Privacy policy

Person in charge of the protection of personal information

The owner of CapSolde is the person in charge of the protection of personal information. For any question, request or complaint: confidentialite@capsolde.ca.

What we collect

• Your account: your email address and your password. The password is stored in hashed form by our authentication provider; no one at CapSolde can read it.
• Your budget: what you enter yourself, such as balances, income, expenses, transactions, debts, investments, savings goals, envelopes, categories and descriptions, and the history of changes.
• Two-step verification, if you turn it on: the key shared with your authenticator app, stored by our authentication provider.
• AI help, only if you turn it on and ask for it: the sentence you write, today’s date and the lists of allowed categories and payment methods, and a usage counter to prevent abuse.
• Technical information: IP address, browser type and sign-in times, recorded in our providers’ logs to run and protect the service.
• Application error reports: when CapSolde runs into an unexpected error, the technical message, the page, the app version and the browser type are recorded in our database, with your account identifier if you are signed in. Never your budget content; email addresses are masked.

Why we use it

• Create your account, sign you in and keep your budget up to date across your devices.
• Calculate your forecasts, envelopes and repayments from what you enter.
• Protect your account: verify your identity, prevent abuse and investigate an incident.
• Suggest a transaction from your sentence, if you ask for AI help.

We do not sell or rent your information. CapSolde shows no ads and uses no analytics tool, advertising cookie or tracker.

On your device

So you can read your budget without a connection, an encrypted copy is kept in your browser, along with your language choice. It is erased from the device when you delete your account.

Importing a bank statement

You can import a statement downloaded from your bank (CSV or OFX file). CapSolde never connects to your bank and never asks for your banking credentials.

• The file is read on your device, in your browser. It is never sent to our servers or to a provider. It only stays in memory during the analysis: it is saved neither in your budget nor on the device.
• The account number shown in the file is displayed masked to help you pick the right account; it is not kept.
• Only the transactions you confirm are added to your budget. For each one, we keep the description as it appears on the statement (any card or account number in it is masked, except the last 4 digits), the date recorded by the bank and, if the file provides it, the bank’s transaction number, so an already imported transaction can be recognized.
• For each import, we keep the file name, its digital fingerprint (which recognizes the same file without keeping its content), the period covered and the list of changes made, so you can undo the import.
• This information is part of your budget: it is protected, kept and deleted the same way.

Who receives your information

Only people signed in to your account see your budget: you, and anyone you might give access to later. We use providers, bound by contract, only to run the service:

• Supabase: database and authentication. Your data is hosted in Canada (Montréal region).
• Netlify: hosting of the website pages (global network; company based in the United States). It does not receive your budget.
• OpenAI (United States): only if you ask for AI help, for the sentence sent. It is not used to train its models; the provider may keep it for up to 30 days to prevent abuse.
• An email delivery service, for confirmation and password reset messages.

Some of these providers are located outside Quebec. Before sharing information with them, we assess whether it will be adequately protected. We do not share any information with anyone else, unless required by law.

How we protect it

• Encryption in transit (HTTPS) and on our providers’ servers.
• Access rules in the database: an account can only reach its own budgets.
• Optional two-step verification: if you turn it on, your budget only opens with the code from your app, even for someone who knows your password.
• Access to administration tools limited to the person in charge, and deployments checked automatically before going live.

How long we keep it

• As long as your account exists.
• When you delete your account, it is erased immediately and permanently, with all your budgets. Our servers’ automatic backups erase themselves after 7 days.
• We only keep a minimal record of the deletion (the account’s technical identifier and dates, with no email or content), to erase your data again if an older backup ever had to be restored.
• For accounts moved to the new version of CapSolde on October 11, 2026, the former copy is kept until November 10, 2026 to allow a rollback, then destroyed.
• Technical logs are kept for a few days by our providers.
• Error reports are erased after 30 days, and immediately if you delete your account.

Your rights

• See your information and get a copy: Settings > “Download my data”, or by email.
• Correct your information: directly in the app, or by email.
• Delete your account and your data: Settings > “Delete my account”.
• Withdraw your consent to AI help: turn it off in Settings at any time.

For any request: confidentialite@capsolde.ca, from your account’s email address. We answer within 30 days. If you are not satisfied with our answer, you can file a complaint with the Commission d’accès à l’information du Québec.

Confidentiality incident

If an incident affects your information and presents a risk of serious injury, we will inform you and the Commission d’accès à l’information, and take steps to limit its effects. We keep a register of such incidents.

Changes

We will update this policy if what we collect or our providers change. The date at the top of the page shows the latest update. For any question: confidentialite@capsolde.ca.