Privacy Policy

1. Summary

• Calculations run in your browser. A meeting you have not saved stays in that browser tab (session storage) and is cleared when the tab closes.
• We store client figures only when you save a meeting or create a share link.
• Share links keep numbers only. Names, email addresses, phone numbers, long digit strings and free-text notes are removed before a link is stored.
• We do not sell personal information and we do not use advertising cookies.

2. Advisors: what we collect

Account

Email address, name and profile image (from our sign-in provider), preferred language and time zone, your plan and subscription status. Profile details you add yourself (for example credentials and firm) and the logo you upload are stored with your account. Your logo appears on your reports and on the links you send to clients.

Tool usage

Which tool you opened on which day, and whether it was opened directly, from a guided flow or from a meeting. No input values. This drives “My tools” and the Free plan’s monthly allowance.

Billing

Stripe processes payments. We keep the Stripe customer ID, plan, billing period and subscription status. We never see or store card numbers.

Messages

If you email us or use the contact form, we keep the message and your email address to answer it.

Technical data

Our hosting provider records IP addresses and request details for security, abuse prevention and service metrics. We keep an audit log of account and billing events (for example account deletion requests).

3. Clients: what happens to their information

Clients do not have accounts. The advisor is responsible for the client relationship and for having a lawful basis to enter client figures.

• Unsaved meetings — the client fact sheet and tool inputs are kept in the advisor’s browser tab only.
• Saved meetings — when the advisor saves, the tool inputs and the label the advisor types are stored with the advisor’s account until the advisor deletes them or the account. The app warns when a label looks like a full name; we recommend initials or a household name.
• Share links — store the numeric inputs only. They expire after 30 days unless the advisor chooses another period (up to 90 days); the advisor can renew a link for another 30 days and can deactivate it at any time. Links are marked so search engines do not index them. To count views once per day, we store a one-way daily key derived from technical request data; it is not the IP address.
• Session summaries — a finished guided flow can keep scores and finding keys for a later annual review, not the client’s inputs.

If you are a client and want information removed, contact your advisor, or write to us at support@wealthcanvas.ca and we will work with the advisor.

Visits to wealthcanvas.ca

If analytics is enabled, Cloudflare Web Analytics counts page views without cookies. If you arrive with utm_ campaign parameters in the link (for example from an email), those parameters are passed to the sign-up page so we can tell which campaign a new account came from. When you sign up, the campaign tags in the link you arrived from (utm_) and the referring website's domain are saved with your account so we can see which channels bring advisors; they contain no personal information.

4. Why we use it

To provide and secure the service, bill subscriptions, enforce plan limits, answer messages and meet legal obligations (for example tax records). We do not use personal information for advertising.

5. Service providers

These companies process personal information on our behalf, under contract, only to provide their service. Some store data outside Canada, mainly in the United States, where it may be accessible to authorities under local law.

6. Cookies and local storage

See the Cookie Policy for each cookie and browser storage key, why it is used and how to remove it.

7. How long we keep it

• Account data: while the account is open. After you request deletion, the account can be restored for 30 days; then profile details are removed and records that must be kept (billing and audit entries) are stripped of identifying details.
• Saved meetings and sets: until you delete them or the account.
• Share links: stop working when they expire or are deactivated, and are deleted 90 days after they expire (or with the account, if sooner).
• Billing records: as long as tax law requires.

8. Your rights

You can ask to access or correct the personal information we hold about you, withdraw consent (which may mean closing the account), or delete your account (Settings in the app, or by email). Write to support@wealthcanvas.ca. We reply within 30 days.

If you are not satisfied with our answer, you have the right to complain to the Office of the Privacy Commissioner of Canada: priv.gc.ca.

9. Safeguards

Data is encrypted in transit. Access to production data is limited to the people who run the service. Passwords are handled by our sign-in provider and are never stored by us.

10. Changes

We will post changes here and update the effective date. If a change materially affects how we use personal information, we will notify account holders by email before it takes effect.

11. Contact

Privacy questions, access and correction requests, and complaints: support@wealthcanvas.ca
We reply within 30 days.