Privacy

What we keep

• The numbers you confirm (sales, counts, fees, dates, province and type of business), the result, and your answers to the rights questions. These sit behind a random link that only you have.
• If you ask for reminders: your email address, the deadline date and which reminder it is.
• Daily counts used to limit uploads, saves and reminder signups. Each count is filed under a scrambled (hashed) form of your IP address, never the address itself, and these rows are deleted after 2 days.

What we never keep

• Your PDF statement. It is read once, in memory, to pre-fill the form, and then dropped. It is never written to disk, storage, logs or our database.
• Your name, business name, address, postal code or merchant number. We never ask for them.

Who sees your PDF

To read a PDF we send it to OpenAI's API. We ask OpenAI not to store it, and we ask it not to return names, addresses or account numbers. OpenAI may still keep API data for up to 30 days to check for abuse. If you prefer, type your numbers in by hand instead.

Who sends our emails

Reminder emails are sent through Resend, an email delivery service. It receives your email address and the email we send you.

How long

Results are deleted 12 months after you create them, unless a reminder you asked for is still ahead. Every reminder email has a link to stop reminders or delete everything at once.

Logs

Our server logs record events such as “check saved”, never the numbers you entered.