Privacy Policy

CanVest One is a secure personal financial operating system — a place to centralize your financial life. You can use it to organize and understand things like bank accounts, investments, credit cards, loans and mortgages, bills, tax documents, insurance and estate planning documents, financial reports, budgets, goals, household financial information, AI conversations, and other documents you choose to upload.

Our purpose is to help you organize, visualize, and understand your financial life in one place. Everything described in this policy exists in service of that purpose.

CanVest One is not:

• a bank or deposit-taking institution
• a registered investment advisor or broker-dealer
• an accounting firm
• a law firm
• a tax filing agency, and it is not affiliated with the CRA
• a brokerage

Account information: When you sign up, we collect your email address and the display name you choose.

Financial data you enter or connect: CanVest One stores the financial information you input or choose to link, including account balances, income sources, expenses, debts, goals, transactions, budgets, and household information. On Pro, you may optionally connect real institutions (see Section 4) instead of entering balances manually — that choice is always yours.

Documents you upload: Tax documents (e.g., NOAs, T-slips), insurance documents, estate planning documents, and other files you choose to upload to the Tax Vault or Documents areas are stored and, where applicable, processed to extract structured data for your dashboards.

AI conversations: If you use CanVest One AI, we store your prompts and the responses so you can see your history and so the assistant has context across a conversation. See Section 5 for what is and isn’t sent to an outside AI provider.

Usage data: We may collect information about how you use the app (pages visited, features used) to improve the product. Where this is not strictly necessary to run the service, we only collect it with your consent — see Section 6.

We never see or store your banking username or password. When you link a bank, brokerage, or credit card on Pro, that connection is made through a regulated third-party provider (Plaid or SnapTrade) using bank-grade, read-only tokens. Your institution login credentials are entered directly with that provider or your institution, never with CanVest One.

• To operate and provide the CanVest One service, including all financial planning, tax organization, and (where enabled) AI features
• To process subscription payments through Stripe (we never see your full card number)
• To send transactional emails (account confirmation, password reset, security alerts)
• To improve and debug the application based on anonymized usage patterns
• To comply with legal obligations under Canadian law (PIPEDA)

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

CanVest One is built on a small number of specialized providers. Each one only receives the data it needs to do its specific job:

• Supabase — our database, authentication, and file storage provider. Your account data, financial records, and uploaded documents are stored here, protected by row-level security so only you can query your own records. Data may be processed in Canada and the United States.
• Plaid — used on Pro to power bank account linking, where available. Plaid connects to your institution using a secure, read-only token; we never receive or store your bank login credentials.
• SnapTrade — used on Pro to power investment account and brokerage linking (e.g., Wealthsimple, Questrade). Same read-only token model as Plaid — no brokerage credentials pass through CanVest One.
• Stripe — payment processing for Pro subscriptions. We do not store card numbers. Stripe is PCI-DSS compliant.
• Resend — sends transactional email on our behalf (confirmations, password resets, security and billing notices). Resend receives your email address and the content of the message being sent.
• OpenAI — powers CanVest One AI’s advanced reasoning, available on the Pro plan. See Section 5 for exactly what is and isn’t sent. OpenAI is not used at all for Free accounts.
• Vercel — application hosting and edge delivery.

Each of these providers has its own privacy policy and security practices, and processes your data only as needed to provide their service to us.

CanVest One AI is not one uniform feature — what it does and which systems see your data depends entirely on your plan:

• Free: No CanVest AI access of any kind. Nothing is sent anywhere for AI purposes.
• Pro: Deterministic CanVest AI for direct questions, generated straight from your own stored financial data (balances, RRSP/TFSA room, transactions, budget, goals) using our own code — not sent to OpenAI or any outside AI provider. Pro also adds advanced AI reasoning (analysis, forecasts, tax and investment strategy, coaching) powered by OpenAI for questions that need it. Only the specific financial context relevant to your question is included in that request — not your full account history, not your identity beyond what’s needed to answer, and never your raw documents unless the question is specifically about them.

In every case, AI responses are informational only. They do not constitute financial, tax, investment, or legal advice, and you remain responsible for any financial decisions you make. See our Financial Disclaimer for full detail.

Your data is stored in a PostgreSQL database managed by Supabase, hosted on infrastructure in Canada and the United States. We use row-level security (RLS) policies so your data is only accessible to your account — no other user can query your records.

All data is encrypted in transit using TLS (HTTPS) and encrypted at rest. Authentication is handled by Supabase Auth with industry-standard JWT tokens, and optional multi-factor authentication (MFA) is available in Settings → Security. For more detail on our security practices, see our Trust & Security page.

While we take security seriously and follow industry-standard practices, no system is 100% secure. We recommend using a strong, unique password and enabling MFA.

CanVest One uses essential cookies and browser storage (localStorage) required to maintain your login session. We do not use advertising cookies, cross-site tracking, or third-party analytics that track you across other websites.

With your permission, we also record anonymized, first-party product usage (which features you use) to improve the app. This is optional — you can accept or decline it from the cookie notice shown on your first visit, or at any time from your Privacy Center under Consents → Analytics Tracking. Declining does not affect any core functionality.

You can clear cookies at any time through your browser settings. Doing so will log you out of the app.

As a Canadian user, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), all of which you can exercise from your Privacy Center:

• Access: Request a full export of the personal information we hold about you — profile, accounts, transactions, budgeting, goals, tax document records, AI conversations, and consent history, delivered as a JSON file.
• Correction: Ask us to correct inaccurate information. Most fields can be edited directly in Settings; anything else (like an AI-extracted tax figure) can be submitted as a correction request for review.
• Erasure: Request deletion of your personal data. We process erasure requests within 30 days. Some records must be retained for legal reasons even after erasure — see Section 9.
• Withdrawal of consent: Withdraw any optional consent (analytics, marketing email, AI processing) at any time without affecting your ability to use the core app.

If you’d rather delete your account outright and immediately, you can do that from Settings → Danger Zone — this permanently and immediately deletes your account and data (protected by a step-up MFA check) rather than following the 30-day formal erasure process. Either path is available to you.

We retain your account data for as long as your account is active. If you delete your account or submit an erasure request, we remove your personal data as described above, except for two categories we’re legally required to keep:

• Our own billing and accounting records (e.g., invoices, payment records) — retained up to 7 years as required by the Income Tax Act.
• Security audit logs and CRA-related tax document metadata tied to your account — retained up to 6 years, consistent with CRA record-keeping guidance, in case they’re needed for a legal or regulatory request.

Everything else — your profile, entered financial data, linked-account data, uploaded documents, and AI conversations — is deleted. Your account is anonymized where full deletion of a record isn’t possible due to the above.

CanVest One is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email (to the address on your account) or by a prominent notice in the app at least 14 days before the change takes effect. Continued use of CanVest One after changes take effect constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

You may also file a complaint with the Office of the Privacy Commissioner of Canada.