The service is not legal according to US law. I don't know where they're based or what the laws are there, but I wouldn't make any bets either way. They may well have their .com domain seized by the US Gov't some day.
That means they're less likely to have their servers and data seized by the US Gov't (assuming it's all hosted in Canada, and not an EC2-US instance), but the .com address is a US asset that can still be seized.
