Privacy Policy

Last updated: 11 December 2025

This Privacy Policy explains how Xentis (“we”, “us”, “our”), a trade name of NIKIPAY LIMITED, collects, uses, discloses, stores, and protects personal information when you visit xentis.io or interact with our services.

We are committed to handling personal information in a transparent and responsible manner and in accordance with applicable privacy and data protection laws.

1. Who we are

Xentis is a trade name of NIKIPAY LIMITED, a company incorporated in British Columbia, Canada, and registered as a Money Services Business (MSB) with FINTRAC.

This Privacy Policy applies to our website and to personal information processed in connection with onboarding, compliance, service delivery, security, and customer support.

2. Scope

This Policy applies to:

Visitors to our website

Individuals who contact us

Clients and authorised representatives whose information we process for onboarding, compliance, and service-related purposes

It does not apply to third-party websites that may be linked from our site.

3. Personal information we collect

Depending on how you interact with us, we may collect the following types of personal information:

Contact information – name, email address, phone number, address

Business information – company name, role/title, corporate details

Identity and verification information – government ID details and verification outcomes, where required

Beneficial ownership / control information – where applicable

Transaction and account information – as relevant to our services

Technical and security data – IP address, device identifiers, browser type, logs, session data, and digital/device footprint

Communications – emails, support requests, and related correspondence

We only collect information that is relevant and necessary for the purposes described in this Policy.

4. How we collect information

We may collect personal information:

Directly from you (forms, onboarding processes, emails, website interactions)

From your business or authorised representatives

From service providers used for verification, screening, analytics, and security

From public or regulatory sources where permitted or required by law (e.g., sanctions lists)

5. Why we use personal information

We use personal information to:

Provide and operate our website and services

Conduct client onboarding and identity verification (KYC/KYB)

Meet AML/CTF and other legal or regulatory obligations

Prevent fraud and detect suspicious activity

Protect our systems and users

Communicate with you about onboarding, enquiries, and support

Maintain records and audit trails as required by law

Improve website performance and user experience (analytics and cookies, where used)

We do not use personal information for purposes that are incompatible with those listed above.

6. Legal basis and consent (Canada)

Where required, we obtain your consent to collect, use, and disclose personal information. We may also process personal information as permitted or required by law, including to:

Comply with regulatory obligations

Prevent fraud and protect security

Maintain records required by applicable legislation

You may withdraw consent where applicable, subject to legal or contractual restrictions.

7. How we disclose personal information

We may disclose personal information to:

Regulators and authorities where required by law (including reporting obligations)

Financial institutions and payment partners for processing and risk controls

Identity verification, screening, and compliance service providers

Cloud hosting, infrastructure, and security providers

Professional advisers (legal, compliance, audit)

We do not sell personal information.

All disclosures are made on a need-to-know basis and subject to confidentiality and security obligations.

8. Cross-border transfers

Your personal information may be processed or stored outside Canada by us or our service providers. When this occurs, it may be subject to the laws of the jurisdiction in which it is processed.