functionality. We do not use third-party advertising cookies or share browsing data with ad networks.

• Session cookies — keeping you logged in during your visit
• Analytics — understanding which pages are visited (aggregated, not individual tracking)
• Functionality — remembering your preferences

You can disable cookies in your browser settings, though some site features may not function correctly without them.

Under PIPEDA and Alberta PIPA, you have the following rights:

• Access — Request a copy of the personal information we hold about you
• Correction — Ask us to correct inaccurate or incomplete information
• Withdrawal of consent — Withdraw consent to our use of your information (may affect your ability to use the Services)
• Deletion — Request deletion of your personal information, subject to legal retention obligations
• Complaint — File a complaint with the Office of the Privacy Commissioner of Canada or the OIPC Alberta

To exercise any of these rights, email xauaisignals@gmail.com. We will respond within 30 days as required by law.

• Active account data — retained for the duration of your account
• Transaction records — 7 years (Canadian tax law requirement)
• Support communications — 3 years
• Analytics data — 13 months rolling
• Deleted account data — purged within 90 days of deletion request, except where legal retention applies

Our Services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact xauaisignals@gmail.com and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and notify active customers by email if the changes are material.

For privacy-related questions, requests, or concerns: