Privacy Policy

My Finance Agent HQ is a private technology service operating from Canada. The Service is not affiliated with, endorsed by, or acting on behalf of the CRA, the Government of Canada, Revenu Québec, or any other tax authority.

Email: privacy@tryfinanceagenthq.com

The Service is currently offered to users in Canada, other than residents of Quebec. We may change the geographic availability of the Service from time to time.

We comply with applicable Canadian privacy legislation governing the collection, use, disclosure, retention, and protection of personal information, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) where applicable and other applicable provincial private-sector privacy legislation.

If we later make the Service available to Quebec residents, we will review and update our privacy practices and this Policy before doing so to address applicable Quebec privacy requirements.

Personal information generally means information about an identifiable individual. Because the Service may process tax and financial information, some of the information we handle may be sensitive. We use safeguards appropriate to the nature and sensitivity of the information.

We may collect information:

• directly from you when you create an account, enter information, upload documents, or contact us;
• automatically through your use of the Service, including technical logs, cookies, and similar technologies;
• from third-party authentication providers when you choose to authenticate through them;
• from service providers that support the operation of the Service, where permitted by law.

We collect, use, and disclose personal information only for purposes that are appropriate in the circumstances and that are identified to you as required by applicable law.

• create, authenticate, and administer your account;
• provide document upload, extraction, organization, and related features;
• provide tax education, explanations, estimates, and calculations requested by you;
• use automated technologies to analyze information you provide and generate responses or calculations;
• maintain, troubleshoot, secure, and improve the functionality and reliability of the Service;
• detect and prevent fraud, abuse, unauthorized access, and security incidents;
• respond to support requests and communicate about the Service;
• comply with applicable legal obligations and respond to lawful requests;
• establish, exercise, or defend legal claims and enforce our agreements;
• create aggregated or appropriately de-identified information for analytics, service performance, and product improvement where permitted by law.

The Service uses AI and automated technologies to support educational, extraction, and tax-estimation features. The AI may help summarize information, explain tax concepts, organize extracted information, identify potentially relevant tax considerations, and generate estimates or calculations based on information available to the Service.

We do not use uploaded documents to train a general-purpose AI model. We do not provide users’ uploaded documents to AI providers for their own model-training purposes.

For certain features, we may send limited data derived from your inputs to third-party AI service providers in order to provide the requested functionality. This may include information such as prompts, extracted text, selected fields, or calculations necessary to generate a response. We take steps to minimize the amount of information shared and to configure provider settings in a way that reduces unnecessary retention.

Because AI-generated information can contain errors, omissions, or inaccurate interpretations, users should review information and calculations carefully and consult a qualified accountant, tax professional, or other appropriate professional before relying on the information for a tax filing or material financial decision.

The Service is designed not to retain uploaded documents or personal information longer than reasonably necessary for the Service. However, information may be temporarily or account-associated stored where technically necessary to provide a requested feature, maintain your account, preserve your settings, troubleshoot the Service, maintain security, or comply with legal obligations.

Where the Service provides an option to save information, saved information may remain associated with your account until you delete it, request deletion, close your account, or until the applicable retention period expires. Account-associated retention does not mean that all information disappears immediately when you close your account. Certain limited information may need to be retained for legal, security, fraud-prevention, dispute-resolution, or other legitimate purposes.

Retention periods vary depending on the type of information, the purpose for which it was collected, and applicable legal requirements. We do not apply a blanket seven-year retention period to all user tax information.

9. Third-Party Service Providers

We may use third-party providers for infrastructure, hosting, authentication, security, analytics, customer support, AI processing, and other technical services necessary to operate the Service.

Service providers may process information on our behalf only to the extent reasonably necessary to provide their services and subject to appropriate contractual, confidentiality, and security measures.

We do not sell your personal information for monetary consideration and do not disclose personal information to third parties for their independent marketing purposes unless permitted by applicable law and you have been given any choice or consent required by law.

