Privacy Notice

Financtly Technologies Ltd · financtly.ca · Draft pending legal review

Where your data lives

Your books stay in Canada. Your financial records — transactions, invoices, documents, audit history, and backups — are stored and processed in Microsoft Azure's Canadian regions. Nothing in this category is replicated outside Canada.

Your sign-in account stays in Canada too. Your name, email, sign-in events and multi-factor authentication data are held in the same Canadian database as your books. Your password is never stored — we keep only a one-way scrypt hash of it, which cannot be reversed back into your password, and your authenticator secret is stored encrypted.

How AI is used, and what leaves Canada

This is the one thing we do that crosses the border, so we say it plainly. To suggest a category for a transaction, and to answer questions in the assistant, we send that transaction to Anthropic, whose service is not operated in Canada. Anthropic does not use data submitted through its commercial API to train its models.

What we send: your chart of accounts, and the one transaction being categorised — its description, amount, date, how it reached us, and the other party's name.

What we do not send: your business's name or identifier, your name, your documents or receipt images, your ledger, and your audit history. The model is shown a transaction and a list of accounts, not a named business.

This information is not anonymised. The amount, the date and the other party's name are sent as they are, and the other party can be an individual. We say this because the commitment further down — that data is de-identified before it is used to improve our models — is about a different thing, and we would rather be clear than let the two be read as one.

Reading a document is separate and is done by Microsoft Azure Document Intelligence, inside the Azure estate; your documents are never sent to an AI model.

Nothing is stored outside Canada as a result. This is processing in transit — every record we keep still lives in Canada. We cannot currently avoid this transfer: no provider offers this capability inside Canada at a scale a business of your size could fund, so we disclose it rather than imply otherwise.

Using your data to improve our models is a separate question, and the answer is off unless you turn it on. Consent is off by default, applies only from the moment you give it, and can be withdrawn.

Subprocessors

ProviderPurposeData location
Microsoft AzurePlatform hosting, storage, backupsCanada (Canada Central / Canada East)
Microsoft Azure Communication ServicesOutbound emailAzure estate
AnthropicAI categorisation of transactions, and the assistantOutside Canada — see “How AI is used” below
ResendInbound email receiving (in.financtly.ca only)United States
360dialogWhatsApp business messagingPer agreement
FlinksBank account connections (with your consent)Canada

The commitments that don't change