Legal
Privacy Policy
Last updated
At a glance
- 01
Where your information is held. Your account, your documents and your records are stored in Canada, in the Amazon Web Services Canada (Central) region. One step — reading a document — is carried out by Google outside Canada. Section 6 sets that out.
- 02
What we collect. The name, email address and mobile number you give when the account is created; the receipts and invoices you add and the records made from them; and the technical details every website receives. Section 2 lists all of it.
- 03
No advertising, no analytics, no selling. There is no advertising network, no analytics, no tracking pixel and no profiling on this site, and we never sell or rent personal information to anyone.
- 04
Six years, deliberately. Records are kept for the period the Canada Revenue Agency generally requires. Section 9 explains what that means when you remove something.
- 05
Your rights. You may see, correct, export or delete your personal information, and withdraw consent. Section 11 explains how to exercise each one.
This summary is provided for convenience only. It forms no part of this policy and does not change it; the numbered sections below are the operative text.
Who we are
CININTIRIKS INC. is a Canadian company based in Toronto, Ontario. For the purposes of Canadian privacy law we are the organization responsible for the personal information described in this policy, and we have designated a Privacy Officer who is accountable for our compliance with it.
The Privacy Officer can be reached by email at contact@cinintiriks.ca, by telephone at 1‑833‑980‑0707 (toll-free in Canada and the United States), or by post:
CININTIRIKS INC.
375 University Ave, Unit 102 Suite 3334
Toronto, ON M5G 2J5
Canada
Information we collect
Only what the service needs in order to do its job.
| What | Detail, and where it comes from |
|---|---|
| Account | Your full name, email address and mobile number, given when the account is created, and whether the email address has been verified. Your password is handled by Amazon Cognito, which keeps it only in a protected form that cannot be read back: it never reaches our own servers, and we can never see it. |
| Plan and dates | Which plan the account is on, and the date the account was created. |
| Sets of books | The name you give each set of books, whose return it is for (your own, a corporation you own, or a client), and the Canada Revenue Agency form it files against. You provide these when you create a set of books. |
| Documents | The receipt and invoice files you photograph, upload or keep — JPEG, PNG or PDF — stored exactly as received. Whatever is printed on a document is stored with it, which can include your name, an address, the last digits of a payment card, or details of other people. |
| Records | What the document says: vendor, date, subtotal, tax, total, document type, the expense line it is filed against, and an optional note you write. For a document read automatically we also keep a confidence figure, which model read it, and any flags raised — for example that it needs review. |
| Corrections | Every correction you make to a record is kept on that record: the value before, the value after, and when it was changed. That history is what lets a record still be explained years later. |
| Technical | As with every website, our hosting and our servers receive the IP address and browser details your device sends with each request, and record request times and errors. Our own server logs identify an account only by an internal identifier, and never hold the contents of a document. |
| Messages | What you send us by email, by telephone, or through the form on the Contact page, and our replies. The form posts to our own server and the message is emailed to our inbox from Canada; no other company is involved, and the form sets no cookie. |
| Payment | None is collected today. Paid plans are not open yet and no payment has been taken. When they open, card details will be handled by a payment processor rather than by us, and this policy will be updated before a single payment is collected. |
We never ask for your Social Insurance Number, and the service has no use for one. We do not collect location data or contacts, and we take nothing from your device beyond what is listed above.
How and why we use it
- To run the service — create and secure your account, store your documents, read their details, file each record against a Canada Revenue Agency expense line, keep them for the retention period, and produce the exports you ask for.
- To keep the account yours — verify your email address, send the codes that sign you in or reset your password, and detect and stop misuse.
- To write to you about the service — the verification code when the account is created, one welcome message, password-reset codes, replies to what you ask us, and notice of material changes to this policy or the Terms. We do not send marketing email, and will not without your separate consent.
- To meet legal obligations — comply with applicable law, respond to lawful requests, and enforce our Terms of Service.
Your mobile number. It is kept so that we can reach you about your own account, and so that it can be verified by text message if and when that step is switched on. It is not verified by text message today, it is never shown to anyone else, and it is never used for marketing.
