Privacy policy

Your name, date of birth, contact details, an identity document, and the recipient information needed for payout. Canadian anti-money-laundering regulation requires these: without them we are not permitted to execute a transfer.

Never through the conversation. When verification is due, you receive a link to a secure page that belongs to Tageline, and you upload the document there. WhatsApp carries the link; it does not carry the document. That is what makes the next section true.

Your identity documents stay in Canada: they are uploaded to our secure page and kept here. Two things leave the country, and we would rather name them than promise otherwise. The conversation runs through Meta's infrastructure, which operates WhatsApp, along with what it carries: the transfer details and the recipient's name. Your email address runs through our sending provider, based in the United States, for the one-time code. That is the part we are working to bring back to Canada.

Meta, which operates WhatsApp and therefore carries our conversations. Resend, which delivers our transactional email from the United States. Neither one receives your identity documents, which go through our own secure page. We disclose them because they are unavoidable to running the service, not because the list is flattering.

The recipient is not our customer: their details reach us from you. We use them only to execute the payout and to keep the file Canadian law requires us to keep. They hold the same rights of access and correction over that data as you do, and they can write to us directly.

Five years after the last transaction, as Canadian regulation requires. After that, data is anonymised. A deletion request cannot shorten a legal retention obligation. We would rather write that down than let you discover it.

You can request access to your data, its correction, its deletion, and the withdrawal of your consent for any processing not required by law. Write to us; we answer in writing within 30 days, as Canadian law requires.

Write to us and we delete what we are allowed to delete. What we cannot delete is the transfer records: Canadian regulation requires us to keep them for five years, and a request cannot shorten that. We then tell you exactly what was deleted, what was kept, and until when. After that period the data is anonymised: it stops identifying you.

Requests about your personal information reach a single address, and a person answers them in writing. We do not handle them in the conversation: we want a record on both sides.

Contact address : conformite@tageline.com

Where a breach creates a real risk of significant harm, Canadian law requires us to report it to the Office of the Privacy Commissioner and to notify you. We tell you what happened, to which data, and what we are doing about it. We would rather write that down now, while it costs us nothing.

This site sets one cookie: the one that remembers the language you chose, so it does not ask again on every page. We count page views with Umami, which runs on our own infrastructure and sets no cookie, builds no profile and does not follow you from one site to another. No advertising cookie, no commercial tracker. There is nothing here to accept or refuse. If that changes, this page changes the same day and a banner appears.

Write to us first: most requests are settled there. If our answer does not satisfy you, the Office of the Privacy Commissioner of Canada receives complaints about personal information.