Privacy Protocol

Effective: March 5, 2026Jurisdiction: Vancouver, BC

01. Principle of Data Sovereignty

CWAXX Systems Inc. ("The Company") operates on the fundamental principle that digital identity is the sole property of the individual ("The User"). The Platform collects strictly necessary telemetry required to authenticate, secure, and render the User's digital presence. The Company explicitly rejects the commercialization of User data. Personal information is never brokered, sold, or leased to third-party advertising aggregators under any circumstances.

02. Telemetry & Data Ingestion

To maintain the structural integrity of the infrastructure, The Platform ingests specific operational data points. This includes, but is not limited to: cryptographic password hashes, IP addresses for security auditing and concurrent locking protocols, device fingerprints for fraud prevention, and interaction metrics to generate aggregate performance analytics. All ingested sensitive data is encrypted at rest using AES-256 standards and in transit via highly secure TLS 1.3 protocols.

03. Sub-Processors & Infrastructure Partners

The Company utilizes heavily vetted, world-class infrastructure partners for database hosting, transactional email dispatch, edge computing capabilities, and secure payment gateways. Data routed to these sub-processors is strictly anonymized where mathematically possible. Financial data (such as credit card numbers) is routed directly through authorized payment processors and is never stored on The Company's internal servers. The User may request a manifest of infrastructure partners via official channels.

04. Data Retention & The Right to Erasure

In alignment with international data rights, The User possesses the absolute right to the permanent deletion of their digital dossier. The initiation of an account termination protocol results in the immediate, automated shedding of cryptographic keys and the irreversible purging of database records associated with The User's identity. The Company does not maintain archival "ghost profiles" post-termination.

05. Compliance Frameworks

Data governance frameworks deployed by The Company are strictly aligned with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Personal Information Protection Act (PIPA BC), and the General Data Protection Regulation (GDPR). While The Platform serves a global user base, all legal and administrative disputes regarding data privacy fall under the exclusive jurisdiction of the courts of British Columbia, Canada.