Information We Collect

When you use our platform, we collect different types of information depending on how you interact with our services. Here's what that looks like in practice:

Account Information

When you sign up, we need basic details to create your account. This includes your name, email address, phone number, and the password you create. If you're using our premium features, we'll also collect payment information through our secure processors.

Investment Data

To provide monitoring services, you'll connect your investment accounts. We collect portfolio holdings, transaction history, and account balances. This data stays encrypted and is only used to generate your personalized insights and tracking.

Usage Information

Like most online services, we automatically collect technical data when you use our platform:

• IP address and device information
• Browser type and operating system
• Pages you visit and features you use
• Time spent on different sections
• Error logs and performance data

How We Use Your Information

We're pretty straightforward about why we need your data. Each piece serves a specific purpose:

We also use aggregated, anonymized data to understand how people use our platform. This helps us spot trends and improve features. But this data can't be traced back to individual users.

Data Sharing and Third Parties

We don't sell your personal information. Period. But we do work with certain service providers who help us run the platform:

Financial Data Aggregators

To connect your investment accounts, we use secure third-party aggregators like Plaid. These services retrieve your financial data using bank-level encryption. They operate under strict security protocols and their own privacy policies.

Cloud Infrastructure Providers

Your data is stored on servers maintained by trusted cloud providers with data centers in Canada. These providers follow industry-standard security practices and are bound by data processing agreements.

Analytics Services

We use analytics tools to understand platform usage. These services receive anonymized data about user interactions but don't have access to your personal or financial information.

Your Rights Under Canadian Law

PIPEDA gives you specific rights regarding your personal information. Here's what you can do:

Access Your Data

You can request a copy of all personal information we hold about you. We'll provide this within 30 days, in a commonly used electronic format. There's no fee for your first request in a calendar year.

Correction Rights

If you spot inaccuracies in your data, you can ask us to correct them. We'll update our records and notify any third parties who received the incorrect information.

Withdrawal of Consent

You can withdraw consent for certain data uses at any time. Keep in mind, this might affect your ability to use some features. For example, withdrawing consent for investment data collection would prevent us from providing monitoring services.

Account Deletion

You can request full account deletion through your settings or by contacting us. We'll delete your data within 90 days, except for information we're legally required to retain for tax or regulatory purposes.

Security Measures

Protecting your financial data isn't optional for us. Here's how we approach security:

• All data transmission uses TLS 1.3 encryption
• Financial information is encrypted at rest using AES-256
• Multi-factor authentication available for all accounts
• Regular security audits by independent third parties
• Automated intrusion detection and monitoring systems
• Employee access strictly limited on need-to-know basis
• Annual security training for all staff members

Despite these measures, no online service can guarantee absolute security. We recommend using strong, unique passwords and enabling two-factor authentication on your account.

Data Retention Periods

We keep different types of data for different periods based on legal requirements and business needs:

Active Account Data

While your account is active, we maintain all necessary data to provide services. This includes your investment holdings, transaction history, and account settings.

After Account Closure

Following account deletion, most personal data is removed within 90 days. However, Canadian tax law requires us to retain certain financial records for seven years. This includes transaction histories and payment records.

Marketing Communications

If you've opted into marketing emails, we keep your preferences until you unsubscribe. After unsubscribing, your email stays on our suppression list to prevent accidental future contact.

Cookies and Tracking

Our platform uses cookies to function properly and improve your experience. You can control cookie settings through your browser, though some features might not work if you disable certain cookies.

Essential Cookies

These keep you logged in and remember your preferences during your session. They're necessary for the platform to work and can't be disabled.

Analytics Cookies

These help us understand how people use the platform. The data is aggregated and doesn't identify individual users. You can opt out of these through your account settings.

International Data Transfers

Your data is primarily stored on Canadian servers. However, some of our service providers operate globally, which means your information might occasionally be processed outside Canada. When this happens, we ensure these providers maintain equivalent privacy protections through contractual agreements.

Children's Privacy

Our services aren't intended for anyone under 18. We don't knowingly collect information from minors. If we discover we've accidentally collected data from someone under 18, we'll delete it immediately.

Changes to This Policy

We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you via email and display a notice on the platform. The "Last Updated" date at the top shows when the most recent changes took effect.

Continuing to use our services after changes become effective means you accept the updated policy. If you disagree with changes, you can close your account before they take effect.

Contact Information for Privacy Matters

Questions about your data? Want to exercise your rights? We're here to help. Our privacy team typically responds within 48 hours on business days.