Support agents see only the data needed per ticket. Full card numbers are tokenized in a PCI‑compliant vault. After account closure, personal data is anonymized or deleted within a defined period, except for anti‑money‑laundering records. This data hygiene reflects the privacy respect Canadian users anticipate from legitimate services.