10. International Processing

Although My Finance Agent HQ operates from Canada, some third-party technology providers used by the Service may process information outside Canada. Where applicable, information processed outside Canada may be subject to the laws of the jurisdiction in which it is processed and may be accessible to courts, law-enforcement agencies, or regulators in that jurisdiction.

11. Consent

We seek meaningful consent for the collection, use, and disclosure of personal information where required by applicable law. Because tax and financial information can be sensitive, we may use express consent where appropriate.

Before or at the time information is collected, we aim to provide clear information about what is being collected, why it is being collected, how it will be used, and with whom it may be shared, in accordance with applicable law.

You may withdraw consent to certain uses or disclosures, subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect our ability to provide particular features.

12. Information About Other Individuals

If you upload or provide information about another individual, you represent that you are authorized to provide that information for the purposes described in this Policy or otherwise have a lawful basis to do so.

You should not upload another person’s personal information if doing so would violate applicable law or that person’s privacy rights.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle. Depending on the system, these may include:

• encryption of information in transit;
• encryption of stored information where appropriate;
• secure password hashing and authentication controls;
• role-based access controls and least-privilege access;
• logging and monitoring for security events;
• security testing and vulnerability management;
• confidentiality obligations and privacy/security training for personnel with access to personal information.

No method of storage or transmission is completely secure. We cannot guarantee absolute security, but we maintain safeguards designed to reduce the risk of unauthorized access, use, disclosure, alteration, or destruction.

14. Privacy and Security Breaches

We maintain procedures designed to prevent, identify, contain, investigate, and respond to privacy and security incidents.

If a breach involving personal information occurs, we will assess the incident and take the steps required by applicable law. Depending on the circumstances, this may include containing the incident, investigating its cause, maintaining required records, notifying the applicable privacy regulator, and notifying affected individuals or other parties where legally required.

15. Cookies and Similar Technologies

We may use cookies, local storage, pixels, software development kits (“SDKs”), and similar technologies to operate and secure the Service, remember preferences, and understand Service usage.

Examples may include:

• strictly necessary technologies for authentication, session management, security, and core functionality;
• functional technologies for preferences and settings;
• analytics technologies for service performance, reliability, and usage analysis where implemented.

We will not use marketing or advertising technologies involving personal information unless implemented in accordance with applicable law and any required consent or choice.

16. Product Improvement and De-Identification

We may use aggregated or appropriately de-identified information to understand service performance, diagnose problems, measure feature usage, and improve the Service, where permitted by law.

We will take reasonable steps to ensure information described as de-identified is not reasonably capable of identifying an individual and will not attempt to re-identify such information except where permitted by law and necessary for legitimate purposes.

17. Your Privacy Rights

Depending on applicable law, you may have the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete personal information;
• request information about how your information is collected, used, or disclosed;
• withdraw consent to certain uses or disclosures, subject to applicable limitations;
• request deletion or disposal where permitted by law;
• make a privacy complaint or challenge our compliance with applicable privacy law;
• request a copy or export of certain information where available and required by law.

18. Access, Correction, and Deletion Requests

To make a privacy request, contact our Privacy Officer at privacy@tryfinanceagenthq.com. We may need to verify your identity before providing access to personal information or making changes.

We will respond within the time required by applicable law. If we cannot provide access or delete information, we will explain the applicable reason to the extent permitted by law.

19. Privacy Complaints

If you have a concern about our privacy practices, please contact our Privacy Officer first. We will investigate and respond in accordance with our procedures and applicable law.

You may also have the right to complain to the privacy regulator with jurisdiction over your circumstances, including the Office of the Privacy Commissioner of Canada or an applicable provincial privacy commissioner.

20. Children’s Privacy

The Service is not directed to children. We do not knowingly collect personal information from children in circumstances where doing so is prohibited by law. If you believe a child has provided personal information improperly, contact our Privacy Officer.

21. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties that we do not control. You should review their privacy policies before providing personal information.

22. Business Transfers

If My Finance Agent HQ is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

23. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our privacy practices, technology, or applicable law. If we make a material change to how we collect, use, or disclose personal information, we will provide notice and obtain any consent required by law.

For privacy questions, requests, or complaints: