LoginTC Privacy Policy
1. INTRODUCTION
Cyphercor Inc. (“Cyphercor“, “we“, “us“) has created this Privacy Policy (“Privacy Policy“) to describe how we collect, use, disclose, and otherwise process personal information through LoginTC (the “Platform“), including through our provision of, and your use of, the LoginTC services (as defined in the LoginTC Terms of Service). The Platform enables businesses and other organizations that we partner with (“Business Partners“) to provide multi-factor authentication services to their users or clients (“End Users“).
By visiting our website located at www.logintc.com (the “Website“) or by accessing or using the Platform or Services in any manner, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, Cyphercor relies on an appropriate lawful basis for the collection, use, and disclosure of personal information, including performance of a contract, compliance with legal obligations, legitimate interests, or consent, as applicable.
2. WHAT DOES THIS PRIVACY POLICY COVER?
This Privacy Policy applies to our collection, use, disclosure, and other processing of information about identifiable individuals or information that can reasonably be used to identify an individual (“Personal Information“). Personal Information may be collected about Business Partners and their representatives, End Users, prospective customers (“Prospective Clients“), and visitors to the Website.
This Privacy Policy does not apply to the privacy practices of companies that we do not own or control. The Platform and Services are intended for use by businesses and other organizations. Business Partners are responsible for maintaining their own privacy policies governing the collection, use, and disclosure of Personal Information relating to their End Users. Business Partners are also responsible for ensuring that they have obtained all necessary authorizations, notices, consents, and lawful bases under applicable data protection laws for any Personal Information made available to Cyphercor for processing in accordance with this Privacy Policy.
3. COLLECTION AND USE OF PERSONAL INFORMATION AND OTHER DATA
3.1 Account Information
In order to use the Services, End Users, Business Partners, and Prospective Clients may be required to register for and maintain a LoginTC account to access the Platform (“Account“). When an Account is created, Cyphercor may collect the following information (“Account Information“):
- For End Users, name, email address, username, or other identifiers configured by the applicable Business Partner;
- For Business Partners, name, job title, business email address, business phone number, business address, and employer name; and
- For Prospective Clients, name, job title, business email address, business phone number, business address, and employer name.
Cyphercor uses Account Information to:
- Authenticate access to Accounts and provide access to the Services;
- Provide, operate, maintain, and improve the Services;
- Send technical notices, updates, security alerts, and administrative messages;
- Provide and deliver requested Services and features;
- Process and complete transactions and send related information, including confirmations and invoices;
- Respond to comments, questions, and requests and provide customer service and support;
- Communicate about services, features, surveys, newsletters, offers, promotions, and events, where permitted by law;
- Investigate and prevent fraudulent transactions, unauthorized access to the Services, and other unlawful activities;
- Personalize and improve the Services and user experience;
- Monitor and analyze trends, usage, and activities in connection with the Services;
- Link or combine information with information received from third parties, where permitted by law;
- Enable communication, collaboration, or information sharing where such functionality is configured within the Services; and
- For other purposes where notice is provided and, where required by law, consent is obtained.
Cyphercor processes payments using Stripe, a third-party payment processing service. Cyphercor does not store full payment card information. Transactions processed by Stripe are subject to Stripe’s applicable terms of service and privacy policy.
3.2 Business Partners and End Users
Cyphercor makes the Platform and Services available to Business Partners, who may store or process data relating to their End Users when providing authentication or access services. Such data may include Personal Information. Where Cyphercor processes Personal Information on behalf of a Business Partner, Cyphercor acts as a data processor and processes such information only in accordance with the documented instructions of the Business Partner, who acts as the data controller.
Cyphercor offers a data processing addendum governing processor obligations, confidentiality, security measures, and assistance with data subject requests.
