Legal

Privacy Policy

Last updated: October 1, 2026

This Privacy Policy (this “Privacy Policy”) explains how Remitland Fintech Inc. (“RemitLand”, “we”, “us” or “our”) collects, uses, discloses, retains and protects Personal Information. For the purposes of this Privacy Policy, our services include our website at www.remitland.com, our mobile applications for iOS and Android, our retail branch, and our customer support channels (our “Services”).

We handle Personal Information in accordance with the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and other applicable privacy laws. We explain our information practices when you register for or use our Services and obtain consent where required. Some information is necessary to provide the Services or meet legal obligations. Other uses are optional, as explained in this Privacy Policy.

RemitLand is registered with FINTRAC as a Money Services Business (FINTRAC, Registration No. C100000615) and with the Bank of Canada as a payment service provider under the Retail Payment Activities Act (Reg. No. RPS0011612). Our Services are currently offered to residents of Canada, excluding Quebec.

Notice: You must be at least 18 years old, or the age of majority in your province or territory of residence, whichever is higher, to open a RemitLand Account. We do not knowingly permit individuals below that age to open an account. If you believe an individual below the applicable age has provided Personal Information to open an account, please contact compliance@remitland.com. We will investigate and delete information that we are not legally required to retain.

Any terms capitalized but not herein defined shall have the meaning ascribed to it in the RemitLand Customer Agreement.

1. Collection of Your Information

We may collect information about you when you visit the RemitLand Website or use our Services, including the following:

Registration and Use Information. When you register for or use our Services, we collect information needed to establish and manage your account, provide the Services, prevent fraud and meet applicable legal requirements. This includes your name, residential or business address, date of birth, occupation, telephone number, email address, login credentials, and identification and verification information. Where relevant, we also collect information about the source of funds and purpose of a transaction.

For business accounts, we collect the business’s legal name, registration documents, proof of address, and information about its directors, beneficial owners and authorized representatives, as required for verification and compliance purposes.

For the purposes of this Privacy Policy, Personal Information means personal information that can be associated with an identified or identifiable person. “Personal Information” can include name, address (including billing and shipping addresses), telephone number, email, other financial account information, account number, date of birth, and government-issued credentials (e.g., driver’s license number, and passport).

Identity Verification. We use Didit, a third-party verification provider, to assist with identity and business verification. Depending on the verification process, Didit collects and processes government-issued identification, selfies, liveness captures and information derived from those materials, including facial biometric information used for identity matching and fraud prevention. Camera access is used for the verification process.

We receive verification results and maintain the verification information and records needed for our compliance and fraud-prevention purposes. We provide information about the verification process and obtain any required consent before biometric information is collected. Information processed on our behalf remains subject to our privacy responsibilities. Further information about Didit’s practices is available through its privacy notices.

Transaction and Experience Information. When you use our Services, we collect information about your transactions, including amounts, currencies, exchange rates, fees, dates, payment and payout details, transaction status and transaction history. We also collect Device Information and Technical Usage Data as described below.

Device Information means technical information about the device used to access our Services, including device model, operating system, app version, browser information, IP address, device identifiers and language settings.

Geolocation Information. We do not access your device’s precise GPS location. We collect the residential or business address you provide. We and our service providers also receive IP addresses, which may indicate an approximate geographic region. We use this information for security and fraud prevention.

Technical Usage Data means information about how you interact with our Services, including pages viewed, features used, app performance, diagnostic information and crash logs. Information collected through cookies, analytics tools and similar technologies is further described in Section 4.C.
Biometric Login. If you enable Face ID, Touch ID or fingerprint login, your device performs the biometric authentication. RemitLand receives an authentication result and does not receive or store the biometric template used by your device. This optional login feature is separate from the identity verification described above.
Participant Information. When you use our Services or access the RemitLand Website, we collect Personal Information you provide us about the other participants associated with the transaction.
- Send or Request Money. We collect information about the other participants in your transactions, including names, addresses, telephone numbers and bank or payout details, as applicable. We use this information to process payments, perform required screening, prevent fraud, resolve transaction issues and maintain required records. When you provide another person’s information, you must be authorized to provide it for these purposes.
Optional Features. If you choose an optional feature that requires additional Personal Information, we explain the information required and its purposes before collecting it and obtain any consent required by law. Declining an optional feature does not prevent you from using unrelated Services.
Information About You From Third-Party Sources. We receive identity and business verification information from Didit and payment-related information from Apaylo and other financial institutions or payout partners involved in your transactions.
Invoices and AI Processing on the Website. When you upload an invoice through www.remitland.com, we store it as part of the relevant transaction records. Invoices may contain names, addresses, account numbers, payment amounts and information about other individuals. We use OpenAI to extract information from uploaded invoices to assist with completing payment details. The invoice content is sent to OpenAI for that purpose. You review the extracted information before submitting the payment. This invoice-reading feature is available on our website and is not available in our mobile apps. We explain the processing and obtain any required consent before transmitting the invoice.
Support Communications. We collect information you provide when contacting our team, using Report a Problem, communicating with a support chatbot or submitting a support ticket, including the contents of your messages and information needed to investigate and resolve your request.

