Privacy notice

Effective: [DATE]. Operated by [OPERATOR LEGAL NAME], [ADDRESS], Ontario. Privacy contact: [EMAIL].

What we collect

• Account: your email address and a scrambled (hashed) version of your password.
• Business profile: business name, your name, start date, type of work, contact details and address, and GST/HST registration details if you enter them. We don’t ask for your SIN, CRA login or banking passwords.
• Bookkeeping records you enter or upload: transactions, bank and card CSV files, invoices, customer names and contact details you add, receipt images and PDFs.
• Security records: a sign-in session cookie, failed sign-in counts, and a change log of actions in your books (which record changed and when — not copies of the amounts).

We don’t use advertising or analytics trackers, and we don’t sell or rent personal information. The only cookie is the sign-in session cookie.

Why we use it

To provide Launch Canadian Business Books: keeping your books, producing reports and exports, securing your account, and responding to you. We don’t use your records to train AI models, and the app doesn’t send your records to an AI service.

Customer information you enter

If you add customers’ names, emails or addresses for invoices, you are responsible for having a reason to collect it. We process it only to provide the service to you.

Where it’s stored and who processes it

[Confirm for your deployment — list each provider, what it does, and the region you selected. Example:]

• [Application hosting — PROVIDER, REGION]
• [Database and backups — PROVIDER, REGION]
• [Receipt file storage — PROVIDER, REGION]
• [Email delivery, if configured — PROVIDER, REGION]
• [Billing, if configured — PROVIDER, REGION]

[Only after verifying the providers’ regions and processing terms:] Records are stored in Canada. Some providers may be companies based outside Canada; information could be subject to access by foreign authorities under their laws. [Remove or adjust this paragraph to match the facts.]

How long we keep it

We keep your records until you delete them; we never delete records because of their age. The CRA generally requires business records to be kept for six years from the end of the last tax year they relate to, and sometimes longer, so please export before deleting. If you close your account, your records stay available read-only for export. Permanent deletion removes your data from our live systems immediately; copies in encrypted backups are removed as backups roll over within [N] days.

Your choices

You can view, correct and export your information in the app, close your account, or delete it permanently from Settings. You can ask us about your personal information or make a complaint at [EMAIL]. You may also contact the Office of the Privacy Commissioner of Canada.

Security

Connections are encrypted. Each business’s records are separated by access controls in the database. Receipt files are private and opened through short-lived links. No system is perfectly secure; we’ll notify you and the regulator of breaches as the law requires.