Privacy policy

T776 Ledger turns your bank and credit-card statements into a T776 rental summary. That means we handle financial information about you, so this page says plainly what we collect, where it goes, how long we keep it, and how to delete it. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

• Your email address, to sign you in.
• Your province and the tax years you work on.
• Your properties: address, your ownership share, whether you live there, and tenants you choose to enter (a label such as “Unit A” is enough).
• Your statements' contents: each transaction's date, description, amount and running balance, and each statement's period and balances. For accounts, only the bank, the type and the last four digits — full account numbers are masked before anything is stored or sent for reading.
• Your decisions: how you sorted transactions and the rules you saved.
• Payment records: what you paid for and when. Card details go to Stripe; we never see them.

What we don't keep

• The statement files themselves. Each file is deleted as soon as it's read. A file that couldn't be read is kept for 24 hours so you can retry — or 7 days if you ask us to keep it to fix the problem — then deleted at the next daily clean-up. Every deletion is logged.
• The details of your personal transactions. When you finish reviewing a year — or 90 days after they're sorted — a personal transaction's description is erased. Only its amount, date and an anonymous fingerprint remain, so the same file isn't counted twice.
• The reading of a statement. When a statement reads cleanly, the model's transcription isn't kept. When it doesn't add up, it's kept up to 30 days to diagnose the problem.

Who processes it, and where

Your data is stored in Canada. To read your statements and sort your transactions, their contents are sent to Anthropic in the United States, where it may be accessible to authorities under U.S. law. Anthropic doesn't use this data to train its models and keeps it only for a limited period under its commercial terms. What we send for sorting is limited to transaction descriptions, amounts and dates, your properties' nicknames and rent amounts — never their addresses or your tenants' names.

How long we keep the rest

• Years you've paid for: until you delete them or your account, so corrections and rules carry over to next year.
• Unpaid years: if you don't sign in for 30 days, their statements and transactions are deleted. We email you 7 days before, and signing in cancels it. Your properties and rules are kept.
• Backups of the database are overwritten on a rolling schedule; deleted data leaves them when they roll over.

Your choices and rights

• See it: download everything we hold about you from your Account page.
• Correct it: change any transaction's category, property or your settings at any time.
• Delete it: “Delete everything” on your Account page deletes your account and all your data immediately. Stripe keeps its own payment records as the law requires of it.
• Ask or complain: write to our privacy officer at privacy@t776ledger.ca. You can also contact the Office of the Privacy Commissioner of Canada.

Cookies

Only the ones needed to keep you signed in. Our analytics don't use cookies.

Security

Each person's data is walled off from everyone else's at the database level, files sit in a private store only you can reach, and data is encrypted at rest. If a breach ever puts you at real risk of significant harm, we'll tell you and the Privacy Commissioner, as the law requires.

Who it's for

Adults with rental property in Canada. We don't yet serve residents of Quebec.

Changes

If we change how we handle your information in a way that matters, we'll email you before it takes effect.