2. Use and Retention of Your Information

We use Personal Information to:

Open, verify and administer accounts.
Process transfers, currency conversions, deposits, withdrawals and refunds.
Comply with applicable anti-money laundering, sanctions, payment-services and other legal requirements, including verification, monitoring, reporting and record keeping.
Detect, prevent and investigate fraud, unauthorized access and other unlawful activity.
Provide customer support and resolve transaction issues.
Extract payment information from invoices uploaded through our website.
Send transaction confirmations, security alerts and other service communications.
Send marketing emails with the consent required by law.
Maintain and secure the Services, diagnose technical problems and conduct the analytics described in Section 4.C.

Where consent is required for a new purpose, we obtain it before using your information for that purpose.

We retain Personal Information only for as long as necessary for the identified purposes and applicable legal requirements. Certain identity-verification, business-verification, transaction and reporting records must be retained under anti-money laundering legislation for at least five years. The applicable period and its starting date depend on the record, and may run from record creation, report submission, the last business transaction or account closure.

Other requirements, including applicable tax and payment-services record-keeping obligations, may require longer retention of particular records. We may also retain information where reasonably necessary and permitted by law to address fraud, resolve disputes or establish, exercise or defend legal claims. We restrict retained information to the applicable purposes.

Closing your account does not immediately remove records subject to these requirements. When information is no longer required, we securely delete it or irreversibly anonymize it. Account deletion is described in Section 4.A. You may contact compliance@remitland.com for information about the retention requirements applicable to your records.

3. Sharing With Third Parties

We may share information we have collected about you in certain situations. We do not sell your Personal Information. We disclose Personal Information for the purposes described below, with your consent where required or where otherwise permitted or required by law. We limit disclosures to information appropriate for the applicable purpose.

A. By Law or to Protect Rights

We disclose Personal Information where required or permitted by applicable law, including to FINTRAC, the Bank of Canada, courts, regulators and law-enforcement authorities. This may include prescribed transaction reports and responses to legally authorized requests.

Where permitted by law, we may also disclose information to investigate or prevent fraud or unlawful activity, protect individuals or property, or establish, exercise or defend legal claims. We assess the legal basis for these disclosures. In some circumstances, the law restricts what we may tell you about a disclosure.

B. Third-Party Service Providers

We use service providers to perform functions on our behalf. We remain accountable for Personal Information processed on our behalf and use contractual or other measures to require appropriate safeguards, restrictions on use, and assistance with applicable retention, deletion and privacy requests.

Our providers include:

Didit: identity and business verification, including applicable document, selfie and liveness checks.
Apaylo: payment processing, payouts and refunds.
Amazon Web Services: cloud hosting and data storage.
OpenAI: extracting information from invoices uploaded through our website.
Google Tag Manager: managing website tags; the information collected depends on the tags deployed.
Firebase: app analytics, crash reporting and push notifications.
Airtable: receiving and managing account-deletion requests submitted through our deletion form.

We also disclose information to banks and payout partners where necessary to carry out your transactions. These organizations may process information under their own legal and regulatory obligations. We do not authorize them to use information received from us for their unrelated marketing.

C. With the Other Parties You Transact With

We may share information about you and your RemitLand Account with the other parties involved in processing your transactions. This includes other Users you are sending or receiving funds from, and vendors and their service providers. The information might include:

Personal Information and RemitLand Account Information necessary to facilitate the transaction; and
information to help other participant(s) resolve disputes and detect and prevent fraud.

Banks, payout partners, recipients and other transaction participants may receive information necessary to complete a transaction, address a dispute or prevent fraud. Where a recipient handles information independently rather than on our behalf, its privacy practices and legal obligations may also apply. This does not limit RemitLand’s responsibilities for its own handling of Personal Information or for processing performed on its behalf.

D. Marketing Communications

We do not disclose your Personal Information to third parties for their own marketing purposes. Providers acting on our behalf may process your contact information to deliver RemitLand marketing emails in accordance with your consent and communication preferences. You may unsubscribe as described in Section 4.D.

E. Other Third Parties

We may disclose Personal Information to lawyers, auditors, accountants and other professional advisers where necessary for their services and subject to applicable confidentiality obligations.

F. Sale or Bankruptcy

If we reorganize or sell all or a portion of our assets, undergo a merger, or are acquired by another entity, we may transfer your information to the successor entity. If we go out of business or enter bankruptcy, your information would be an asset transferred or acquired by a third party. You acknowledge that such transfers may occur and that the transferee may decline to honour commitments we made in this Privacy Policy. We are not responsible for the actions of third parties with whom you share personal or sensitive data, and we have no authority to manage or control third-party solicitations. If you no longer wish to receive correspondence, emails or other communications from third parties, you are responsible for contacting the third party directly.

G. International Transfers

Some service providers and financial or payout partners process or store Personal Information outside Canada, including in the United States. International payments may also require information to be sent to institutions in the destination country. Information processed abroad is subject to applicable foreign laws and may be accessible to courts, law-enforcement or national-security authorities in those jurisdictions.

