Privacy policy

Who is responsible for your information

Atlas is operated from Québec by its founding team (“Atlas”, “we”). The legal entity is being incorporated; this section will be updated with its legal name and address upon registration.

The person in charge of the protection of personal information under Québec's Law 25 is Atlas's founder. For any question or request about your personal information: privacy@atlasfinance.app. We respond within 30 days at most.

Who and what this policy covers

Two distinct services:

• The website (atlasfinance.app) — usable without an account: information pages, blog, help centre, public calculators and newsletter.
• The application (my.atlasfinance.app) — wealth tracking, with an account.

Section 3 applies to site visitors; sections 4 to 8 to account holders.

If you visit the site (no account)

Audience measurement: the site uses Cloudflare Web Analytics, which counts page views, referrer and country without setting a cookie and without creating a persistent identifier. It does not follow anyone between sites and builds no visitor profile.

What we do not collect: no advertising pixel, no third-party tracker, no ad platform. The public calculators run entirely in your browser — the amounts you enter are never sent to our servers.

What exists nonetheless:

• Our host (Cloudflare) processes your IP address and technical logs to serve the pages and protect against abuse — like any website. We do not use these logs for individual tracking.
• A language-preference cookie (French/English) may be stored in your browser. It is the site's only cookie.
• Newsletter (optional): if you subscribe, your email address is stored by our sending provider (Resend, United States) with your language preference. Every email carries a one-click unsubscribe link, effective immediately.

If you create an account: what we collect

• At sign-up (required): first name, last name, email address — and, if you choose “Continue with Google”, the basic information of your Google profile (name, email, photo). There is no password: sign-in works with one-time codes or links sent by email, or via Google.
• Profile (optional — your call): date of birth, city and province, professional situation (job, employer, annual salary), family situation (marital status, dependents), investor profile, TFSA contribution room. This information only personalizes your projections, budget and copilot. The app works without it.
• Financial data you enter: accounts and balances (with monthly history), real estate (including its address if you enter it), alternative assets (including their storage location if you enter it), debts, goals (for an Education goal, the ages of the children concerned if you provide them), monthly budget. This data is the heart of the service: we keep it for the sole purpose of returning it to you and computing your indicators.
• Technical data: at sign-in, the IP address and browser type are associated with your session and a security log (section 8). If your sign-up comes from a tagged link on our own site (UTM parameters — a calculator, the newsletter), the origin is recorded once at sign-up, to measure which content brings in accounts — never updated afterwards, never linked to a third party. No precise geolocation, no biometric data.

What we do with it

• Run the service: display your wealth, compute your indicators, generate your exports.
• Sign you in and secure your account: one-time codes, sessions, attempt limiting, security log.
• Write to you for operational reasons: sign-in codes, incident notices, changes to this policy. Never advertising without your express consent (unchecked box at sign-up, revocable in Profile → Data).
• The AI copilot, if you enable it: see section 7.

We use your data for no other purpose. In particular: no sale, no rental, no commercial sharing, no advertising profiling, and no AI model training with your data — neither by us nor by our providers (Anthropic's API terms exclude training on submitted data).

Where your data goes: our providers, and transfers outside Québec

We have no server room and no infrastructure team: Atlas relies on specialized providers, bound by contractual data-protection commitments. Several are located outside Québec, mainly in the United States. By using Atlas, your information may therefore be stored or processed outside Québec, where it is subject to local laws. Here is the complete list — there are no others:

In accordance with Law 25, we assessed each of these communications (sensitivity, contractual protections, legal regime of the destination) before relying on them.

What never leaves our systems: exchange rates and crypto prices are fetched by our servers from public providers (Frankfurter, CoinGecko) with requests identical for every user — no personal data, not even your IP address, is sent to them. Fonts are self-hosted: your browser contacts no third party when loading our pages.

Public authorities: we only hand over information when a valid law or order requires it, and we inform you to the extent the law allows.

