Privacy Policy
Your data stays yours.
Effective April 1, 2026 · Last updated April 3, 2026
Our Core Commitment
Mosaic Finance is built on a privacy-first principle: we collect only the minimum information required to generate a meaningful financial plan for you. We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes — ever.
What We Never Collect
We have intentionally designed Mosaic Finance so that the following sensitive information is never requested, collected, or stored:
- Your legal name or government-issued identification
- Social Insurance Number (SIN)
- Bank account numbers, login credentials, or access tokens
- Credit card numbers (payments are processed securely by Stripe — we never see or store your card details)
- Exact home address
- Employer name or workplace details
You interact with Mosaic Finance using a self-chosen alias. We do not require — or want — your real name.
What We Do Collect
To generate a personalized financial plan, we collect the following through our conversational onboarding:
- Profile information: your chosen alias, province of residence, age range, employment type, and family structure
- Financial information: income ranges, expense categories, savings goals, debt categories, investment holdings (account types and approximate values), and risk tolerance
- Conversation transcripts: your interactions with our AI planning assistant, used solely to build your plan
- Account credentials: email address and password (or Google OAuth) for authentication only
How We Use Your Data
Your data is used exclusively to:
- Generate your personalized financial plan using AI
- Enable a registered financial professional to review your plan before delivery
- Provide you with market context and insights relevant to your profile
- Send you notifications you have opted into (plan ready, weekly market updates)
- Improve the quality and accuracy of our planning tools
We do not use your financial data to target advertising, build marketing profiles, or sell insights to third parties.
Professional Review & Confidentiality
Every financial plan generated by Mosaic Finance is reviewed by a registered financial professional before delivery. Reviewers see your alias, province, age, risk profile, and plan content — never your email, legal identity, or raw financial account details. Reviewers are bound by professional confidentiality obligations.
Data Storage & Security
- All data is stored in Canada (Supabase hosted in
ca-central-1, Montreal) and served from Canadian infrastructure (Vercel, Montreal region) - Data is encrypted in transit (TLS) and at rest
- Database access is controlled through row-level security policies — you can only access your own data
- Payment processing is handled entirely by Stripe. We never receive, process, or store your payment card information
Third-Party Services
We use the following third-party services to operate Mosaic Finance. Each processes only the minimum data necessary for its function:
- Supabase — authentication and database hosting (Canada)
- Anthropic (Claude) — AI plan generation (conversational data is sent for processing; not used to train models)
- Stripe — payment processing (PCI-DSS compliant; we never handle card data)
- Resend — transactional email delivery
- Vercel — application hosting (Montreal region)
- Sentry — error monitoring (no personal financial data is sent; only technical error context)
We do not use any advertising networks, tracking pixels, or data brokers.
Your Rights
You have the right to:
- Export your data — request a full copy of all data we hold about you
- Delete your data — permanently delete your account and all associated data at any time from your settings page
- Withdraw consent — stop using the service and request deletion at any time
- Opt out of communications — manage your notification preferences in settings or unsubscribe from any email
Cookies & Analytics
Mosaic Finance uses only essential cookies required for authentication and session management. We do not use third-party advertising cookies or cross-site tracking.
Children’s Privacy
Mosaic Finance is not intended for individuals under the age of 18. We do not knowingly collect data from minors.
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email to registered users. The effective date at the top of this page will always reflect the latest revision.
Contact
If you have questions about this privacy policy or your data, contact us at hello@mosaicfinance.ai.
ChainForge Labs · Saskatoon, Saskatchewan, Canada