Privacy policy
Last updated October 2026
Draft for the free beta
This page is a plain-language draft written before launch. A lawyer will review it before SmartACB charges for anything. If something here is unclear, email us and we will fix the wording.What we collect
Your name, email address and password hash when you create an account. The brokerage accounts, securities and transactions you enter or import, and the files you upload while importing. Basic technical logs (IP address, browser, errors) kept for security and debugging.
What we do with it
We use your transactions to calculate your adjusted cost base and capital gains for you, and for nothing else. We do not sell personal data, share it with advertisers, or use it to train AI models. We send account emails (verification, password resets) and nothing promotional unless you opt in.
AI document reading
If you upload a PDF, screenshot or other document, its contents are sent to Google's Gemini API to extract the transactions, under terms where Google does not use the data to train its models. The document itself is not stored by SmartACB: we keep only a fingerprint of the file, the rows the model produced and the token counts, so the same file isn't processed twice. You review every extracted row before anything is saved.
Where it lives
Your data is stored in a managed PostgreSQL database hosted in Canada and encrypted at rest and in transit. Imported files are processed to produce transactions and are not kept as files. Exchange rates come from the Bank of Canada's public API; your data is not sent to them.
Your choices
You can export everything as CSV at any time from the dashboard. You can delete your account from Settings, which permanently removes your accounts, transactions and imports. Backups are purged within 30 days.
Contact
Questions about privacy: use the feedback link in the app footer, or write to the address shown there. The service is operated from Ontario, Canada and lives at smartacb.com.