Privacy Policy

This Privacy Notice for AdvisorBrief ("we," "us," or "our") describes how and why we might collect, store, use, and share your information when you use our services ("Services"), including when you visit advisorbrief.ca or use any of our AI brief generation tools.

Questions or concerns? Reading this notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, please contact us at info@advisorbrief.ca.

01

What Information Do We Collect?

Information You Provide to Us

We collect personal information you voluntarily provide when you use our Services. The personal information we collect depends on the context of your interactions with us and the choices you make.

Waitlist. If you join our waitlist, we collect and retain your email address so we can contact you about AdvisorBrief.

Advisor profile (onboarding). Guest profiles are not saved to an AdvisorBrief account, although the current browser tab may retain working form state. When a guest chooses Generate or Regenerate, only the bounded profile details needed for that request are sent through AdvisorBrief's server to its configured AI provider. If you sign in, AdvisorBrief can save your advisor profile to your account in a database region located in Canada.

Account and sign-in. Choosing Google sign-in navigates your browser to Google's identity service. Google receives ordinary browser request information under its terms. After authentication, AdvisorBrief receives the email address and basic identity information needed to establish your account session and associate it with a saved advisor profile. This identity-provider navigation is separate from brief generation.

Cookies and Tracking

AdvisorBrief application code records authoritative aggregate generation counters inside the generation endpoint after a validated request reaches provider dispatch. Fixed counters cover tool, operation, success or failure, and an allowlisted failure category. The browser may separately send unauthenticated engagement events; those can be inflated by scripted callers and are not treated as user, visit, conversion, funnel, or reliability metrics. Application-defined metric keys do not contain names, firm names, advisor-profile fields, client facts, prompts, generated output, free text, IP addresses, or raw error bodies. IP addresses are used separately for abuse-prevention rate limiting.

We do not use advertising or tracking cookies, tracking pixels, advertising networks, or third-party web analytics tools. When you sign in, we set a strictly necessary, http-only session cookie to keep you signed in; it is not used to track you. We use browser local storage for preferences such as theme and browser session storage to preserve form drafts and validated outputs during the current tab session.

02

How Do We Process Your Information?

We process your information to provide, improve, and administer our Services, to communicate with you, and to comply with law.

Waitlist email. We use your email address to contact you about early access, product updates, and the full launch of AdvisorBrief. We do not sell, rent, or share your email address with third parties for marketing purposes.

Brief generation. When you choose Generate or Regenerate, the information needed for that request is sent through AdvisorBrief's server to its configured AI provider. AdvisorBrief application code is not designed to log prompt bodies or generated output, or to write brief inputs or generated briefs to its application database or product analytics. Hosting and service providers may process operational logs, request metadata, and request data under their terms and deployed settings.

Legitimate interests. We may process your information where we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may analyze aggregate, anonymized usage patterns to improve the quality of our tools.

03

Third-Party Client Data

The types of third-party information that may be entered include client names or identifiers, financial data, professional information, demographic information, estate planning details, and investment history or preferences. AdvisorBrief does not save that information as a client record.

04

When and with Whom Do We Share Your Information?

We may need to share your personal information in the following situations:

• AI Service Provider. Brief input data is transmitted to Anthropic, Inc. to generate AI-powered outputs. Anthropic processes this data under its API terms, account settings, legal obligations, and abuse-prevention requirements. See anthropic.com/privacy for details.
• Hosting Provider. Our Services are hosted by Vercel, Inc. Vercel may process operational logs, request metadata, and transient request data under its terms and deployed settings. See vercel.com/privacy for details.
• Database Provider. If you create an account, your account email, advisor profile, and limited audit records can be stored with Supabase, our managed database provider, in a database region located in Canada. This applies to account data. Brief generation is processed outside Canada. See supabase.com/privacy for details.
• Authentication Provider. Choosing Google sign-in navigates the browser to Google, which processes ordinary browser request information and the sign-in. Google then provides AdvisorBrief the email and basic identity information needed to establish the account session. See policies.google.com/privacy for details.
• Legal obligations. We may disclose your information where required to do so by law or in response to valid requests by public authorities.
• Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

We do not sell your personal information. We do not share your information with advertising networks, data brokers, or social media platforms.

05

Do We Use Artificial Intelligence?

Yes. AdvisorBrief uses AI-assisted features for its core brief generation functionality. We use Anthropic's Claude AI models to process the information you enter in our tools and generate structured advisory briefs.

AI Service Provider: Anthropic, Inc. (San Francisco, California, USA).

Purpose: Brief generation based on information you provide about yourself and about your clients or prospects.

Data handling: AdvisorBrief currently uses Anthropic's commercial API. Anthropic's published standard API terms describe default retention and model-training practices, but AdvisorBrief has not verified that the deployed account has a zero-data-retention agreement. AdvisorBrief therefore does not claim zero provider retention.

We take reasonable steps to use AI responsibly and to be transparent about how AI-generated content is produced. The outputs generated by our tools are advisory in nature and do not constitute financial, legal, tax, or investment advice.

06

How Long Do We Keep Your Information?

Brief input data: Storage by AdvisorBrief is separate from processing by service providers. Guest setup may remain in browser memory or browser session storage. When you choose Generate or Regenerate, bounded request data crosses the AdvisorBrief backend and AI-provider boundary. AdvisorBrief application code is not designed to write brief inputs or generated briefs to its application database or product analytics. Hosting and service providers may process operational logs and request data, and the configured AI provider may retain request data under its own API terms and account settings.

