Privacy Policy

1. Information We Collect

We collect only the information necessary to provide our services.

2. How We Use Your Information

We use personal information to:

• Provide transaction synchronization and bookkeeping functionality
• Allow categorization of transactions
• Store and associate receipts
• Track tax-related amounts for reporting purposes
• Maintain historical financial records for users
• Improve system performance and security
• Respond to user inquiries and support requests
• Comply with legal obligations

We do not sell personal information.

3. Legal Basis for Processing

Under Canadian privacy law, Chronly collects, uses, and discloses personal information with user consent and only for reasonable and appropriate purposes related to providing financial recordkeeping services.

By creating an account and using the Service, you consent to the collection and use of your information as described in this Policy.

4. Plaid Integration

If you choose to connect a bank account:

• Chronly uses Plaid Inc. to securely access financial data.
• Plaid may collect and process your data in accordance with its own privacy policy.
• Chronly only receives the financial data necessary to provide transaction tracking functionality.
• Bank login credentials are handled directly by Plaid and are never stored by Chronly.

Plaid's privacy policy is available at: https://plaid.com/legal

5. Data Retention

Chronly retains personal information:

• For as long as your account remains active; and
• As necessary to provide the requested services; and
• As required by law.

You may request deletion of your account and associated data at any time. Upon verified request:

• Bank connections will be revoked;
• Transaction data and receipts will be permanently deleted from active systems;
• Data will no longer be accessible to you or Chronly.

Backup data is retained only for disaster recovery and is automatically overwritten according to system schedules.

For more details, see our Data Retention & Deletion Policy.

6. Data Security

Chronly implements appropriate administrative, technical, and physical safeguards to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification.

These measures include:

• Encrypted data transmission (HTTPS)
• Secure cloud infrastructure
• Access controls and authentication safeguards
• Limited internal access on a need-to-know basis

7. Disclosure of Information

We may disclose personal information only:

• To service providers (such as Plaid and cloud hosting providers) who support our operations;
• To comply with legal obligations;
• To protect rights, property, or safety;
• In connection with a merger, acquisition, or business restructuring.

All service providers are required to safeguard personal information.

8. International Data Transfers

Some service providers may store or process data outside of Canada. Where this occurs, information may be subject to the laws of the jurisdiction where it is processed. Chronly ensures that appropriate safeguards are in place.

9. Your Rights

You have the right to:

• Access your personal information
• Request correction of inaccurate information
• Withdraw consent (subject to legal or contractual restrictions)
• Request deletion of your personal information
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, contact: [email protected]

10. Children's Privacy

Chronly is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date.

12. Contact Information

For privacy-related questions, contact: