DMaple Privacy Policy

Effective Date: July 20, 2026
Company: DMaple Inc.

1. Introduction

This Privacy Policy explains how DMaple Inc. ("DMaple", "we", "our" or "us") collects, uses, discloses, retains and protects personal information when you visit our website, create or use a DMaple account, use DMaple applications or interfaces, communicate with us, or use any DMaple services, tools, features or related technology (together, the "Services").

DMaple is a Canadian fintech platform that supports stablecoin and payment workflows, including non-custodial wallet-based activity, account and business onboarding, verification, transaction tracking, payment records, reporting, invoice or payment-request flows, and supported partner-based payment or settlement routes.

Some Services require us to collect information for account setup, identity or business verification, fraud prevention, legal and regulatory compliance, transaction processing, customer support, and platform security.

This Privacy Policy should be read together with our Terms of Service and any other public notices that apply to a specific Service.

2. Key Points

We do not sell your personal information.

DMaple is designed to operate on a non-custodial basis. We do not ask for, store or control your private keys, seed phrases or recovery phrases.

We collect only the information that is reasonably needed to provide the Services, verify users and businesses, support transactions, protect the platform, comply with applicable obligations, and respond to user requests.

Certain information is required for specific Services. If required information is not provided, we may be unable to create or maintain an account, complete verification, support a transaction, provide product access, or continue providing the relevant Service.

Public blockchain records are generally outside DMaple's control and may be visible to others, permanent, and not capable of being deleted or changed by DMaple.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by law.

3. Personal Information We Collect

Personal information means information about an identifiable individual. Depending on how you interact with DMaple, we may collect the categories of personal information described below.

Account and onboarding information. This may include your name, email address, phone number, username, authentication information such as password hashes or login tokens, account identifiers, Terms of Service and Privacy Policy acceptance records, email confirmation status, client type, onboarding status, verification status, product-access status, communication preferences, and information you provide through forms, onboarding flows, support requests or other communications.

Identity and individual verification information. Where required for a Service, we may collect information such as legal name, date of birth, address, citizenship or residency information, government-issued identification information, identity document images, selfies or liveness checks, occupation, purpose of account or transaction, expected activity, source of funds, source of wealth, third-party declaration information, and other information needed for identity verification, fraud prevention, compliance checks or legal obligations.

Business, KYB and representative information. For business users, we may collect business name, registration number, business address, industry, website, tax or corporate information, ownership and control information, director, officer, authorized user, signatory and beneficial owner information, business documents, business purpose, expected volumes, expected countries or corridors, source of funds, source of wealth and related verification information.

Wallet, blockchain and transaction information. We may collect public wallet addresses, transaction hashes, blockchain network information, token or digital asset type, transaction timestamps, transaction amounts, payment status, fees, memo or reference information, transaction path information, wallet-screening results, public blockchain data, and information linked to a wallet or transaction when it is relevant to the Services.

Payment, invoice, payout and recipient information. We may collect information related to invoices, payment requests, payment instructions, deposits or funding flows, payout routes, bank or payout account details, sender, recipient or beneficiary information, payer or payee details, payment source information, settlement status, service credits, refunds, fees, records, receipts and reports.

Compliance-related information. For applicable Services or transactions, we may collect, verify, retain, transmit, receive or request sender, originator, recipient, beneficiary, counterparty, wallet, transaction purpose, source of funds or related information to meet legal, partner or platform-safety requirements, including Travel Rule-related requirements where applicable.

Device, usage and technical information. We may collect IP address, browser type, device type, operating system, language settings, pages visited, time of access, log data, session identifiers, diagnostic data, security events and other technical information used to provide, secure and improve the Services.

Website, cookie and analytics information. We may collect information through cookies, pixels, logs and similar technologies to operate the website, remember preferences, understand website usage, improve performance, support security and measure communications. Non-essential cookies are used where permitted by applicable law and user preferences.

Communications and support information. We may collect the content of messages, emails, chat messages, support tickets, call notes, feedback, survey responses, marketing preferences and other information you provide when communicating with us.

Information from third parties and public sources. We may receive information from identity verification providers, business verification providers, sanctions or screening providers, blockchain analytics providers, payment, banking, payout or settlement partners, fraud-prevention providers, business registries, public databases, public blockchain networks, professional advisors, partners, or other users where relevant to the Services.

We do not require or request your private keys, seed phrases, recovery phrases or wallet passwords. You should never provide these to DMaple, our team, support channels or any third party claiming to represent DMaple.

