Privacy Policy

Effective date: September 22, 2026.

What we collect

• Account information (email and sign-in credentials, managed by our authentication provider, Clerk — we do not store your password).
• Financial profile data, conversation transcripts, and plan outputs you provide or generate through the service.
• Technical logs with PII redaction (no profile contents in logs).
• The days you sign in to the app (the date only, not what you did), so we can understand how often the service is used. This stays in our own database, is never shared, and is deleted with your account.

How we use it

• To authenticate you and run the planning pipeline on your inputs.
• To store and deliver your intakes, runs, and artifacts.
• To operate, secure, and improve the service.

How we protect it

• Sensitive fields are encrypted at the application layer before database storage.
• Authentication is handled by Clerk; session tokens are verified server-side on every request. Legacy accounts' passwords are bcrypt-hashed — never stored in plaintext.
• Per-user server-side authorization on every data access.
• TLS required in production.

Retention & deletion

You may delete individual intakes or runs, or delete your entire account and all associated data from the dashboard. Runs and artifacts may be purged after a configurable retention period. Intake data persists until you delete it or your account.

Third parties & cross-border transfer

We use a small number of service providers to operate the service. Each processes only what its role requires:

• Clerk (authentication) — your email and sign-in credentials.
• Plaid (bank connections) — your banking credentials are entered with Plaid directly and never reach our servers; Plaid returns account and transaction data to us with your approval.
• Neon (database hosting) — stores your data; sensitive fields are encrypted by the application before storage.
• Vercel and Railway (application hosting) — serve the web interface and run the backend that processes your plan.
• Anthropic (AI intake) — conversation content is processed to extract and organise your profile information.
• PostHog (marketing-site analytics) — anonymous page-visit and sign-up counts from the public marketing pages only; see Analytics below.

These providers store and process data on infrastructure located in the United States. While your information is outside Canada, it is subject to the laws of that jurisdiction, and may be accessible to its courts and authorities under lawful access regimes. We rely on contractual safeguards and the technical measures described above (including application-layer encryption of sensitive fields) to provide comparable protection, as PIPEDA requires. We do not sell personal information.

Your rights and how to reach us

Under PIPEDA and applicable provincial privacy law, you may have rights to access, correct, or delete personal information. Our Privacy Officer is responsible for this policy and for handling privacy requests and complaints. To exercise your rights, or for any privacy question, email the Privacy Officer at support@mensarifinancial.com. If we become aware of a breach of security safeguards that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

Analytics

Our public marketing pages use PostHog, a privacy-focused product analytics service, to count page visits and sign-ups so we can understand which pages are useful. It is configured conservatively: no session recording, no capture of form contents or keystrokes, no advertising or cross-site tracking, and no analytics cookies (a random identifier is kept in your browser's local storage). Analytics runs on the marketing pages only — it is not loaded inside the signed-in application, and your financial data never reaches it. PostHog processes this data in the United States.