Consent
Under PIPEDA we rely on your express consent, given when the account is created and the box agreeing to this Privacy Policy and our Terms of Service is ticked, and on implied consent for what is plainly necessary to deliver what you have asked for — reading a document you have just uploaded, for instance, or emailing you a verification code.
You may withdraw consent at any time, subject to legal and contractual limits and to reasonable notice. Because the service cannot store and return your records without the information in section 2, withdrawing consent to that information means closing the account; section 11 explains how, and exactly what deletion removes.
Service providers
We share personal information only with providers that process it for us, on our instructions, and only so that the service can work. We do not sell or rent personal information, and we share nothing with advertisers or data brokers.
- Amazon Web Services — Canada (Central) region. Hosting, sign-in (Amazon Cognito), the database holding your records, the storage holding your documents, the server functions that answer your requests, the service that sends your email, and the encrypted store that holds our own keys. Your account, your documents and your records live here, in Canada.
- Google — reading a document (Gemini API). When a document is added, the file itself is sent to Google’s Gemini service together with two things: today’s date, and the list of expense lines on that set of books’ form. Your name, email address, mobile number and account identifier are never sent. We use the paid service, under whose terms Google does not use the file or the result to improve its products, processes them as a data processor under its data-processing terms, and logs them for a limited period solely to detect and prevent misuse of its own service.
- Google Fonts — the typeface. Our pages load their typeface from Google’s font service. As with any request to another company’s server, Google receives your IP address, your browser’s details and which font file was requested. Nothing else is sent, and no cookie of ours is involved.
- jsDelivr — the sign-in library. The page that signs you in loads Amazon’s Cognito sign-in library from the jsDelivr network, which receives your IP address and browser details in the same way. The file is checked against a fixed fingerprint before your browser runs it, so an altered copy cannot execute.
- Law enforcement, regulators and courts. Only where a valid court order, production order, warrant or law requires it, and only what is required. Where we are permitted to tell you, we will.
- A successor. If the business is sold or merged, personal information may pass to the successor, which remains bound by this policy. We will give notice in advance.
Where your information is processed
What stays in Canada. Your account, your sets of books, your documents, the records made from them, the correction history, our server logs and the emails we send you are stored and processed in the AWS Canada (Central) region.
What is processed outside Canada. Reading a document is carried out by Google’s Gemini service, which processes the request — and may transiently store or cache it — in the United States or another country where Google or its agents keep facilities. Requests for the typeface (Google Fonts) and for the sign-in library (jsDelivr) are answered by global networks that receive your IP address. Information processed outside Canada is subject to the laws of the country it is in, and may be accessible to that country’s courts, law enforcement and government authorities. Where a provider processes personal information on our behalf, its terms with us require protection comparable to our own.
Cookies and browser storage
CININTIRIKS sets no cookies of its own. There is no advertising network, no analytics, no tracking pixel and no profiling on this site. Two things are kept inside your own browser:
- Your sign-in. The Amazon Cognito sign-in library keeps your session in the browser’s local storage — not in a cookie — so that you stay signed in while you work. Signing out removes it.
- Copies of this site’s own files. A service worker keeps this site’s pages, styles and scripts so that it opens quickly and still works when a connection drops. They hold no personal information and none of your records, and clearing this site’s data removes them.
Our Cookies Policy sets this out in full, including how to clear or block it.
Automated reading, and what it does not decide
- The reading. A document is read by the Gemini model, which proposes the vendor, the date, the amounts and an expense line.
- Our own code decides. A proposed line that does not exist on that set of books’ form is refused: the record is saved on that form’s “other” line, or left without a line where the form has none, and flagged for your review. Low confidence, a missing amount, or sums that do not add up are flagged the same way.
- Nothing is decided about you. Reading a document organizes it. It does not decide whether an expense may be claimed, it does not score or profile you, and it has no consequence for you beyond where a record is filed — which you can change at any time.
- A person will look. If an automatic reading is wrong and you would like us to review it, write to us and we will.
How long we keep it
| What | How long |
|---|---|
| Documents and records | For as long as your account is open, and at least six years from the end of the tax year they relate to — the period the Canada Revenue Agency generally requires records and supporting documents to be kept. Nothing inside that period is deleted automatically. See Data Retention. |
| A record you remove | It disappears at once from your lists, searches and exports. The record itself is kept for the rest of its six-year period, because something you have already claimed may still have to be explained. There is no undo button: ask us and we can restore it. |
| Your account | For as long as the account exists. Erased within 30 days of a deletion request we have confirmed with you, apart from anything the law requires us to keep. |
| Server logs | For as long as they are useful for running and securing the service, and no longer. They record what happened and an internal account identifier, never the contents of a document. |
| Messages to us | While the matter is open, and for up to two years after it is closed. |
| Backups | The database keeps a rolling 35-day recovery window, and document storage keeps earlier versions of a file so that a mistake can be undone. Information you have deleted can remain in those for up to 35 days before it ages out; an account erasure removes the stored versions too. |
| Your sign-in, in your browser | Until you sign out. A session you leave alone expires by itself. |
How it is protected
- In transit. The site and the application are served over HTTPS only, and browsers are told to refuse an unencrypted connection to this domain.
- Your documents. They sit in private storage with every form of public access blocked, encrypted at rest. There is no public address for a document: each one opens through a one-off link that a server issues only after checking that the account asking owns that record, and that link stops working after sixty seconds.
- Your records. The database is encrypted at rest, keeps a 35-day point-in-time recovery window, and has deletion protection switched on.
- Every request is checked on the server against your signed-in account. Nothing is protected merely by being hidden in the interface.
- Passwords. At least eight characters with an upper-case letter, a lower-case letter, a number and a special character, handled by Amazon Cognito.
- Least privilege. Each server function is given only the permissions its own job needs, and our keys are held in AWS Secrets Manager — never in the site’s code.
- Headers. Pages are sent with security headers that stop this site being framed by another site, stop content-type guessing, and limit what is revealed when you follow a link away.
No system is perfectly secure, and we will not pretend otherwise. What we commit to is narrower and more useful: holding only what the service needs, keeping the ways in as few as possible, and telling you promptly if a breach affects your information. If you believe you have found a security problem, please tell us before telling anyone else — contact@cinintiriks.ca. Our Security page has more.
Your rights
- See what we hold. Ask us for a copy of the personal information we hold about you, and for an account of who it has been disclosed to.
- Correct it. Your name can be changed in Settings at any time. To change your email address or mobile number, write to us and we will make the change ourselves — the address is the key to six years of records, so it is not left to a single mistyped form.
- Take it with you. Every set of books exports to CSV and to PDF from the Export screen whenever you like. On request we will also send the personal information we hold in a structured, machine-readable form.
- Delete it. Write to us and we will erase your account, your documents and your records. We will first tell you plainly what will be removed, because a deleted record cannot support a claim you have already filed.
- Withdraw consent for anything that is not necessary to the service, at any time.
- Complain. If our answer does not satisfy you, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca. Residents of Québec may also contact the Commission d’accès à l’information du Québec.
Write to contact@cinintiriks.ca to exercise any of these. We answer within 30 days, as PIPEDA requires, and we will tell you if we need to verify who you are first.
Children
CININTIRIKS is intended for people aged 18 or over who can enter into a binding contract. The service is not directed at children and we do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, tell us and we will delete the account and its contents.
If there is a breach
If a security incident creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible, as PIPEDA’s mandatory breach-reporting rules require, and we will tell you what happened and what to do about it. We keep a record of every breach of security safeguards for at least 24 months, whether or not it was reportable. Where Québec’s Law 25 applies, we will also notify the Commission d’accès à l’information du Québec.
Changes to this policy
We may update this policy. If a change materially affects you we will tell you by email at least 14 days before it takes effect. The “Last updated” date at the top of this page always reflects the current version.
Contact
Privacy questions, complaints and requests about your own information go to our Privacy Officer:
CININTIRIKS INC. — Privacy Officer
contact@cinintiriks.ca
1‑833‑980‑0707 (toll-free)
375 University Ave, Unit 102 Suite 3334
Toronto, ON M5G 2J5, Canada
We answer within 30 days. If you are not satisfied with our answer, the Office of the Privacy Commissioner of Canada at priv.gc.ca takes complaints about organizations subject to PIPEDA.