4. How We Use Personal Information

We use personal information for the following purposes:

- to provide, operate, maintain, personalize and improve the Services;

- to create, manage, authenticate, secure and support accounts;

- to process onboarding, email confirmation, client-type selection, identity verification, business verification, account review, product access and ongoing account support;

- to support non-custodial wallet-related features, payment workflows, invoice or payment-request flows, transaction records, reporting, receipts and accounting-ready exports;

- to process supported transactions, payment routes, payout routes, service credits, fees, refunds and related records;

- to conduct verification, fraud prevention, sanctions screening, wallet screening, transaction review, Travel Rule-related checks, counterparty or beneficiary checks, enhanced review where applicable, and other compliance and platform-safety checks;

- to comply with legal, regulatory, sanctions, tax, accounting, recordkeeping, reporting, audit, law enforcement, court order, government request or partner requirements;

- to detect, prevent, investigate or respond to fraud, misuse, unauthorized access, prohibited activity, security incidents, suspicious activity, errors, service abuse or violations of our Terms of Service;

- to communicate with you about account activity, service notices, security alerts, policy changes, support requests, onboarding, verification, transactions, product updates and administrative matters;

- to provide marketing communications where permitted by law and your communication preferences;

- to analyze website and product usage, measure performance, develop new features, improve user experience and prepare aggregated or de-identified insights;

- to protect the rights, safety, property and integrity of DMaple, our users, partners and the public; and

- to support business transactions, corporate governance, legal claims, dispute resolution, insurance, professional advice, financing, audit or corporate restructuring.

5. Consent and Required Information

Where required by applicable law, we obtain consent for the collection, use or disclosure of personal information. Consent may be express or implied depending on the circumstances, the sensitivity of the information and applicable law.

Certain information is necessary to provide the Services, verify identity or business status, meet legal obligations, process supported routes, maintain security, prevent fraud, or comply with partner requirements. If you do not provide required information, DMaple may be unable to create or maintain an account, complete verification, support a transaction, process a payout, provide a feature or continue providing the Services.

If you provide personal information about another person, such as a director, officer, beneficial owner, authorized user, signatory, payer, recipient or beneficiary, you are responsible for ensuring that you have the authority to provide that information and that the individual is informed as required by applicable law.

You may withdraw consent where processing is based on consent, subject to legal, contractual, technical and operational limitations. Withdrawal of consent does not affect processing that occurred before withdrawal and may affect your ability to use some or all Services.

We may collect, use or disclose personal information without consent where permitted or required by law, including for fraud prevention, investigations, legal compliance, security incidents, suspicious activity, sanctions compliance, emergencies, business transactions or responses to valid legal or regulatory requests.

6. How We Share Personal Information

We do not sell personal information. We may share personal information only where reasonably necessary for the purposes described in this Privacy Policy or where permitted or required by law.

Service providers. We may share information with service providers that support hosting, cloud infrastructure, data storage, cybersecurity, analytics, email, communications, customer support, authentication, identity verification, business verification, document review, fraud prevention, blockchain analytics, sanctions screening, payment processing, payout support, accounting, legal, audit or other operational services.

Payment, banking, payout and settlement partners. Where a Service uses a supported payment route, payout route, fiat or digital asset flow, liquidity provider, settlement partner, banking provider or other third-party partner, we may share the information necessary to evaluate, process, complete, monitor, reverse, refund, report or support the relevant transaction or Service.

Compliance and legal disclosures. We may disclose information to regulators, law enforcement, government authorities, courts, dispute-resolution bodies, professional advisors, financial institutions, partner compliance teams or other parties where we believe disclosure is required or permitted by law, necessary to comply with applicable obligations, or appropriate to protect rights, safety, security or platform integrity.

Business transfers. If DMaple is involved in a merger, acquisition, financing, restructuring, sale of assets, insolvency or similar business transaction, personal information may be disclosed or transferred as part of that transaction, subject to appropriate confidentiality and privacy protections.

Aggregated or de-identified information. We may use or share aggregated, anonymized or de-identified information that does not reasonably identify an individual for analytics, research, reporting, product development, security, compliance, business or marketing purposes.

Third-party services. Some Services may link to or rely on third-party websites, wallets, blockchain networks, applications, payment providers, identity providers, payout providers or partner services. Those third parties may process your information under their own privacy policies and terms. DMaple does not control their privacy practices.

7. Non-Custodial Wallets and Blockchain Data

The DMaple Platform is designed to operate on a non-custodial basis. DMaple does not custody client digital assets on behalf of users, hold users' private keys, seed phrases or recovery phrases, or maintain client deposit accounts or stored-value balances.

When you use a non-custodial wallet, you control the wallet and are responsible for safeguarding private keys, seed phrases, recovery phrases, devices, passwords and wallet credentials. DMaple cannot restore a private key, seed phrase or recovery phrase that it does not hold.

