Privacy Policy

Your data stays yours.

Effective April 1, 2026 · Last updated April 3, 2026

Our Core Commitment

Mosaic Finance is built on a privacy-first principle: we collect only the minimum information required to generate a meaningful financial plan for you. We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes — ever.

What We Never Collect

We have intentionally designed Mosaic Finance so that the following sensitive information is never requested, collected, or stored:

  • Your legal name or government-issued identification
  • Social Insurance Number (SIN)
  • Bank account numbers, login credentials, or access tokens
  • Credit card numbers (payments are processed securely by Stripe — we never see or store your card details)
  • Exact home address
  • Employer name or workplace details

You interact with Mosaic Finance using a self-chosen alias. We do not require — or want — your real name.

What We Do Collect

To generate a personalized financial plan, we collect the following through our conversational onboarding:

  • Profile information: your chosen alias, province of residence, age range, employment type, and family structure
  • Financial information: income ranges, expense categories, savings goals, debt categories, investment holdings (account types and approximate values), and risk tolerance
  • Conversation transcripts: your interactions with our AI planning assistant, used solely to build your plan
  • Account credentials: email address and password (or Google OAuth) for authentication only

How We Use Your Data

Your data is used exclusively to:

  • Generate your personalized financial plan using AI
  • Enable a registered financial professional to review your plan before delivery
  • Provide you with market context and insights relevant to your profile
  • Send you notifications you have opted into (plan ready, weekly market updates)
  • Improve the quality and accuracy of our planning tools

We do not use your financial data to target advertising, build marketing profiles, or sell insights to third parties.

Professional Review & Confidentiality

Every financial plan generated by Mosaic Finance is reviewed by a registered financial professional before delivery. Reviewers see your alias, province, age, risk profile, and plan content — never your email, legal identity, or raw financial account details. Reviewers are bound by professional confidentiality obligations.

Data Storage & Security

  • All data is stored in Canada (Supabase hosted in ca-central-1, Montreal) and served from Canadian infrastructure (Vercel, Montreal region)
  • Data is encrypted in transit (TLS) and at rest
  • Database access is controlled through row-level security policies — you can only access your own data
  • Payment processing is handled entirely by Stripe. We never receive, process, or store your payment card information

Third-Party Services

We use the following third-party services to operate Mosaic Finance. Each processes only the minimum data necessary for its function:

  • Supabase — authentication and database hosting (Canada)
  • Anthropic (Claude) — AI plan generation (conversational data is sent for processing; not used to train models)
  • Stripe — payment processing (PCI-DSS compliant; we never handle card data)
  • Resend — transactional email delivery
  • Vercel — application hosting (Montreal region)
  • Sentry — error monitoring (no personal financial data is sent; only technical error context)

We do not use any advertising networks, tracking pixels, or data brokers.

Your Rights

You have the right to:

  • Export your data — request a full copy of all data we hold about you
  • Delete your data — permanently delete your account and all associated data at any time from your settings page
  • Withdraw consent — stop using the service and request deletion at any time
  • Opt out of communications — manage your notification preferences in settings or unsubscribe from any email

Cookies & Analytics

Mosaic Finance uses only essential cookies required for authentication and session management. We do not use third-party advertising cookies or cross-site tracking.

Children’s Privacy

Mosaic Finance is not intended for individuals under the age of 18. We do not knowingly collect data from minors.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. The effective date at the top of this page will always reflect the latest revision.

Contact

If you have questions about this privacy policy or your data, contact us at hello@mosaicfinance.ai.

ChainForge Labs · Saskatoon, Saskatchewan, Canada