Privacy Policy

Working draft · last updated July 2026 · pending legal review — questions to your advisory firm or the platform operator.

Who we are

KYP Manager is a compliance recordkeeping and client-portal platform operated for Canadian advisory firms. Each firm (your advisor's business) is the custodian of its clients' information; KYP Manager processes that information on the firm's behalf to provide the service.

What we collect

Account information (name, email, sign-in and security records); information your advisory firm or you enter into the platform (client profiles, accounts and holdings, plans, goals, questionnaires, insurance details, messages); documents uploaded to the secure vault; and technical logs needed to run and secure the service (access and audit records, device/session metadata).

How it is used

Solely to provide the platform to your firm: displaying your records to you and your advisor, generating reports, sending service notifications, and meeting the firm's regulatory recordkeeping obligations. Personal information is never sold and never used for third-party advertising.

Where it lives and how it is protected

Data is hosted in Canada. Sensitive fields are encrypted at the application layer in addition to encryption at rest and in transit; every firm's data is isolated by row-level security; all users — staff and clients — sign in with multi-factor authentication; and every create, edit and export is recorded in an immutable audit log. See the Security overview for detail.

Service providers

We use a small number of infrastructure subprocessors (Canadian-region hosting and database, transactional email delivery, and — for document parsing initiated by your firm — an AI text-extraction provider). Subprocessors are bound by contract to use data only to provide their service.

Retention and deletion

Records are retained while your firm maintains its account and for the retention period Canadian securities regulation requires of the firm. Firms can delete client records from the platform; associated vault documents are removed with them.

Your rights

Under PIPEDA and applicable provincial privacy law you may request access to, correction of, or (subject to the firm's regulatory retention duties) deletion of your personal information — contact your advisory firm, who can act on the records they custody.