Blockchain transactions may be public, permanent and irreversible. Public wallet addresses, transaction hashes and related blockchain activity may be visible to others and may be linked to you if combined with other information. DMaple does not control public blockchain networks and generally cannot delete, alter, reverse or hide information recorded on a public blockchain.

DMaple may collect or process public wallet addresses, blockchain transaction metadata and related information where needed to provide the Services, maintain records, perform wallet or transaction checks, comply with legal obligations, support investigations, prevent fraud or manage risk.

8. Cookies and Similar Technologies

We use cookies and similar technologies to operate our website, remember preferences, secure sessions, understand website traffic, improve performance, support analytics, and measure communications.

Some cookies are necessary for website functionality or security. Other cookies, such as analytics or marketing cookies, may be optional depending on applicable law and your preferences.

You can manage cookies through your browser settings and, where available, through our cookie banner or Cookie Policy. Disabling cookies may affect certain website features or Services.

9. International Transfers

DMaple is based in Canada, but we may use service providers, infrastructure, partners or professional advisors located in Canada, the United States, the European Economic Area or other jurisdictions. Your personal information may be processed, stored or accessed in jurisdictions outside your province, territory or country of residence.

When personal information is transferred across borders, it may be subject to the laws and lawful access requests of the jurisdictions where it is processed or stored. We use contractual, technical and organizational safeguards designed to protect personal information in a manner consistent with applicable privacy laws.

10. Data Retention

We retain personal information only for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal and regulatory obligations, maintain security, prevent fraud, resolve disputes, enforce agreements, support audits and maintain appropriate business records.

Certain verification, transaction, payment, accounting, tax, sanctions, Travel Rule, reporting or recordkeeping information may be retained for at least five years or for a longer period where required or permitted by applicable law, partner requirements, legal holds, audits, investigations or disputes.

When personal information is no longer required, we will delete, anonymize, de-identify or securely dispose of it in accordance with our retention and record disposal practices, unless retention is required or permitted by law.

Deletion requests do not extend to public blockchain records or information held independently by third parties. DMaple cannot delete or alter data recorded on public blockchain networks that are outside DMaple's control.

11. Security

We use reasonable physical, technical and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, theft or destruction. These safeguards may include access controls, encryption, monitoring, secure infrastructure, vendor controls, personnel controls, incident response processes and data minimization practices.

No method of transmission, storage or processing is completely secure. You are responsible for maintaining the confidentiality of your account credentials, devices, wallets, private keys, seed phrases and recovery phrases, and for promptly notifying us of suspected unauthorized access or security incidents involving your DMaple account.

12. Privacy Incidents

If DMaple becomes aware of a privacy or security incident involving personal information, we will assess the incident and take steps that are appropriate in the circumstances. These steps may include containment, investigation, remediation, notification to affected individuals, notification to regulators, notification to partners, and maintenance of required records where required by applicable law.

13. Your Privacy Rights and Choices

Subject to applicable law and reasonable verification of your identity, you may have the right to request access to personal information we hold about you, request correction of inaccurate or incomplete information, withdraw consent where processing is based on consent, request deletion of certain personal information, ask questions about our privacy practices, or make a privacy complaint.

These rights may be subject to legal, technical, operational and contractual limitations. For example, DMaple may be required or permitted to retain certain information for fraud prevention, tax, accounting, reporting, recordkeeping, dispute-resolution, legal or compliance purposes. DMaple also cannot delete or alter public blockchain records outside its control.

To exercise privacy rights or ask a privacy-related question, contact us at legal@dmaple.com. We may request information to verify your identity before responding to certain requests. We will respond within the time required by applicable law.

You may unsubscribe from marketing emails by using the unsubscribe mechanism in the message or by contacting us. You may still receive administrative, transactional, security, legal or service-related messages where permitted by law.

14. Children and Minors

The Services are not intended for children or minors. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take reasonable steps to delete it, subject to legal and technical limitations.

15. Third-Party Links and Services

Our website or Services may contain links to third-party websites, applications, wallets, blockchain networks, payment providers, identity providers, payout providers, analytics providers, social media platforms or other services. This Privacy Policy does not apply to the privacy practices of those third parties. You should review their privacy policies and terms before using them.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, technology, compliance practices or business operations. When we update this Privacy Policy, we will update the effective date or last updated date. Where required by law, we will take reasonable steps to notify users of material changes.

Your continued use of the Services after an updated Privacy Policy becomes effective means that you acknowledge the updated Privacy Policy, subject to any consent requirements under applicable law.

17. Contact Us

For questions, requests or complaints about this Privacy Policy or our handling of personal information, please contact:

DMaple Inc.
Attention: Privacy & Compliance Contact
Email: legal@dmaple.com
Website: dmaple.com

We will review privacy-related requests and complaints and respond in accordance with applicable law.