TariffWise

Privacy Policy

Effective date: April 6, 2026 · Jurisdiction: Canada (PIPEDA)

Plain language summary: We collect only what we need to run TariffWise. Your business data is stored in Canada. We do not sell your data. You can delete your account and data at any time by contacting us.

1. Who We Are

TariffWise is operated by Don Moody, Edmonton, Alberta, Canada. We are subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

Privacy contact: tariffwise@gmail.com

2. What Information We Collect

Category	Specific data	Source
Account identity	Name, email address, Google account ID, profile photo URL	Google Sign-In (OAuth)
Company profile	Business name, address, BN/import number, contact details, commodity categories, trade agreement elections	You enter this directly
Shipment data	Supplier details, HS codes, product descriptions, shipment values, duty estimates, landed cost calculations	You enter this directly
Generated documents	PCP/PRS drafts generated by the AI assistant	AI-generated from your inputs
Usage data	Features accessed, session timestamps, general app interaction (no keylogging)	Automatically collected
Technical data	Browser type, device type, IP address, Firebase anonymous analytics	Automatically collected

We do not collect: payment card numbers, government-issued ID numbers (SIN, passport), or sensitive personal information about individuals beyond what is listed above.

3. How We Use Your Information

To provide the Service — authenticating your account, saving your company profile and shipment data so it persists between sessions
To power AI features — your inputs are sent to Anthropic's API to generate guidance, document drafts, and cost estimates. See Section 5 for details.
To improve the Service — understanding which features are used most, identifying errors, and improving AI prompts
To communicate with you — responding to support requests, notifying you of material changes to this policy or our Terms
To comply with law — we may process data as required by applicable Canadian law

4. Data Storage and Location

Your data is stored in Google Cloud Firestore, Canada (Montreal region — northamerica-northeast1). This means your data remains subject to Canadian jurisdiction and does not leave Canada for storage purposes.

Firebase Authentication data (your Google account identity) is managed by Google and subject to Google's Privacy Policy.

5. Third-Party Services We Use

Service	Purpose	Data shared	Privacy policy
Google Firebase / Firestore	Database, authentication, hosting	All app data	Google Privacy Policy
Anthropic (Claude API)	AI-powered guidance and document generation	Your text inputs sent to generate responses — not your account identity	Anthropic Privacy Policy
Google Sign-In (OAuth)	Account authentication	Name, email, Google ID	Google Privacy Policy

We do not sell your data to any third party. We do not use your data for advertising.

6. AI and Your Data

When you use AI-powered features (the First Shipment Wizard, PCP Generator, or AI chat), the text you enter is transmitted to Anthropic's API to generate a response. Anthropic's data handling for API inputs is governed by their privacy policy and API terms. We do not send your company name, email, or account identity to Anthropic — only the business content you type into AI-powered fields.

We recommend you do not enter personally identifiable information about individuals (e.g., employee names, personal addresses) into AI input fields.

7. Data Retention

Account and business data: Retained while your account is active and for up to 90 days after account deletion, then permanently deleted.
Usage and technical logs: Retained for up to 12 months for debugging and service improvement.
Backup data: May be retained in encrypted backups for up to 30 days after deletion from live systems.

8. Your Rights Under PIPEDA and PIPA

You have the right to:

Access — request a copy of the personal information we hold about you
Correction — request correction of inaccurate information
Withdrawal of consent — withdraw consent to our collection and use of your personal information (note: this may require us to close your account)
Deletion — request deletion of your account and associated data
Complaint — lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca or the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca

To exercise any of these rights, contact us at tariffwise@gmail.com. We will respond within 30 days.

9. Security

We use industry-standard security measures including:

HTTPS encryption for all data in transit
Google Cloud's encryption at rest for Firestore data
Firebase Security Rules to restrict data access by authenticated user
API keys stored server-side, never exposed in client code

No system is 100% secure. If you become aware of a security issue, please contact us immediately at tariffwise@gmail.com.

10. Children's Privacy

TariffWise is a business tool intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have done so, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the effective date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Our Privacy Officer

For any privacy-related questions, requests, or complaints:

Don Moody — Privacy Officer, TariffWise
Edmonton, Alberta, Canada
tariffwise@gmail.com