Privacy and data residency

Everything stays in Canada

Database, backups, logs and any AI processing run in Canadian regions. Sub-processors outside Canada are blocked by default and the current list is published here.

Built-in safeguards

Row-level access rules, masked SIN and business numbers, an immutable audit trail on every sensitive read, short idle sessions and encrypted backups with a 7-year retention clock.

AI you can audit

AI is assistive only. Personal identifiers are replaced with tokens before anything leaves the app, every AI output is badged and reviewable by a human, and you can opt out per file.

Your rights

Download your data, correct it, ask who accessed your file, withdraw AI consent, or ask us to delete what the Income Tax Act does not require us to keep.

What we collect and why

Account details (name, email), profile preferences, and the tax information you or your CanTaxAi Pro enter — slips, intake answers, documents and correspondence. We use it only to operate the service: preparing returns, tracking deadlines, and reminding you about them. We never sell personal information and never use taxpayer data to train AI models.

Cookies and storage

We use only what's needed to run the app: sign-in session storage, your theme and language preferences, and security tokens. No advertising or cross-site tracking cookies.

Disclosure

Taxpayer data is visible only to the people you or your practice explicitly grant access to, within your workspace. We disclose information outside that circle only when the law requires it (for example, a valid court order), and we record such events in the breach/audit register where the law allows.

Retention and deletion

Tax records are retained in line with Income Tax Act record-keeping expectations (generally six to seven years). When retention expires or you validly request deletion of data we're not required to keep, it is removed from production systems and expires from encrypted backups on their normal rotation.