Privacy Policy

We are committed to protecting your privacy. We collect only the personal information needed to operate your financial OS, use it for clear purposes, and never sell it. This policy applies to all users in Canada and the United States.

To provide and improve the Service, process payments, secure your account, generate AI insights, comply with legal obligations, and communicate with you. Where required, we obtain your consent before using data for these purposes.

We share data with sub-processors that support infrastructure, payments (e.g., Stripe), analytics, and AI services under contractual safeguards. A current sub-processor list is maintained and available on request. We disclose data when required by law.

We retain personal information only as long as needed for the purposes described or to meet legal, tax, and audit obligations. Tax records are retained per jurisdictional requirements; identity records are kept for the life of the account. After retention, data is securely disposed of.

We protect your data with TLS 1.3+ in transit and AES-256 at rest, field-level encryption for sensitive PII, multi-factor and step-up authentication, and row-level isolation. See our Security Policy for details.

We use essential cookies for functionality and, with your consent, optional analytics and marketing cookies. You can manage preferences at any time. Marketing emails comply with CASL (Canada) and CAN-SPAM (US) and include unsubscribe links.

We may update this policy and notify material changes. With appropriate safeguards, data may be transferred and processed outside your jurisdiction. For privacy questions or to submit a data-subject request, contact us via the Contact page.