Privacy Policy

Account information: When you sign up, we collect your email address and the display name you choose.

Financial data you enter: CanVest stores the financial information you input, including account balances, income sources, expenses, debts, goals, and transactions. This data is used solely to provide the app’s features to you.

Usage data: We may collect information about how you use the app (pages visited, features used) to improve the product. This data is anonymized and aggregated.

We do not collect or store banking credentials. CanVest does not connect to your bank and does not have access to your actual bank accounts.

• To operate and provide the CanVest service, including all financial planning features
• To process subscription payments through Stripe (we never see your full card number)
• To send transactional emails (account confirmation, password reset)
• To improve and debug the application based on anonymized usage patterns
• To comply with legal obligations under Canadian law (PIPEDA)

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Your data is stored in a PostgreSQL database managed by Supabase, hosted on AWS infrastructure in Canada and the United States. We use row-level security (RLS) policies to ensure your data is only accessible to your account — no other user can query your records.

All data is encrypted in transit using TLS (HTTPS) and encrypted at rest. Authentication is handled by Supabase Auth with industry-standard JWT tokens.

While we take security seriously, no system is 100% secure. We recommend using a strong, unique password and enabling any available two-factor authentication.

CanVest uses the following third-party services to operate:

• Supabase — database, authentication, and storage. Data may be processed in the US.
• Stripe — payment processing for Pro subscriptions. We do not store card numbers. Stripe is PCI-DSS compliant.
• Anthropic (Claude AI) — powers the AI assistant feature. Conversations with the AI may be processed by Anthropic’s servers. The AI receives only the financial context you’ve entered in CanVest, not your full identity.
• Vercel — application hosting and edge delivery.

Each of these providers has their own privacy policies and security practices.

CanVest uses only essential cookies and browser storage (localStorage) required to maintain your login session. We do not use advertising cookies, cross-site tracking, or third-party analytics that track you across websites.

You can clear cookies at any time through your browser settings. Doing so will log you out of the app.

As a Canadian user, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA):

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may ask us to correct inaccurate information.
• Deletion: You may request deletion of your account and all associated data at any time by emailing hello@canvest.ca. We will process deletion requests within 30 days.
• Withdrawal of consent: You may stop using CanVest and request account deletion at any time.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., billing records may be retained for tax purposes for up to 7 years as required by the Income Tax Act).

CanVest is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email (to the address on your account) or by a prominent notice in the app at least 14 days before the change takes effect. Continued use of CanVest after changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: