Privacy Policy

What HSLedger stores

HSLedger stores the information you enter or upload so it can show it back to you: your name, email and phone (if provided); personal income, expense, budget, savings, debt and goal records; business details and the income, expenses, receipts, invoices, customers, mileage and documents you record for each business; a credit score and credit balances if you choose to enter them; and your notification preferences.

Why it is stored

Only to provide the product to you: dashboards, reports, reminders, exports and the Quick Answers answers about your own data. HSLedger does not sell your information and does not use it for advertising.

What HSLedger does not collect

HSLedger never asks for your bank or credit-card passwords, your Social Insurance Number, CRA credentials or credit-bureau logins. There is no connection to your bank, to Equifax or TransUnion, or to the CRA.

Where it lives and who can see it

Your records are stored in Canada. The database and private file storage (Supabase, on AWS in the ca-central-1 region, Montréal) hold your financial records, uploaded documents and vehicle data on Canadian soil, encrypted in transit and at rest. Row-level security rules mean only your signed-in account can read or change your rows and files. The person who operates HSLedger does not browse customer data; access is limited to what is needed to keep the service running or to respond to a support request you make.

Pages are served through Vercel’s global network, so the page itself may be delivered from a server near you — but your records are read from and written to the Canadian database. If you use the optional AI features below, the text of that request is processed outside Canada; everything else stays domestic.

Optional AI features

If enabled, Quick Answers and receipt suggestions may send the relevant text of your question, a summary of your records, or a receipt image to an AI provider (Anthropic) to produce an answer or suggestion. Suggestions are never applied without your confirmation.

Emails

HSLedger sends account emails (confirmation, password reset) and, only when you turn them on, reminders such as overdue invoices or monthly summaries. Marketing emails are not sent without your consent.

Export and deletion

You can export your records as CSV from Reports, Tax-Time and Account, and you can delete your account and all of its data from Account → Privacy & data. Deletion is permanent.

Canadian privacy principles

HSLedger is designed around the principles of Canada's PIPEDA: collect only what is needed, use it only for the stated purpose, keep it secure, and let you access, correct, export or delete it. This is a description of how the product is built, not a claim of any certification.

Contact

Privacy questions: hsbizhub26@gmail.com.