Waitlist email addresses: Retained until you request removal. You may request deletion at any time by emailing info@advisorbrief.ca.

Advisor profile data: Guest profiles are not saved to an AdvisorBrief account, but bounded profile fields are processed when a guest chooses Generate or Regenerate. If you sign in, your profile is stored with your account until you delete it or ask us to close your account. To request removal, email info@advisorbrief.ca.

Account data: Retained while your account is active. The application deletion routine removes the account identity and saved advisor profile, subject to the limited surviving record described next and to separate service-provider processing and retention.

Security and audit records: The account deletion routine is designed to retain a limited account-deletion audit record after the account and profile are removed. Source shows that record containing the former account and firm identifiers, email address, deletion time, and deleted-row counts. Deployed retention settings for that record require separate verification.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

07

How Do We Keep Your Information Safe?

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. These include HTTPS encryption for all data in transit, strict Content Security Policy headers, and limiting the collection of personal data to what is necessary for our Services.

However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

You should only access the Services within a secure environment.

08

Do We Collect Information from Minors?

We do not knowingly solicit data from or market to children under 18 years of age. AdvisorBrief is a professional tool designed for use by financial industry professionals. If you become aware that a child has provided us with personal information, please contact us at info@advisorbrief.ca.

09

What Are Your Privacy Rights?

Depending on your location, you may have certain rights regarding your personal information. These may include the right to:

• Request access to and a copy of the personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information
• Object to the processing of your personal information
• Request restriction of the processing of your personal information
• Request portability of your personal information
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us by emailing info@advisorbrief.ca.

We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

10

Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. We do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online, because we do not engage in tracking.

Similarly, we honor the Global Privacy Control (GPC) signal where required by applicable law. Because we do not sell personal data or use it for targeted advertising, the GPC signal does not require any change in our data practices.

11

Do US Residents Have Specific Privacy Rights?

Depending on the state where you reside, you may have additional privacy rights under applicable US state privacy laws, including but not limited to:

• California: California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)
• Colorado: Colorado Privacy Act (CPA)
• Connecticut: Connecticut Data Privacy Act (CTDPA)
• Virginia: Virginia Consumer Data Protection Act (VCDPA)
• Utah: Utah Consumer Privacy Act (UCPA)
• Texas, Florida, Montana, Oregon, and other states with enacted privacy legislation

Categories of personal information collected

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers (email address for waitlist and, if you sign in, your account email)
• Professional or employment-related information (role, firm name, AUM range)
• Inferences (advisor profile preferences derived from onboarding)
• Sensitive personal information entered by users about third parties (see Section 3)

Your California rights

California residents may request: (1) the categories and specific pieces of personal information we have collected; (2) the categories of sources from which personal information is collected; (3) our business or commercial purpose for collecting personal information; (4) the categories of third parties with whom we share personal information; and (5) deletion of personal information. We do not sell or share personal information for cross-context behavioral advertising.

How to submit a request

Submit a verifiable consumer request by emailing info@advisorbrief.ca. We will respond within 45 days as required. You may designate an authorized agent to make a request on your behalf.

We will not discriminate against you for exercising any of your CCPA rights.

12

Do Canadian Residents Have Specific Privacy Rights?

AdvisorBrief is operated from Canada and is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25).

Under PIPEDA and Law 25, Canadian residents have the right to access personal information we hold about them, request correction of inaccurate information, withdraw consent to collection or use, and file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or the Commission d'acces a l'information (CAI) in Quebec.

We are committed to responding to privacy requests within 30 days. To exercise your rights, contact us at info@advisorbrief.ca.

Quebec residents also have the right to be informed about the use of automated decision-making and to request human review of decisions made by automated means. AdvisorBrief's brief generation tools do not make binding decisions about individuals; outputs are advisory content generated for professional use only.

13

Do Other Regions Have Specific Privacy Rights?

EEA, UK, and Switzerland

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the EU General Data Protection Regulation (GDPR), UK GDPR, and the Federal Act on Data Protection (FADP) respectively. These include the rights listed in Section 9 above.

Our legal bases for processing personal information are:

• Consent (providing your email address for the waitlist)
• Legitimate interests (improving our Services, ensuring security)
• Legal obligation (complying with applicable law)

If you believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection supervisory authority.

14

International Data Transfers

Our Service Provider, Anthropic, Inc., is based in the United States. If you access our Services from the EEA, UK, or Switzerland, your information may be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.

Where we transfer personal data from the EEA or UK to a country not deemed adequate by the European Commission or UK ICO, we rely on Standard Contractual Clauses (SCCs) as adopted by the European Commission or the International Data Transfer Agreement (IDTA) for UK transfers, as applicable.

For more information about the safeguards in place for international transfers, please contact us at info@advisorbrief.ca.

15

Do We Make Updates to This Notice?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

16

How Can You Contact Us?

If you have questions or comments about this notice, you may contact us by email at info@advisorbrief.ca.

Mailing address:
AdvisorBrief
Vancouver, British Columbia, Canada

To review, update, or delete the data we collect from you, please contact us at info@advisorbrief.ca.