Effective date: July 2026
This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use our website and application.
1. What we collect
We may collect:
- account information, such as your name, email, and login details;
- data you enter or import in the Service;
- billing and subscription metadata;
- support messages and operational logs;
- basic technical and usage data, including browser, device, and page activity.
2. How we use information
We use information to:
- provide and maintain the Service;
- process subscriptions and billing;
- secure accounts and prevent abuse;
- provide support and troubleshoot issues;
- improve reliability and usability;
- meet legal obligations.
3. How we share information
We use third-party providers (subprocessors) to help us operate the Service. These providers may process limited personal or account data on our behalf. Before adding a provider, we review its security practices and require protections for how it handles data, and we share only the data needed for the provider to do its job.
| Provider type | Purpose | Data processed |
|---|---|---|
| Payment provider | Subscription and billing processing | Billing contact and subscription metadata |
| Hosting provider | Application and database hosting | Account and application data needed to operate the Service |
| Email provider | Transactional email delivery | Email address and message content |
| Authentication provider | Optional sign-in | Name, email, and authentication tokens |
| Analytics provider | Website and product usage analytics | Device/browser and usage metadata |
| Monitoring provider | Uptime and error monitoring | Technical and operational logs |
This list is updated when provider categories are added or removed. For the specific vendors we currently use, see our Security page — that page is the single place we name them, so it stays current without duplicating names here. Some providers may process data outside your province or country — see International processing below.
We may also disclose information if required by law or as part of a merger, acquisition, or asset transfer. We do not sell personal information.
4. Cookies
We use cookies and similar technologies for sign-in, security, preferences, and analytics. You can manage cookies in your browser settings. Blocking essential cookies may affect core site or app functionality.
5. Data retention
We keep core account and portfolio data while your account is open. Temporary items — uploaded files, previews, generated reports, logs, and cached results — may be deleted once no longer needed.
You can request account deletion at any time, and we may archive or close inactive accounts after reasonable notice. Deleted data may remain briefly in backups, or longer where legal, billing, security, or fraud-prevention requirements apply.
6. Security
See our Security page for details on how we protect your account, ledger data, and billing information. No method of storage or transmission is completely secure — if you discover a potential vulnerability, contact us through our contact page.
You are responsible for keeping your account credentials secure.
7. International processing
Your information may be processed in jurisdictions outside your province or country. As a Canadian business, myCostBase’s collection and use of personal information is governed by the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
8. Your choices
Depending on your location, you may have rights to access, correct, delete, or object to certain uses of your information.
To make a request, contact us via Contact page or email support@mycostbase.ca.
9. Children’s Privacy
This service is intended for adult use. We do not knowingly collect information from children.
10. Policy updates
We may update this policy from time to time. Updates are effective when posted with a new effective date.
11. Contact
Questions or privacy requests:
- Contact: Contact page
- Website:
https://mycostbase.ca