Privacy Policy

Last updated on 10th Feb 2026

This Privacy Policy describes how VMINT Corp, operating under the trading name Cosmonyx (“Cosmonyx”, “we”, “us”, or “our”), collects, uses, stores, and shares your personal information when you use our services (“Services”).

Cosmonyx is a B2B fintech platform operated by VMINT Corp, a corporation incorporated in Canada and registered as a Money Services Business (MSB) with the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC).

In addition, where applicable to certain services involving Virtual Assets, Cosmonyx operates as a Virtual Asset Service Provider (VASP) in accordance with applicable regulatory frameworks governing virtual asset activities.

When Does This Policy Apply?

This Privacy Policy applies when you:

• Visit our website at https://www.cosmonyx.co or any page that links to this Privacy Policy
• Register for or use our Services
• Communicate with us in connection with sales, marketing, onboarding, support, or events

Questions or Concerns?
If you do not agree with this Privacy Policy, please do not use our Services. For inquiries, contact us at info@cosmonyx.co.

What Information Do We Collect?

Information You Provide to Us
We collect personal and business information that you voluntarily provide, including when you express interest in our Services, complete onboarding, or contact us.

Personal & Business Information may include:

• Full name
• Email address
• Company name and website
• Company address and jurisdiction
• Contact details
• Role or title
• Government-issued identification (where required)

Sensitive Information
Where required by law or with your explicit consent, we may collect:

• Financial information
• Source of funds and wealth information
• Creditworthiness data
• Identity verification data
• Biometric data (where legally permitted)
• Politically Exposed Person (PEP) or sanctions-related data

You are responsible for ensuring that all information provided is accurate, complete, and up to date.

Information Collected from Other Sources

We may collect limited information from third-party sources such as:

• Public databases
• Regulatory or enforcement lists
• Identity verification and compliance providers
• AML/KYC screening providers
• Business intelligence providers
• Marketing partners

This information helps us verify identities, comply with regulatory obligations, and improve our Services.

How Do We Process Your Information?

We process personal information to:

• Provide, operate, and maintain our Services
• Perform onboarding, KYC, KYB, and AML checks
• Fulfil obligations as an MSB and VASP
• Monitor transactions for suspicious activity
• Communicate regarding your Account or Services
• Detect and prevent fraud or security threats
• Comply with legal and regulatory requirements
• Protect the rights and safety of our platform and users

Legal Bases for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent – where you provide explicit consent
• Contractual necessity – to perform or enter into an agreement
• Legitimate interests – to operate and improve our business
• Legal obligations – including compliance with:

  o The Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA)
   o FINTRAC regulations
   o Applicable Virtual Asset Service Provider (VASP) regulatory requirements
   o Other applicable Canadian and international compliance obligations

• Vital interests – to prevent serious harm or unlawful activity

When and With Whom Do We Share Your Information?

We may share your information with:

• Cloud hosting and infrastructure providers
• Identity verification and AML screening partners
• Payment processors and banking partners
• Professional advisors (legal, accounting, compliance)
• Regulatory authorities, FINTRAC, law enforcement, or courts
• Parties involved in mergers, acquisitions, or restructuring

All third parties are contractually required to protect your data and use it only for authorized purposes.

International Transfers

Due to the global nature of our Services, your information may be processed or stored outside your country of residence. Where required, we implement appropriate safeguards to ensure adequate protection of your personal data.

How Long Do We Retain Your Information?

We retain personal information only for as long as necessary to:

• Fulfil the purposes described in this Policy
• Meet regulatory obligations (including AML retention requirements)
• Resolve disputes or enforce agreements

Where required by law, certain records may be retained for extended periods. When data is no longer required, it is securely deleted or anonymized.

How Do We Protect Your Information?

We implement appropriate technical, administrative, and organizational security measures, including:

• Access controls
• Encryption
• Monitoring systems
• Secure data storage practices

However, no system is completely secure. You are encouraged to use secure devices and networks when accessing our Services.

Information About Minors

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that such data has been collected, we will delete it promptly.

If you believe a minor’s data has been collected, contact us at info@cosmonyx.co.

Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Request correction or updates
• Request deletion, subject to legal requirements
• Object to or restrict certain processing
• Withdraw consent at any time

To exercise your rights, contact us at info@cosmonyx.co. We will respond in accordance with applicable laws.

Do-Not-Track Signals

At present, we do not respond to browser Do-Not-Track (DNT) signals, as there is no consistent industry standard. We will update this policy if standards change.

Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect legal, regulatory, or operational changes. The updated version will be identified by the “Last updated” date. Continued use of our Services constitutes acceptance of the updated Policy.

How Can You Contact Us?

For questions or concerns about this Privacy Policy, contact us at:

VMINT Corp (trading as Cosmonyx)
1-300 Supertest Road
North York, Ontario
Canada, M3J 2M2
Email: info@cosmonyx.co

Accessing, Updating, or Deleting Your Data

To request access to, correction of, or deletion of your personal information, please email info@cosmonyx.co. Requests will be processed in accordance with applicable Canadian laws and regulatory requirements applicable to MSBs and VASPs.