Privacy Policy

This Privacy Policy describes how FinanceFlow (FinanceFlow Canada Limited) collects, uses, and protects your personal information. We are committed to protecting your privacy and handling your data responsibly. This policy applies to our website and all services we provide.

Who We Are

We are the data controller responsible for your personal information. Our organization processes data in accordance with Canadian privacy laws and regulations. We operate as a smart budgeting tool and personal finance review service focused on serving users in Ottawa and across Canada. Your privacy is fundamental to our operations, and we maintain strict policies to ensure your data remains secure and confidential.

Information We Collect

We collect various types of information to provide and improve our services:

• Personal details such as name, email address, and phone number when you register or contact us
• Usage data including pages visited, time spent on site, and device information through analytics
• Cookies and similar tracking technologies to enhance your browsing experience
• Budgeting information and financial data you voluntarily provide through our tools
• IP address and browser information from server logs

Legal Basis for Processing

We process your personal information based on several legal grounds. Your explicit consent is obtained when you sign up for our services or subscribe to communications. We also rely on legitimate interests, including improving our services, providing customer support, and conducting research to enhance user experience. Where required by law, we process data to fulfill legal obligations. For analytics and cookies, we obtain your consent at your first visit to our website.

How We Use Your Information

We use your data to provide, maintain, and improve our budgeting tools and services. Your information helps us personalize your experience and deliver relevant content. We analyze usage patterns to identify trends and optimize our platform. We also use your data to communicate with you about updates, new features, and important notices. We may use anonymized data for statistical analysis and research purposes. Your information may also be used to respond to inquiries and provide customer support.

Data Retention

We maintain specific retention periods for different types of data. Contact form messages and support inquiries are retained for up to 24 months after your last interaction with us. Analytics and cookie data are stored for up to 14 months from collection. Server logs containing IP addresses and technical information are retained for up to 12 months. If you delete your account, we remove most personal data within 30 days, though some information may be retained longer if required by law. Backup copies may persist for an additional 90 days before permanent deletion.

Your Privacy Rights

You have the right to access your personal information held by us. You may request a copy of all data we have collected about you. You have the right to correct inaccurate or incomplete information. You can request the deletion of your personal data, subject to certain legal exceptions. You have the right to restrict processing of your information in specific circumstances. You may withdraw your consent at any time without affecting the legality of processing before withdrawal. To exercise these rights, please contact us using the information provided below.

Cookies and Tracking

We use cookies to improve your browsing experience and analyze how users interact with our website. Essential cookies are necessary for basic functionality and cannot be disabled. Performance cookies help us understand which pages are popular and how visitors navigate our site. Preference cookies remember your choices to personalize your experience. Marketing cookies may track your activity across websites. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our services. We do not use cookies for tracking personal behavior beyond our website unless you opt in.

Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, and disclosure. We use encryption technology to secure data transmitted between your device and our servers. Our servers are protected by firewalls and intrusion detection systems. We conduct regular security audits and vulnerability assessments. Our staff undergoes training on data protection and privacy practices. However, no method of transmission over the internet is completely secure. We cannot guarantee absolute security, though we maintain industry-standard protections.

Third-Party Services

We may use third-party service providers to process data on our behalf, including analytics platforms, hosting providers, and communication tools. These providers are contractually obligated to protect your information and use it only as necessary to provide services to us. We conduct due diligence on all third parties before engaging their services. We do not sell or rent your personal information to third parties for their marketing purposes. We do not share financial data with unaffiliated companies without your explicit consent. Any data sharing is limited to what is necessary to provide our services.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by updating the "Last updated" date and, where appropriate, by email or prominent notice on our website. Your continued use of our services after changes become effective constitutes your acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

Supervisory Authority

You have the right to lodge a complaint with the applicable data protection authority if you believe we have violated your privacy rights. In Canada, you may contact the Privacy Commissioner of Canada (OPC), which oversees compliance with federal privacy legislation. Provincial regulators may also have jurisdiction depending on the nature of the organization and the data processing. We encourage you to contact us first to resolve any concerns before escalating to authorities.