Privacy Policy.
What personal information we collect, why we collect it, how we use and share it, and the rights you hold over your data.
ETHERANOX INC. Last updated: 04.06.2026
1. Introduction
This Privacy Policy explains how ETHERANOX INC. (“Etheranox”, “Company”, “we”, “our”, or “us”) collects, uses, discloses, stores, retains, transfers, and otherwise processes personal information when individuals access or use our website, platform, applications, customer-support channels, and virtual currency and related financial services (collectively, the “Services”).
Etheranox is committed to protecting personal information and handling it in a lawful, fair, secure, and transparent manner. This Policy is intended to describe our personal information practices in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”), applicable provincial privacy laws, and applicable anti-money laundering, counter-terrorist financing, sanctions, fraud-prevention, and recordkeeping obligations relevant to money services businesses and virtual currency activities.
If Etheranox offers Services to individuals in the European Economic Area, European Union, or other jurisdictions with additional data-protection requirements, or monitors the behaviour of individuals in those jurisdictions, additional privacy rights and requirements may apply. Where applicable, Etheranox will process personal information in accordance with those requirements.
By accessing or using the Services, you acknowledge that your personal information may be processed in accordance with this Privacy Policy. Where consent is required by applicable law, we will request consent before collecting, using, or disclosing personal information for the relevant purpose.
By accessing our website, creating a user profile, applying for our services, submitting information, placing or completing an exchange transaction, providing an external wallet address, using our platform, or otherwise using our services, you confirm that you have read, understood, and agree to be bound by these Terms.
These Terms should be read together with our Privacy Policy, Cookie Policy, AML/ATF Compliance Statement, Geoblocking and
Restricted Jurisdictions Policy, Risk Disclosure, Fee Schedule, any applicable service schedule, onboarding documentation,
service terms, or any other terms or policies made available to you.
2. Personal Information We Collect
Depending on your interaction with the Services, Etheranox may collect personal information directly from you, automatically through technical systems, or from authorized third-party service providers and compliance partners.
2.1 Information Provided by You
When creating a user profile, completing verification procedures, submitting transactions, using the Services, or communicating with Etheranox, you may provide:
- full legal name;
- date of birth;
- nationality, citizenship, country of residence, and tax residency information where required;
- email address and telephone number;
- government-issued identification documents and information contained in those documents;
- selfie photographs, liveness checks, biometric templates or facial-verification data where required for identity verification;
- occupation, employer, business activity, and, where required as part of enhanced due diligence, transaction review, sanctions or fraud review, regulatory reporting, or other risk-based compliance controls, source of funds or source of wealth information;
- bank account ownership information and payment details;
- external wallet addresses, transaction identifiers, and other virtual currency transaction identifiers;
- exchange instructions, fiat payment information, transaction history, blockchain transaction identifiers, external wallet address information, and related financial information;
- communications with customer support and compliance teams;
- information submitted in forms, questionnaires, applications, or due-diligence requests;
- any additional information voluntarily submitted through the Services.
2.2 Information Collected Automatically
When you access or use the Services, Etheranox may automatically collect technical and usage-related information, including:
- IP address and approximate geolocation derived from the IP address;
- browser type and version;
- device type, device identifiers, and operating system details;
- login timestamps, session activity, authentication status, and security events;
- website navigation data, pages visited, links clicked, referral source, and usage patterns;
- cookies, local storage, session tokens, pixels, log files, analytics tags, and similar technologies;
- technical diagnostics, error reports, and performance information;
- fraud-prevention, cybersecurity, device-risk, and anomaly-detection signals.
This information assists Etheranox in maintaining platform security, fraud-prevention controls, operational stability, service optimization, and compliance monitoring.
2.3 Information Obtained from Third Parties
Etheranox may receive personal information, verification results, or compliance-related information from third-party service providers, financial partners, public sources, and databases. These may include providers offering:
- identity verification and document authentication services;
- liveness detection, biometric verification, and fraud-prevention services;
- sanctions, politically exposed person (PEP), adverse media, and watchlist screening;
- blockchain analytics, wallet screening, and transaction monitoring;
- payment processing, banking, and financial infrastructure services;
- cybersecurity, device-risk, geolocation, and risk-management tools;
- corporate registries, public records, and business-information databases;
- customer support, cloud hosting, analytics, and operational support services.
Such providers may supply identity verification results, risk indicators, blockchain exposure assessments, transaction monitoring alerts, ownership information, fraud signals, or other information necessary for operating the Services and meeting legal or regulatory obligations.
3. Purposes for Processing Personal Information
Etheranox processes personal information only for identified, reasonable, and lawful business, compliance, operational, security, and legal purposes connected with the Services.
