Privacy Policy

This policy explains how ClaimHero ("we", "us") collects, uses, discloses, and protects personal information when you use claimhero.ca (the "Service"). We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Information we collect

• Account information: your email address and a securely hashed version of your password (we never store your password in plain text).
• Expense records you enter: dates, amounts, categories, descriptions, notes, and receipt details. This can be sensitive financial information — we treat it accordingly and never sell it or use it for advertising.
• Billing information: subscriptions are processed by Stripe. We store your Stripe customer reference and subscription status only — your card number never touches our servers.
• Email addresses you submit for our free guides or newsletter.
• Support and bug reports: the messages you send us, along with your account email.
• Usage data: basic, privacy-respecting analytics (page views, referrers) via Vercel Analytics, and a strictly necessary session cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies.

2. How we use it

• To provide the Service: storing your expenses, generating summaries and exports.
• To process payments and manage your subscription.
• To send essential account emails (welcome, password reset, billing).
• To send marketing emails (tips, guides, product updates) — every such email includes an unsubscribe link, and you can opt out at any time without affecting your account.
• To respond to support requests and fix bugs.
• To secure and improve the Service.

We do not sell your personal information, and we do not use the contents of your expense records for marketing.

3. Who we share it with

We share personal information only with the service providers that operate the Service on our behalf, under their own contractual and security obligations:

• Stripe — payment processing.
• Resend — sending email.
• Neon — database hosting.
• Vercel — website hosting and privacy-respecting analytics.

These providers may store or process data on servers located outside Canada (including the United States), where it may be subject to the laws of those jurisdictions. We may also disclose information if required by law or to protect our legal rights.

4. How long we keep it

We keep your account and expense data for as long as your account exists. When you delete your account, your account record and expense data are deleted from our production database; residual copies in encrypted backups are removed as backups rotate. Billing records are retained as required by tax and accounting law. Unsubscribe records are kept indefinitely so we never email you again by mistake.

5. Your rights

• Access & correction: you can view and edit your expense data in the dashboard at any time, and may request a copy of the personal information we hold about you.
• Deletion / withdrawal of consent: you can delete your account from the dashboard (Danger zone), which permanently deletes your expense data and cancels any active subscription — or email us and we will do it for you.
• Marketing opt-out: use the unsubscribe link in any marketing email.
• Complaints: contact us first at hello@claimhero.ca. You may also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial privacy regulator.

6. How we protect it

Passwords are hashed with bcrypt; connections use TLS; password-reset tokens are stored hashed and expire after one hour; access to production systems is restricted. No system is perfectly secure — if we become aware of a breach that creates a real risk of significant harm, we will notify affected users and the Privacy Commissioner as required by PIPEDA.

7. Children

The Service is intended for people running a business and is not directed at children. We do not knowingly collect personal information from anyone under the age of majority.

8. Changes

We may update this policy from time to time. Material changes will be announced on the site or by email, and the "Last updated" date above will change.

9. Contact

Privacy questions and requests: hello@claimhero.ca (attention: Privacy Officer).