The AI copilot — its own section, because it is the most significant flow

The copilot is an optional conversational assistant. Here is exactly how it works:

• What is sent: with every message you send it, a summary of your situation is transmitted to Anthropic (the company behind the Claude model, United States) to generate the answer — your first name, your age (if provided), your income, expenses and savings (if provided), the name, category and balance of your accounts, your assets, your debts and their rates, your goals, plus the current conversation thread.
• What is not sent: your email address, your IP address, any account identifier.
• Consent: the copilot stays inactive until you enable it. The activation screen reminds you that it relies on your financial data and links, via “Learn more”, to this section — which constitutes the full disclosure (provider, United States location, retention); your activation click constitutes your express agreement. Revocable at any time in Profile → Data; the copilot then stops working, and nothing else changes.
• Retention: we do not record your conversations — neither on our servers nor in your browser; closing the panel clears them. Anthropic processes the data under its commercial API terms, which exclude use for training its models.
• Nature of the answers: the copilot provides educational information based on your data. It does not provide financial, tax or legal advice (see the terms of use) and cannot perform any operation: it reads, it does not write — a goal it suggests is only created if you confirm it yourself.

How long we keep your data

• Active account: as long as your account exists — returning your data to you is the service.
• Account deletion: available in your profile, immediate and irreversible for all your data (profile, accounts, history, real estate, assets, debts, goals, budget, sessions).
• What temporarily survives, for transparency: a security log (email address, IP address, timestamps of account events) is kept for 12 months after deletion, for fraud prevention, then purged automatically. Technical anti-abuse traces (expired sign-in codes, rate-limit counters) are purged within 90 days. Database backups expire on the provider's cycle (a few weeks at most).
• Abandoned sign-up: if you start signing up without finishing, the information entered (name, email) is purged within 90 days.
• Newsletter: your email is kept until you unsubscribe.

Your rights

Under Law 25 (Québec) and PIPEDA (Canada), you can:

• Access your information — easiest: the full export (JSON) in Profile → Data, self-service.
• Rectify it — editable directly in the application.
• Have it deleted — self-service account deletion (section 8).
• Obtain portability in a structured format (the JSON export).
• Withdraw a consent — news emails and copilot: settings in Profile → Data; newsletter: unsubscribe link.
• Request cessation of dissemination or de-indexing, where applicable.

To exercise a right that has no button: privacy@atlasfinance.app, response within 30 days. If you believe your rights are not respected, you can turn to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).

How your data is protected — without overselling

• Encryption in transit (TLS) between your browser and our servers, and between our servers and the database; encryption at rest provided by our database provider.
• No password to steal: sign-in relies on short-lived one-time codes, signed links, or Google. Attempts are rate-limited.
• Secure session cookies (HttpOnly, Secure), auto-expiring sessions, strict account isolation checked server-side.
• Let's be precise about what this does not mean: this is not “end-to-end” encryption. Our systems decrypt your data to do their job — compute your totals, generate your exports — and a very small number of authorized people at Atlas can access it for operations and support, with every access logged. No service that computes on your data can honestly claim otherwise.
• In the event of a confidentiality incident presenting a risk of serious injury, we inform you and the Commission d'accès à l'information as required by law, and we keep a register of all incidents.

Cookies and local storage

The application uses only strictly necessary cookies: the session cookie (keeping you signed in; deleted on sign-out or expiry) and a temporary sign-up cookie. The browser also stores your display preferences locally (language, theme, hidden amounts) — they do not leave your device, except the language, which syncs with your profile.

No advertising cookie, no analytics cookie, no third-party cookie — which is why there is no consent banner: there is nothing to consent to. The site's audience measurement (section 3) sets none either: it counts page views without writing anything to your browser.

Minimum age

Atlas is intended for people aged 18 and over. We do not knowingly create accounts for minors; any such account brought to our attention is deleted. Information about your relatives that you choose to enter (dependents, children's ages for an Education goal) is your decision and serves only your own calculations.

Changes to this policy

Any material change (new purpose, new provider, new transfer) is announced to you by email and in the application at least 30 days before it takes effect — with the option to export your data and delete your account if you refuse it. Previous versions remain available on request.

Contact us

• Personal information: privacy@atlasfinance.app (response within 30 days)
• Security (vulnerability report): security@atlasfinance.app (response within 72 hours, treated confidentially)
• General questions: support@atlasfinance.app

History: v2.0 (August 2026) — complete rewrite: disclosure of providers and transfers outside Québec, AI copilot section, real retention periods, Law 25 framework. v1.0 (June 2026) — initial version.