3.3 Website Visitors
When you visit or browse the Website, Cyphercor may collect information about your device and browser, network connection, IP address, and information relating to cookies or similar technologies. This information is used to operate the Website, diagnose technical issues, support analytics, and perform quality control. Cyphercor may also collect Personal Information submitted through contact forms or messaging features for the purpose of responding to inquiries or requests.
3.4 Cookies
Cyphercor uses cookies and similar technologies in connection with the Website and Services to support authentication, authorization, core functionality, and sales and marketing analytics.
Cookies are small data files that may include unique identifiers and are stored on your device. Session cookies containing encrypted information may be used to uniquely identify users while logged in and are required for certain features of the Services.
You may configure your browser to notify you when cookies are sent or to refuse cookies. If cookies are disabled, some features of the Website or Services may not function properly. Where required by law, Cyphercor provides choices regarding non-essential cookies through a cookie notice or preference mechanism.
4. STORAGE LOCATION AND TRANSFER OF PERSONAL INFORMATION
Cyphercor processes and stores Personal Information on servers located in the United States or Canada and may transfer Personal Information to third-party service providers as described in this Privacy Policy.
Where Personal Information is transferred outside of Canada, including to the United States, such information may be subject to access by law enforcement or governmental authorities under applicable laws. Where required, Cyphercor implements appropriate safeguards for cross-border transfers, including contractual protections.
5. DISCLOSURE OF PERSONAL INFORMATION WITH THIRD PARTIES
5.1 Service Providers and Business Partners
Cyphercor may engage third-party service providers to perform services on its behalf, including hosting, infrastructure, maintenance, analytics, and payment processing. Personal Information may be disclosed where necessary for such services, subject to contractual obligations to protect and limit the use of Personal Information. Cyphercor currently uses Amazon Web Services located in the United States.
5.2 Business Transfers
If Cyphercor is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of its assets, Personal Information may be transferred as part of that transaction, subject to applicable law.
5.3 With Your Consent
Cyphercor may use or disclose Personal Information in ways not described in this Privacy Policy where notice is provided and, where required by law, consent is obtained.
5.4 As Required by Law
Cyphercor may disclose Personal Information where it believes in good faith that such disclosure is necessary to comply with applicable law, legal process, or governmental request; to enforce agreements; or to protect the rights, property, or safety of Cyphercor, Business Partners, End Users, or others.
6. RETENTION
Cyphercor retains Personal Information for as long as necessary to fulfill the purposes for which it was collected, to provide the Services, and to comply with legal, regulatory, or contractual requirements. Where Cyphercor acts as a processor, retention is governed by Business Partner instructions. All retained Personal Information remains subject to this Privacy Policy.
7. ACCESS, CORRECTION AND ACCURACY
Subject to applicable law, individuals have the right to request access to Personal Information held by Cyphercor and to request correction of inaccurate or incomplete information. Requests are subject to verification of identity and applicable legal limitations.
8. RESIDENTS OF THE EUROPEAN ECONOMIC AREA, UNITED KINGDOM, AND SWITZERLAND
Cyphercor processes Personal Information to perform contracts, pursue legitimate business interests, comply with legal obligations, or based on consent where required under applicable data protection laws, including the General Data Protection Regulation.
Individuals located in the EEA, the United Kingdom, or Switzerland may have additional rights, including the right to request access, rectification, erasure, restriction, data portability, or to object to certain processing. Complaints may be made to the relevant supervisory authority.
9. CHANGES TO THIS PRIVACY POLICY
Cyphercor may update this Privacy Policy from time to time. Material changes will be communicated through the Website, Platform, or other appropriate means. Continued use of the Website, Platform, or Services constitutes acceptance of the updated Privacy Policy.
10. ADDITIONAL INFORMATION
Questions regarding this Privacy Policy or Cyphercor’s privacy practices should be directed to our Privacy Officer:
Privacy Officer
Cyphercor Inc.
LL10 – 4043 Carling Avenue
Kanata, Ontario K2K 2A4
Canada
privacy@cyphercor.com
Last Updated: February 4, 2026