Legal & Compliance Protocol

Privacy Policy

Effective Date: Jan 20, 2026Entity: CardanFX Studios Ltd.Jurisdiction: Ontario, CA

1.1 Introduction

CardanFX Studios Ltd. ("CardanFX," "we," "us," or "our") is committed to protecting the privacy and sovereignty of our users' data. Operating out of Ontario, Canada, we adhere to the Personal Information Protection and Electronic Documents Act (PIPEDA).

This policy outlines how we collect, process, and secure data within our ecosystem, including our Training Hub, Spatial Web environments (WebXR), and Smart Asset protocols.

1.2 Data Collection Architecture

We collect data in three tiers based on your interaction with the CardanFX Protocol Hub:

Tier A: Identity Data (Standard)

When you enroll in the Technical Lab, purchase a service, or subscribe to our intelligence streams, we collect:

  • Legal Name and Corporate Affiliation.
  • Contact Information (Email, Phone).
  • Billing Information (Processed via Stripe/PayPal; we do not store raw credit card tokens).

Tier B: Spatial & Telemetry Data (WebXR)

When engaging with our Spatial Brand Hubs or "Serious Games" simulations, we may process:

  • Device Fingerprinting: GPU model, browser version, and VR/AR hardware specifications to optimize asset rendering (LODs).
  • Interaction Telemetry: Gaze duration, movement vectors, and interaction heatmaps. This data is aggregated and anonymized to improve our "Attention Engineering" algorithms. We do not store biometric retina scans or facial geometry.

Tier C: Blockchain & Asset Data (Smart Assets)

If you connect a digital wallet (e.g., MetaMask, Ledger) to interacting with our Smart Asset Protocol:

  • We collect your Public Wallet Address.
  • We track on-chain interactions with CardanFX smart contracts (Token-Gating, Asset Evolution).

1.3 Usage of Data (The Purpose)

We utilize your data to:

  • Service Delivery: Authenticate your access to the Technical Lab, HDAs, and private spatial showrooms.
  • Protocol Optimization: Use anonymized telemetry to refine our Houdini-to-Unreal pipelines and server-side rendering loads.
  • AI Training & Analysis:
    • Internal: We use aggregate workflow data to train our internal "Pipeline Agents."
    • User Content: We do not use your proprietary uploaded project files or IP to train public generative models without your explicit, written consent.
  • Communications: Send critical updates regarding software versions (e.g., Houdini 21 updates) or protocol changes, in compliance with CASL (Canada’s Anti-Spam Legislation).

1.4 Data Sovereignty & Storage

  • Location: Primary user data is stored on secure, encrypted servers located in Canada and the United States (via AWS/Azure).
  • Retention: We retain data only as long as necessary to fulfill the service or as required by Ontario tax and legal statutes.
  • Security: We employ enterprise-grade encryption (AES-256) and Zero-Trust architecture. However, no transmission over the Spatial Web is 100% secure.

1.5 Third-Party Disclosures

We do not sell your data. We share data only with verified infrastructure partners essential to our operation:

  • Payment Processors: Stripe / PayPal.
  • Cloud Compute: AWS / Google Cloud (for PDG/TOPs remote cooking).
  • Analytics: Google Analytics 4 (anonymized).

1.6 User Rights

Under PIPEDA and international standards, you have the right to:

  • Access: Request a copy of the personal data we hold.
  • Rectification: Correct inaccurate data.
  • Erasure (Right to be Forgotten): Request deletion of your account, subject to legal retention requirements.
  • Withdraw Consent: Unsubscribe from marketing communications at any time.

Privacy Officer Contact:

Email: privacy@cardanfx.com

CardanFX Studios Ltd., Ontario, Canada.