Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how uSecure Escrow Solutions Inc., operating as DoBusiness.com (‘DoBusiness,’ ‘we,’ ‘us,’ or ‘our’), collects, uses, discloses, and protects personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation.

2. Information We Collect

DoBusiness collects personal information necessary to provide our services, including:

• Identity information (name, email, phone)
• Financial data (transaction records, payment instructions, account details processed through DoMoney)
• Identity verification data (government ID, biometric data processed through DoID)
• Document metadata (files stored through DoDocs)
• Device/usage data (IP address, browser type, access logs)

3. How We Use Information

We use personal information for:

• Processing payments and financial transactions
• Identity verification and fraud prevention
• Compliance with FINTRAC AML/CTF reporting obligations
• Service delivery and account management
• Security monitoring and incident response
• Service improvement

4. Data Sharing & Disclosure

DoBusiness may share personal information with:

• Canadian financial institutions (for payment processing through direct API integrations)
• Interac and Equifax (for identity verification through DoID)
• FINTRAC (for regulatory reporting as required by law)
• Service providers who assist in delivering our services and are bound by contractual confidentiality obligations

DoBusiness does not sell personal information. DoBusiness does not share data with American cloud service providers.

5. Data Residency

All personal information, financial data, transaction records, metadata, audit logs, and backups are stored exclusively in Canada on private Canadian cloud infrastructure. DoBusiness does not use American cloud service providers (AWS, Azure, GCP) for any data storage or processing.

6. Data Retention

DoBusiness retains personal information for the period necessary to fulfill the purposes for which it was collected, or as required by law. Financial transaction records are retained for a minimum of five (5) years in accordance with FINTRAC requirements. Identity verification records are retained as required by applicable AML/CTF legislation.

7. Data Security

DoBusiness maintains industry-leading security standards including:

• PCI-DSS Level 1 certification
• SOC 2 Type II audit compliance
• FIPS 140-3 encryption standards
• ISO 27001 information security management

All data is protected by encryption at rest and in transit, multi-factor authentication, role-based access controls, and continuous monitoring.

8. Breach Notification

In the event of a data breach involving personal information, DoBusiness will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA’s mandatory breach reporting provisions. Notification will occur as soon as feasible after the breach is identified, and in any event within the timelines prescribed by law.

9. Individual Rights

Under PIPEDA, you have the right to:

• Access your personal information held by DoBusiness
• Request correction of inaccurate personal information
• Withdraw consent to the collection or use of your personal information (subject to legal and contractual obligations)
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, contact our Privacy Officer at the address below. We will respond within thirty (30) days.

10. Contact Information

Privacy Officer
DoBusiness.com
Vaughan, Ontario, Canada
Email: privacy@dobusiness.com
Phone: 1-888-267-4107

11. Updates to This Policy

DoBusiness may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on our website. The effective date of the current version is noted at the top of this page.