3.1 Providing and Administering the Services
We may process personal information to create and maintain user profiles, authenticate users, provide access to the Services, facilitate fiat-to-virtual-currency exchange transactions, process fiat payments, deliver purchased virtual currency to customer-provided external wallet addresses, provide customer support, communicate service notices, maintain records, and operate our platform.
3.2 AML, KYC, Sanctions, and Regulatory Compliance
As a Canadian money services business and provider of virtual currency-related services, Etheranox may process personal information to comply with applicable legal and regulatory obligations, including:
- customer identification and verification requirements;
- know-your-client (KYC) and customer due diligence controls;
- beneficial ownership and control-person verification for entity clients;
- anti-money laundering and counter-terrorist financing obligations;
- sanctions screening and listed-person or listed-property controls;
- fraud-prevention and user profile security measures;
- suspicious activity detection and transaction monitoring;
- large transaction reporting, recordkeeping, and audit-trail requirements;
- responses to lawful requests from regulators, law enforcement, courts, or competent authorities;
- other legal, regulatory, supervisory, or compliance obligations.
Compliance-related processing may be mandatory and may continue after user profile closure or termination of the business relationship where required or permitted by law.
3.3 Blockchain Analytics and Financial Crime Prevention
Etheranox may use blockchain analytics, wallet screening, transaction monitoring systems, fraud-detection tools, and compliance case-management systems to assess transaction risk and identify suspicious, prohibited, or higher-risk activity.
This may include analysis of potential exposure to sanctioned persons, entities, jurisdictions, darknet markets, ransomware, stolen funds, scams, mixers, anonymization tools, obfuscation services, high-risk wallet clusters, unusual transaction patterns, or other financial crime indicators. This processing supports security, regulatory compliance, transaction integrity, and protection of Etheranox, its clients, and third parties.
3.4 Security, Fraud Prevention, and Platform Integrity
We may process personal information to detect unauthorized access attempts, prevent unauthorized access to user profiles, investigate fraud, monitor suspicious activity, enforce internal security procedures, investigate incidents or disputes, maintain technical stability and performance, protect users and third parties, and prevent misuse of the Services.
3.5 Analytics, Service Improvement, and Business Operations
We may process personal information to understand how the Services are used, improve platform performance, identify technical issues, develop or test functionality, conduct business analytics, maintain operational continuity, and support internal administration. Where required by applicable law, we will rely on consent for non-essential analytics or similar activities.
3.6 Consent and Other Lawful Grounds
Where required by applicable law, Etheranox may rely on consent for specific processing activities, including certain cookies, optional communications, or marketing communications. Consent may be withdrawn at any time, subject to legal, regulatory, contractual, operational, or compliance-related limitations. Etheranox may also process personal information where necessary to provide the Services, comply with law, protect legitimate business interests, prevent fraud, or protect the security and integrity of the platform.
4. Disclosure and Sharing of Personal Information
Etheranox may share personal information with selected third parties where reasonably necessary to operate the Services, meet compliance obligations, manage risk, protect security, or support legitimate business purposes. Etheranox does not sell or rent personal information to third parties.
4.1 Service Providers and Infrastructure Partners
Personal information may be shared with third-party providers that support Etheranox operations, including identity verification and KYC service providers, blockchain analytics and transaction monitoring tools, sanctions and watchlist screening providers, payment processors, banking or financial infrastructure providers, cloud hosting and data storage providers, cybersecurity providers, fraud-prevention systems, analytics tools, operational support providers, and customer-support infrastructure providers. These providers are expected to process personal information under contractual confidentiality, security, and data-protection obligations.
4.2 Regulatory, Supervisory, and Law Enforcement Authorities
Etheranox may disclose personal information where required or permitted by applicable law, regulatory obligation, court order, governmental request, production order, subpoena, lawful investigative process, or supervisory request. This may include disclosures connected with AML/CTF obligations, sanctions compliance, suspicious activity reporting, fraud investigations, regulatory examinations, or legal proceedings. Where legally permitted, such disclosures may occur without prior notice to the individual concerned.
4.3 Business Transfers and Corporate Transactions
If Etheranox undergoes a merger, restructuring, financing, acquisition, sale, transfer of assets, insolvency process, or similar corporate transaction, personal information may be disclosed or transferred as part of that transaction, subject to appropriate confidentiality and security protections.
4.4 Professional Advisers and Legal Protection
Etheranox may disclose personal information to legal counsel, auditors, insurers, consultants, and professional advisers where necessary to obtain advice, manage risk, protect legal rights, investigate claims, enforce agreements, or comply with applicable obligations.
5. International Transfers of Personal Information
Certain service providers, infrastructure partners, and technology systems used by Etheranox may operate internationally. As a result, personal information may be transferred to, stored in, or processed in jurisdictions outside your province, territory, or country of residence.
