Last updated: April 26, 2026
Cana ("we," "our," or "us") is an income routing platform operated by The Boricua Group LLC. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services at usecana.com and our mobile application.
Name, email address, phone number, date of birth, and financial account information you provide during account creation and onboarding. For business accounts, we also collect business name and entity type.
Bank account numbers, routing numbers, account balances, and transaction history collected through our banking partner Unit and account linking partner Plaid. We use this information solely to provide our income routing services.
Information about how you use our platform, including routing rules you create, goals you set, and transactions processed through our system.
To provide, operate, and maintain our income routing services
To process transactions and execute your routing rules
To verify your identity in compliance with Know Your Customer (KYC) regulations
To communicate with you about your account and transactions
To detect, prevent, and investigate fraud and security incidents
To comply with legal obligations including anti-money laundering (AML) requirements
To improve and personalize your experience with Cana
We do not sell your personal information to third parties. We share your information only in the following circumstances:
Unit (banking partner)
To create and manage your deposit accounts, process ACH transfers, and issue debit cards. Unit is FDIC-insured and subject to federal banking regulations.
Plaid (account linking)
To link and verify your external bank accounts. Plaid is subject to its own privacy policy and security standards.
Legal authorities
When required by law, court order, or government regulation, including for anti-money laundering compliance.
Service providers
Trusted third-party vendors who assist in operating our platform, bound by confidentiality agreements.
We implement industry-standard security measures to protect your information. All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. All data stored in our systems is encrypted at rest. Access to production systems is controlled through role-based access control (RBAC) and API token authentication. Financial data is processed through our banking partner Unit, which maintains its own comprehensive security program.
We retain your personal information for as long as your account is active or as needed to provide services. Financial transaction records are retained for a minimum of seven years as required by federal banking regulations. You may request deletion of your account and personal data by contacting us at privacy@usecana.com. Note that some information may be retained as required by law.
Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information (subject to legal retention requirements)
Opt out of marketing communications at any time
Request a copy of your data in a portable format
To exercise any of these rights, contact us at privacy@usecana.com.
We use essential cookies to maintain your session and authentication state. We do not use advertising cookies or sell your data to advertisers. You may disable cookies in your browser settings, but this may affect functionality.
Cana is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact us immediately at privacy@usecana.com.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our platform. Your continued use of Cana after changes become effective constitutes acceptance of the updated policy.
The Boricua Group LLC (operating as Cana)
Email: privacy@usecana.com
Website: usecana.com