MapleTax is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights as a Canadian user under PIPEDA (Personal Information Protection and Electronic Documents Act).
1. Information We Collect
We collect only the information necessary to provide the MapleTax service:
- Account Information: Email address used to create your account via Supabase authentication.
- Receipt Data: Vendor names, dates, amounts, HST, categories, and descriptions you enter or scan.
- Business Profile: Optional business name, address, HST/GST registration number, and fiscal year you provide.
- Receipt Images: Photos or images you upload for AI-assisted scanning. Images are processed and not stored permanently.
- Usage Data: Basic app usage data such as scan counts, used to enforce plan limits.
2. How We Use Your Information
- To provide the receipt scanning, storage, and export features of MapleTax.
- To calculate HST and generate CRA-compliant expense reports.
- To sync your data securely across devices (paid plans).
- To manage your subscription and enforce plan feature limits.
- To respond to support requests you submit.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
3. AI Processing (Gemini Vision)
When you scan a receipt, the image is sent to Google's Gemini Vision API for text extraction. This processing is governed by Google's privacy policy. Images are transmitted securely over HTTPS and are not stored by MapleTax after processing is complete.
4. Data Storage (Supabase)
Your receipt data and account information are stored securely using Supabase, a cloud database platform with enterprise-grade encryption at rest and in transit. Data is stored in compliance with applicable Canadian privacy laws.
5. CRA Record Retention
The Canada Revenue Agency requires businesses to retain financial records for a minimum of 6 years. MapleTax Pro retains your receipt data for this period to support CRA compliance. You may request deletion of your data at any time, subject to any legal retention obligations.
6. Data Sharing
We share your data only with the following service providers as necessary to operate MapleTax:
- Supabase — secure cloud database and authentication
- Google Gemini API — AI receipt scanning
- Apple — in-app purchase processing (paid plans)
- RevenueCat — subscription management
All service providers are contractually required to protect your data and use it only as directed by us.
7. Your Rights (PIPEDA)
As a Canadian user, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and data
- Withdraw consent for non-essential data processing
- File a complaint with the Office of the Privacy Commissioner of Canada
To exercise any of these rights, contact us at privacy@getmapletax.ca.
8. Data Security
We implement industry-standard security measures including TLS/HTTPS encryption for all data in transit, AES-256 encryption for data at rest, row-level security policies, and regular security reviews. However, no method of transmission over the internet is 100% secure.
9. Children's Privacy
MapleTax is intended for use by individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page and, where appropriate, through the app. Continued use of MapleTax after changes constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related questions or requests:
- Email: privacy@getmapletax.ca
- Website: getmapletax.ca