Fonte is non-custodial. We collect what the service needs and no more. Here is the full list.
Your vault address. The public address of the smart contract you own. It is visible to anyone on the Base blockchain, and we use it to show your portfolio and run the strategy you chose.
Your owner address. The wallet or passkey signer that controls your vault, so we know which vault is yours.
Your email address, if you fund by Interac e-Transfer. See section 2. If you never use that feature, we have no email for you unless you write to us.
Funding records, if you fund by Interac e-Transfer. Also section 2.
Aggregate usage data. Page views and feature use, counted in aggregate through Umami, an analytics tool that sets no cookies and does not follow you across sites.
2 Funding by Interac e-Transfer
You can add Canadian dollars to your vault by Interac e-Transfer. That rail is operated by Paytrie, a registered Canadian money services business. The dollars go from your bank to Paytrie, and Paytrie sends USDC to your vault. Fonte never receives the money and never holds it.
To use it, Paytrie needs to verify who you are. Here is exactly what happens to your information.
What you give us, and what we do with it
Email address. We keep it. It identifies your Paytrie account, and Paytrie sends its sign-in codes to it.
Profile details. Your name, date of birth, phone number, home address, occupation, and whether you are a politically exposed person. You enter these in the Fonte app and we pass them to Paytrie over an encrypted connection. We do not keep a copy. They pass through our systems and are not written to storage.
Identity documents. Your ID and a liveness check are handled by Sumsub, Paytrie's verification provider, on a page they host. No identity document ever reaches Fonte. We never see it, receive it, or store it.
What we keep
Your Paytrie customer id, so we can link your vault to your Paytrie account.
Your verification status, and the names of any profile fields still outstanding (only the names, never the values).
A record of each purchase: the Canadian dollar amount, the USDC amount, the fee, the Interac reference, its status and timing, and the blockchain transaction that delivered it.
Identifiers of the status notifications Paytrie sends us, so we never process one twice.
You must be both the person who verifies with Paytrie and the owner of the vault. To prevent anyone linking their identity to a vault they do not own, we ask you to confirm ownership with your passkey or wallet before we link the two. That signature authorises nothing else and moves no funds.
3 What we do not collect
We never hold your funds or private keys.
Your assets stay in a vault only you control. Your private key, and your passkey, never reach us. We cannot access, move, or recover them.
We do not store identity documents. Sumsub holds them, under Paytrie's agreement with you.
We do not store your name, date of birth, phone number, home address, occupation, or politically exposed status. We transmit them to Paytrie and do not retain them.
We do not buy data about you, and we do not build advertising profiles.
4 How we use it
To show your portfolio, balances, yield, and fees accurately.
To link your vault to your Paytrie account, show you the status of a purchase, and match what Paytrie reports against what actually arrives on the blockchain.
To answer your support requests.
To keep the service secure and prevent abuse, including the ownership check in section 2.
To meet the legal obligations that apply to us.
We do not make automated decisions about you beyond the portfolio management you asked for.
5 Who we share it with
We do not sell your data, and we do not rent or trade it. We share it only with the providers below, only the minimum each one needs, and only to run the service.
Paytrie (Canada), for Interac funding. Receives your email, your profile details, and your vault address as the destination for USDC. Paytrie is the money services business for the transaction and has its own privacy policy and legal retention duties.
Sumsub, Paytrie's identity verification provider. Receives your documents directly from you. Fonte is not in that path.
Cloudflare, which hosts the app and stores the records described in section 2.
Umami, for aggregate analytics without cookies.
Authorities, where the law requires it.
Transactions on the Base blockchain are public by nature. That is outside our control.
6 Cookies and analytics
During Interac funding we set one essential cookie. It holds your Paytrie session so the flow works, expires after one hour, and is never used for tracking. Nothing else in the app relies on cookies.
Analytics use Umami, which counts visits in aggregate, sets no cookies, and does not identify you.
7 How long we keep it
Purchase records are your financial records. We keep them for six years after the year of the purchase, the period Canadian tax rules expect such records to be kept, so they are there when you need them.
Your email, Paytrie customer id, and verification status are kept while your vault is active, and removed on request.
Profile details and identity documents are never kept by us, so there is nothing to delete on our side. Paytrie and Sumsub keep what the law requires them to keep.
Deletion is on request today: email us and we remove your funding records, unless a legal duty requires us to keep a specific one, in which case we will tell you which one and why.
8 Your rights
Fonte is based in Canada and follows PIPEDA. You can ask us for a copy of what we hold about you, ask us to correct it or delete it, and object to certain uses. Email us and we will respond within a reasonable time, at no charge for routine requests.
For information Paytrie or Sumsub hold, including your verification documents, the request goes to Paytrie. We will help you make it.
9 Data security
Everything moves over encrypted connections. Funding records are stored with Cloudflare and are reachable only by authorised Fonte operators. Because Fonte is non-custodial, the most sensitive things, your funds and your keys, never sit with us at all.
No system is perfectly secure. We limit what we hold so that a failure would expose as little as possible.
10 Contact
Questions, or want to exercise a right? Email hello@fonte.finance or use our contact page. A real person replies, usually within one business day.