For processing performed on our behalf, we use contractual or other measures to provide a comparable level of protection. You may contact compliance@remitland.com for information about our international processing arrangements.

4. Privacy Choices, Your Rights, and Do-Not-Track Signals

A. Deleting Your Account and Data

You may request deletion of your RemitLand Account and associated Personal Information:

In the app: open your Profile and select “Close my account”.
On the website: sign in, open your Profile and select “Close my account”.
Without signing in: submit our Account Deletion Request Form.

We may take reasonable steps to verify your identity before processing a request. Any remaining balance must be returned or withdrawn, and pending transactions must be completed or cancelled. If an unresolved transaction, balance or legal obligation prevents completion, we will explain the issue and the steps needed to resolve it.

We normally complete deletion within 60 days of receiving your request and confirm completion by email. If completion requires additional time because of an unresolved matter described above, we will explain the reason and expected timeframe.

Deletion removes your account and associated information that we are not required or otherwise lawfully entitled to retain for the limited purposes described in Section 2. It is not merely temporary deactivation. Retained records are protected, restricted to the applicable purposes, and deleted or irreversibly anonymized when retention is no longer necessary. We also address deletion with providers processing information on our behalf.

B. Right to Access Personal Information

You may request access to the Personal Information we hold about you, information about its use and disclosure, and correction of inaccurate or incomplete information by contacting compliance@remitland.com. We may verify your identity before responding.

We respond to access requests within 30 days, subject to extensions permitted by law. If an extension is necessary, we provide the required notice, reasons and information about your right to complain. Access may be limited by legal exceptions, including restrictions affecting certain regulatory reports. Where permitted, we explain any refusal and the available complaint process.

C. Cookies, Analytics and App Permissions

The website uses cookies and similar technologies for essential functions, preferences and analytics. Google Tag Manager manages website tags. Our mobile apps use Firebase Analytics to understand feature usage and Firebase Crashlytics to diagnose crashes.

We distinguish information necessary to operate and secure the Services from optional analytics. Where analytics involves optional collection or use of Personal Information, we provide the applicable consent choices and a way to withdraw consent without losing access to unrelated Services. Browser settings can also block or delete cookies, although some website functions may be affected.

We do not use app analytics to track you across other companies’ apps or websites for advertising.

Camera access is used during the identity-verification process described in Section 1. Push notifications are optional and provide transaction updates and security alerts. Biometric login is also optional. You may manage available permissions through your device settings.

D. Communication Settings

We send promotional emails with the consent required by Canada’s Anti-Spam Legislation. You may withdraw marketing consent by using the unsubscribe link in a promotional email, changing your available notification preferences, or emailing compliance@remitland.com. This option does not apply to communications primarily for the purpose of administering the Services, support, product warnings, updates, or other administrative and transactional notices.

E. Withdrawing Consent

You may withdraw consent to the collection, use or disclosure of your Personal Information, subject to applicable legal or contractual restrictions and reasonable notice, by contacting compliance@remitland.com.

Some processing, including necessary identity verification, payment processing and hosting, is integral to providing particular Services. If you withdraw consent to that processing, we may be unable to provide the affected Service or maintain your account. We will explain the consequences of your request.

You may decline optional processing without losing access to unrelated Services. Withdrawal does not prevent collection, use, disclosure or retention that is otherwise permitted or required by law.

We will respond with a confirmation within 30 days.

5. Updating and Safeguarding Your Information

You may update information through the account settings available in our app or website, or request a correction by emailing compliance@remitland.com. Certain changes may require verification. Where a historical transaction or compliance record must be preserved, we may record a correction without altering the original record.

Personal information which is used on an ongoing basis shall be as accurate, complete and up-to-date as necessary for the purposes for which it is to be used. We will not routinely update personal information which is not necessary to fulfill the purposes outlined in this Policy.

We use administrative, technical and physical safeguards appropriate to the sensitivity of Personal Information, including encryption in transit and at rest, access restrictions, multi-factor authentication for internal systems, staff training and physical security measures. No system can be guaranteed completely secure. Please protect your login credentials and notify us promptly if you suspect unauthorized access. This does not limit our responsibility to maintain appropriate safeguards.

Given that this information is collected over the internet we cannot guarantee the security of any information you transmit. Any voluntary transmission of information, including your Personal Information is at your own risk. We maintain appropriate safeguards for the protection of your information, but we are not responsible for the circumvention of any security measures on the platform.

Privacy Breaches. Where a breach involving Personal Information under our control creates a real risk of significant harm, we notify affected individuals and report to the Office of the Privacy Commissioner of Canada as required by law and as soon as feasible. We also notify other organizations or government institutions where required to reduce or mitigate harm. We maintain records of all breaches for at least 24 months after determining that they occurred.

6. Changes

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Last updated” date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of the RemitLand Website after the date such revised Privacy Policy is posted.

This Privacy Policy does not apply to third-parties in connection with your use of the Services, who may also collect and use data about you. We are not responsible for any of the data collected by any such third party.

Our Compliance Officer is accountable for how we handle Personal Information and responds to privacy questions and complaints. You may contact them at compliance@remitland.com.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

For general customer-service enquiries, contact admin@remitland.com.