Privacy Policy

LQID Inc. is a Canadian corporation incorporated in Ontario. Our registered office is:

LQID Inc.
257 Main Street West
Grimsby, Ontario L3M 1S5
Canada

For privacy questions, contact our privacy officer at privacy@lqid.ca.

We collect the following categories of information:

Account Information

• Email address and password (password is hashed, never stored in plain text)
• Your name and display name
• Your province of residence
• Business name, address, phone, HST number (optional)
• Business logo if uploaded

Financial Data You Enter

• Deposits, revenue, and client information
• Expenses, receipts, and vendor information
• Invoices you create and send
• Contractor payments and T4A information
• Capital asset purchases and depreciation
• Stock trades (if you use the trading module)

Usage & Technical Data

• IP address, browser type, and device information
• Pages you visit and features you use
• Questions you ask our AI tax bot
• Error logs (to diagnose bugs)

Referral Information

• If you sign up via a referral link, we record who referred you for attribution purposes

We use your information to:

• Provide LQID's core features (tax calculations, expense tracking, invoicing)
• Send you service-related emails (weekly summaries, installment reminders, overdue invoice alerts — you can turn these off in Settings)
• Answer your questions through the AI tax bot
• Identify and fix bugs
• Detect and prevent fraud, abuse, and security threats
• Comply with our legal obligations

We do not:

• Sell your personal or financial data to anyone
• Use your financial data to train AI models
• Share your data with advertisers
• Display ads of any kind inside LQID

Your primary data is stored in Canada:

Data	Where it's stored	Jurisdiction
Your account, deposits, expenses, invoices, all financial data	Supabase (ca-central-1)	Canada
Uploaded receipts and logos	Supabase Storage (ca-central-1)	Canada

Some processing happens with US-based service providers, explained in the next section. While your data at rest is in Canada, data in transit may cross the Canada-US border briefly during processing.

We use trusted service providers to deliver LQID. Each is contractually bound to protect your data.

Provider	What it does	Location
Supabase	Database, authentication, and file storage	Canada (ca-central-1)
Vercel	Application hosting and web delivery	USA
Anthropic	AI tax bot (only questions you send are processed — your transaction data is not sent)	USA
Resend	Email delivery (invoices, notifications)	USA
Cloudflare	DNS and security	USA / global
Stripe	Subscription billing and payment processing (card details are handled by Stripe — LQID never sees full card numbers)	USA
Plausible	Privacy-friendly, cookieless website analytics (aggregate usage only — no personal profiles or cross-site tracking)	EU
Sentry	Error monitoring (technical crash/error reports so we can fix bugs)	USA

What this means in plain language: When you use LQID, your financial data lives in Canada. When the site loads in your browser, or when we send you an email, or when you ask the AI a question — those specific operations may involve US servers. We don't send your full financial data to Anthropic or Resend — only the specific messages or emails being processed.

When you use the LQID AI tax bot:

• Your question is sent to Anthropic (the company behind Claude) for processing.
• Your transaction data (deposits, expenses, invoices) is NOT sent.
• Anthropic's terms prohibit using customer API data for model training.
• We log your questions to improve the service. We don't associate them with your personal identity beyond what's needed for rate limiting.
• If a question goes unanswered (edge case), we may review it to improve answers.

When you upload a receipt:

• The receipt image is briefly sent to Anthropic for OCR extraction.
• The image and extracted data are stored in Supabase (Canada).
• Anthropic does not retain the receipt image after processing.

Under Canadian privacy law, you have the right to:

• Access your personal information we hold
• Correct information that's wrong or incomplete
• Delete your account and associated data
• Export your data in a portable format (CSV)
• Withdraw consent for specific uses (e.g., turn off notifications)
• File a complaint with the Office of the Privacy Commissioner of Canada if you believe we've mishandled your data

To exercise any of these rights, email privacy@lqid.ca. We'll respond within 30 days as PIPEDA requires.

• Active accounts: as long as you use LQID
• Closed accounts: 30 days after deletion, then purged (this gives you time to change your mind or export data)
• Server logs: up to 90 days
• Email records: retained by Resend for up to 90 days
• Legal holds: if required by law (e.g., CRA audit of LQID itself), we may keep certain data longer

Supabase maintains automatic backups. Deleted data is removed from backups within standard rotation cycles.

We take security seriously:

• All data in transit is encrypted with TLS 1.2+
• Passwords are hashed using industry-standard algorithms (never stored in plain text)
• Database access is protected by Row-Level Security (RLS) — users can only see their own data
• Admin access to the system is limited and logged
• We use established cloud providers with strong security track records

No system is 100% secure. If we discover a data breach that affects you, we will notify you and the Office of the Privacy Commissioner as required by PIPEDA, typically within 72 hours of discovery.

LQID is not intended for users under 18. We do not knowingly collect personal information from children. If you believe a child has created an account, email privacy@lqid.ca and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you via email or a prominent notice in the app at least 7 days before the change takes effect. Continued use of LQID after changes take effect means you accept the new Policy.

LQID is designed for Canadian residents and businesses. If you're accessing LQID from outside Canada, you're doing so at your own risk, and you consent to your data being transferred to and processed in Canada.

For privacy-related questions or to exercise your rights:

Privacy Officer
LQID Inc.
257 Main Street West
Grimsby, Ontario L3M 1S5
Canada
privacy@lqid.ca

If you're not satisfied with our response, you may file a complaint with:

Office of the Privacy Commissioner of Canada
priv.gc.ca