Where required by applicable law, Etheranox seeks to implement reasonable contractual, technical, and organizational safeguards designed to protect personal information during international transfers. However, information processed in another jurisdiction may be subject to the laws of that jurisdiction, including lawful access by courts, law enforcement, regulators, or governmental authorities.
6. Data Retention
Etheranox may use cookies, local storage, session tokens, pixels, log files, device identifiers, analytics tags, and similar technologies to maintain authenticated sessions, authenticate users, improve functionality, monitor performance, support fraud detection and security measures, analyze traffic and usage patterns, and enhance the user experience.
Some cookies and similar technologies are necessary for the operation and security of the Services. Others may be used for analytics or operational optimization. Where required by applicable law, non-essential cookies will be used only after obtaining appropriate consent. Additional information is available in the Company’s Cookie Policy.
7. Cookies and Similar Technologies
Etheranox retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, or as otherwise required or permitted by law. Retention periods may vary depending on the type of information, the nature of the relationship, applicable legal requirements, compliance obligations, operational needs, dispute-resolution requirements, and security considerations.
Etheranox may retain information to provide the Services, comply with AML/KYC, sanctions, regulatory, tax, accounting, reporting, and recordkeeping obligations, prevent fraud, monitor security, resolve disputes, respond to legal claims or investigations, and protect legitimate business interests. Certain AML/KYC-related records may be retained for a minimum period required under applicable law, including after user profile closure or termination of the business relationship.
When personal information is no longer required, Etheranox seeks to securely delete, anonymize, archive, or otherwise dispose of such information in accordance with applicable requirements and internal procedures.
8. Data Security
Etheranox uses reasonable technical, organizational, and administrative measures designed to protect personal information against unauthorized access, misuse, loss, alteration, disclosure, or destruction.
Security measures may include access controls, encryption where appropriate, secure hosting environments, monitoring and alerting systems, internal access restrictions, authentication controls, cybersecurity monitoring, logging and audit trails, staff confidentiality obligations, vendor due diligence, and incident-response procedures.
While Etheranox seeks to maintain appropriate safeguards, no online system, communication channel, or transmission method can be guaranteed to be completely secure. Users remain responsible for maintaining the confidentiality and security of their own devices, credentials, user profiles, external wallets, and communications.
9. Automated Processing, Risk Scoring, and Compliance Reviews
Etheranox may use automated or semi-automated tools to support identity verification, fraud prevention, sanctions screening, transaction monitoring, blockchain analytics, device-risk analysis, and compliance risk scoring. These tools may generate alerts, risk indicators, or recommendations that assist Etheranox in reviewing user profiles, transactions, external wallet addresses, or activity.
Where legally required, Etheranox will provide appropriate information about automated processing and will apply human review or other safeguards where decisions may materially affect a client. Compliance and risk decisions may be subject to legal, regulatory, security, fraud-prevention, and confidentiality limitations.
10. Your Privacy Rights and Choices
Depending on your jurisdiction and applicable law, you may have certain rights regarding your personal information. These rights may include:
- the right to request access to personal information held about you;
- the right to request correction of inaccurate or incomplete information;
- the right to withdraw consent where consent is the legal basis for processing;
- the right to request restriction of certain processing activities where applicable;
- the right to object to specific processing activities where applicable;
- the right to request portability of personal information where applicable;
- the right to request information about the use and disclosure of your personal information;
- the right to challenge Etheranox's compliance with applicable privacy obligations.
These rights are not absolute and may be subject to legal, regulatory, contractual, operational, security, fraud-prevention, or compliance-related limitations. For example, Etheranox may be required or permitted to retain certain information for AML/KYC, sanctions, recordkeeping, security, dispute-resolution, or legal purposes. Etheranox may request reasonable identity verification before responding to privacy-related requests.
11. Children and Minors
The Services are not intended for children or minors. Etheranox does not knowingly provide Services to individuals who are under the age required to use the Services under applicable law or Etheranox’s terms. If we become aware that we have collected personal information from a minor in circumstances where this is not permitted, we will take appropriate steps to address the issue.
12. Third-Party Services and External Links
The Services may contain links to third-party websites, payment providers, financial institutions, blockchain services, social media platforms, or external tools. Etheranox is not responsible for the privacy practices, security standards, or content of third-party services. Users are encouraged to review the privacy policies and terms of any third-party services independently.
13. Updates and Contact
Etheranox may amend or update this Privacy Policy from time to time to reflect legal or regulatory developments, operational changes, technical improvements, modifications to the Services, or evolving compliance requirements.
The “Last updated” date at the top of this Policy indicates when it was last revised. Updated versions will be published on the website and become effective upon publication unless otherwise stated. Continued use of the Services following publication constitutes acknowledgment of the updated Privacy Policy.
Last updated · June 2026
