Privacy notice
The short version
Most of the site needs an account and a paid plan. The home page, the prices, this notice and the terms are free to read. We use no ads and no tracking. The only cookie we set is the one that keeps you signed in, if you sign in.
When you use one of our tools, our server reads what you typed, gives you the answer, and forgets it. It keeps a report only if you press "Save to my reports", and then it is locked with a key.
Our server runs in Montréal, Canada.
If you ask the assistant a question, we take out the personal details we can find. Then the question goes to Anthropic, in the United States, so its AI can write the answer.
Who is responsible
Stakkz Inc. runs this website.
The person in charge of protecting your personal information is our founder. You can write to them at contact@stakkz.ai.
What each part of the site does with your information
Reading articles. We get nothing from you. Our host keeps a short technical record, explained below.
Choosing your province. Your language and province are saved in your own browser, so the site can offer them next time. They are never sent to us. Use "Forget my choice" on the home page to clear them.
Asking a question. Your question goes to our server. We try to take out names, SIN, card and account numbers, phone numbers, email addresses, postal codes, birth dates and street addresses. Then the question goes to Anthropic, with parts of our articles. Please leave personal details out anyway.
Checking your report for mistakes. What you type about each item goes to our server: the company name, account number, dates, amounts, status, and what you say is wrong. The server uses it to check the rules for your province. It keeps none of it unless you press "Save to my reports" (see "Your saved reports" below).
Uploading your report. If you upload the PDF, our server reads the words on it. First it takes out your name, your address, your birth date, your SIN, your phone number and your email, and shortens long card numbers. Then it sends the rest to Anthropic, in the United States, whose AI sorts the items into a list for you to check. The PDF itself is never kept. Anthropic deletes what it received within 30 days.
Saving your work. The file is saved on your own device. We never see it.
Comparing products and checking published rules. What you type, like months in Canada, a credit score you know, income or a price, goes to our server to sort the list or check the rules. We do not keep it.
Your account, if you make one
Signing in. There is no password. You give us your email address. We send you a link. We keep your email address, a record of each link we sent you, a record of your sign-in, and the date you last signed in. That is all, unless you save a report (see "Your saved reports" below).
The cookie. When you sign in, we set one cookie in your browser. It holds a random code that says which sign-in is yours. It lasts 30 days. It is not used to track you. Signing out removes it.
Where it is kept. Your account is kept in a database run for us by Supabase, in its Canada (Central) location. The sign-in email is sent for us by Resend, in the United States. Resend gets only your email address and the link.
Paying. When you pay for a plan, you type your card on a page run by Stripe. Stripe gets your email address, your card, and the address it needs to work out sales tax. Stripe keeps your card. We never see it. We keep only a Stripe customer number, the date your plan is paid to, whether it renews, and the language you chose. Stripe handles this in the United States.
Before a plan renews, we email you the date and the amount.
Seeing it. Your account page shows what we hold about you.
Deleting it. Press "Delete my account" on your account page. Your sign-in and your plan are removed at once. We ask Stripe to delete your customer record too. Stripe keeps the payment history the law makes it keep. We keep only your email address for 30 days, so you can undo the deletion by signing in again. Then it is gone.
If you do not sign in for 24 months and have no plan, we delete your account.
Your saved reports
Saving is your choice. Nothing from your report is kept until you press "Save to my reports".
What is saved: the items you listed, what you said is wrong with each one, the name, address and birth date you typed for the letters, the date you sent the letters, and what the bureau answered. Never your SIN.
How it is kept. It is locked with a key before it is stored. The database holds only the locked form. The key is not in the database.
Where. In the same Supabase database as your account, in Canada.
How long. Until you delete the report, or your account. Deleting your account deletes every report at once.
One email. If you tell us you sent your letters, and the time for an answer passes with no answer recorded, we send you one email to say so. It names no account and no amount.
Why we use it
Only to give you the answer on the page. We do not use it for ads. We do not build a profile of you. We do not sell or rent anyone's information.
Who else handles it
Vercel hosts our website and our server. Pages reach you from the Vercel location closest to you. Our server runs in Vercel's Montréal location.
Vercel keeps a short technical record of each visit: the time, the page, the type of browser, and your internet address. It keeps this record for no more than one day. The record does not include what you type into our tools.
Anthropic runs the AI that writes the assistant's answers and reads uploaded reports. It gets questions asked on the "Ask a question" page and the words of reports you upload, with the personal details we could find taken out. It processes them in the United States.
Anthropic deletes these questions and answers within 30 days. If its safety systems flag one, it may keep it for up to 2 years. It may also keep data when the law requires it. Anthropic says it never uses this data to train its AI without permission, and we have not given it.
Supabase, Resend and Stripe are named above, under your account. Supabase keeps a technical record of our server's requests for 7 days. We built it so that your email address is never in that record. Resend keeps a copy of the emails it sends for us for 30 days. No one else gets your information from us.
Information that leaves Canada or Quebec
Four things leave Canada. A question to the assistant goes to Anthropic in the United States. The words of a report you upload, with your personal details taken out, go to Anthropic too. Your sign-in email goes through Resend in the United States. Your payment goes to Stripe in the United States. If you live in Quebec, this also means they leave Quebec. Everything else our server handles stays in Montréal, and your account and your saved reports stay in Canada.
Tracking, location and profiles
We use no technology that identifies you, finds where you are, or builds a profile of you. There is nothing to turn off.
How long it is kept
What you type into our tools: not kept by us, unless you save a report.
A report you upload: the file is not kept. The words, with your details taken out, stay at Anthropic up to 30 days.
A report you save: until you delete it or your account.
Vercel's technical record: no more than one day.
Questions to the assistant, at Anthropic: up to 30 days, or up to 2 years if flagged.
Your language and province: in your browser until you clear them.
Sign-in links: one day after they run out. Sign-in records: 30 days, or until you sign out.
Your account and plan dates: until you delete your account, or 24 months after your last sign-in or paid day. Then your email address for 30 more days, so you can undo.
Backup copies of our database: 7 days.
Emails we sent you, at Resend: 30 days.
Your payments, at Stripe: as long as the law makes Stripe keep them.
How we protect it
Everything travels over a secure connection. Our pages load no code from other websites. Our server saves nothing you send unless you ask it to, and what you save is locked with a key. Tests check all of this on every change.
Your rights
You can ask us what information we hold about you, and ask us to correct it. Your account page and your saved reports show it. We do not keep what you type into the tools unless you save a report. Write to contact@stakkz.ai.
You can delete your account yourself, at any time, from your account page.
You choose what to type. You can stop using a tool at any time.
If you are not happy with our answer, you can complain to a privacy commissioner. In Quebec, that is the Commission d'accès à l'information. Elsewhere, it is the Office of the Privacy Commissioner of Canada or your province's commissioner.
Changes to this notice
If we change how we handle information, we will change this page first and update the date below.