Short version: we collect as little as we can, we never sell anything, and the most sensitive things you show us (CRA letters, your social insurance number) are not kept on our server at all.
What we collect, and why
Questions you ask the AI assistant. Your question goes to our AI provider to write the answer. Before anything is stored, long numbers that look like a SIN, an account or a phone number are removed. We keep the last 1,000 questions, without names or IP addresses, to find mistakes and improve answers.
CRA letters you upload. The file is read once to explain it, then deleted at the end of the request. We do not store the letter, its contents, or the result. We keep only a count of what kind of letter it was (for example “reassessment, 2025”).
Calculators. The math runs in your browser. The numbers you type are saved in your own browser so they are still there next time. They are not sent to us.
SmartFiles. When you buy a SmartFile we keep your email address, your province (to charge the right GST/HST), the price, and the date. Your answers inside the SmartFile are saved in your browser, not on our server. Your social insurance number is typed straight onto the CRA form in your browser and is never sent to us or saved. When you ask a SmartFile to draft text (for example an objection statement), the facts you entered are sent to our AI provider to write the draft and are not stored by us. We also record simple progress steps (started, form filled) so we can help if you get stuck.
Return Check, Refund Finder, Letter Check and the Review Response Pack. Your documents are turned into page images in your own browser first. In PDFs, anything that looks like a social insurance number is blacked out before a page leaves your computer; in photos we cannot detect it, so please cover it. The pages go to our AI provider once to be read, are never saved on our server, and are deleted at the end of the request. The result comes back to your browser and is kept there, not with us. We keep a count of checks used on your order and the size of each request, so we can limit use and watch costs.
Payments. Card payments are handled by Stripe. Your card number never reaches us. Stripe tells us the payment went through, your email and the amount.
Messages you send us. Contact form messages and problem reports are kept in our admin system so we can reply.
Who else sees it
- Anthropic (the company behind the Claude AI models) processes questions, letters, documents sent for a check, and SmartFile drafts to produce answers, under commercial terms that do not allow it to train its models on that data.
- Stripe processes payments.
- Hostinger hosts our server.
Some of these companies process data outside Canada, including in the United States, where it may be accessible to authorities there under local law. We do not sell or rent personal information, we do not use advertising trackers, and we do not share anything with the Canada Revenue Agency.
How long we keep it
- AI questions: the last 1,000, with numbers removed.
- Uploaded letters: not kept.
- SmartFile orders and payment records: seven years, because tax law requires us to keep business records.
- Emails with you: as long as needed to deal with your request, then deleted within two years.
Cookies and browser storage
We do not use advertising or tracking cookies. Your browser stores your calculator numbers, your chat for the current visit, and your SmartFile answers, so your work is not lost. You can clear them at any time in your browser settings. Clearing them also clears your SmartFile answers, so download a backup from inside your SmartFile first.
Who is responsible
CanadianTaxes.ai is operated by 2121724 Ontario Inc., Ontario, Canada. GST/HST registration number: 852252188 RT0001.
That company is responsible for the personal information described on this page. Reach us through the contact page.
Your rights
You can ask what personal information we hold about you, ask us to correct it, or ask us to delete it (except records the law makes us keep). Use the contact page and choose “Privacy or my personal information”. We answer within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.
Keeping it safe
The site runs only over an encrypted connection. Access to our systems is limited and protected by strong passwords. No system is perfect; if we ever have a breach that puts you at real risk, we will tell you and the Privacy Commissioner, as Canadian law requires.
Last updated October 2026. We will post any change here with a new date.