Privacy Policy

Last updated: March 2026

1. Information We Collect

When you create an account, we collect your email address and name through our authentication provider (Clerk). When you complete onboarding, we collect your company name, province of incorporation, incorporation date, fiscal year end, and shareholder information.

2. Corporate Documents

Documents you upload to Formbase (such as certificates of incorporation, articles of incorporation, or shareholder agreements) are stored encrypted and used solely to pre-populate your company profile and provide context for document generation. We do not share uploaded documents with third parties.

3. Generated Documents

Documents generated by Formbase are stored in your account and are accessible only to you. Generated documents are deleted upon account cancellation after a 30-day grace period.

4. Financial Data

Retained earnings balances, dividend history, and expense records you enter are stored to provide Formbase's services. This financial data is never shared with or sold to third parties.

5. Bank Account Data

If you choose to connect your bank account, Formbase uses Plaid to securely access your banking information. We collect bank transaction data including transaction descriptions, amounts, dates, and account balances. This data is used to categorize business expenses, monitor HST revenue thresholds, and verify payroll remittances. Bank transaction data is stored encrypted in our database and retained for 24 months from the date of collection. This data is never sold to third parties. It is accessible only to you and any accountant you have connected to your Formbase account. You may disconnect your bank account at any time from Settings. You may request deletion of your bank transaction data by contacting us at privacy@formbase.ca.

6. AI Processing

When you generate documents or use the compliance chat, your company context is sent to OpenAI for processing. We do not use your data to train AI models. OpenAI processes this data under their API data usage policy, which does not use API inputs for model training.

7. Data Storage

Your data is stored securely using Supabase (hosted on AWS). All data is encrypted in transit and at rest. We implement industry-standard security measures to protect your information.

8. Data Retention

We retain your data for as long as your account is active. Upon account cancellation, your data is retained for 30 days to allow you to download your documents, after which it is permanently deleted.

9. Your Rights

You can access, update, or delete your company data at any time through the Settings page. You can request complete deletion of your account and all associated data by contacting us.

10. Third-Party Services

Formbase uses the following third-party services: Clerk (authentication), Supabase (database and file storage), OpenAI (document generation and chat), Stripe (payment processing), and Plaid (bank account connectivity). Each service has its own privacy policy governing their handling of your data.

11. Contact

For privacy-related questions or data requests, contact us at privacy@formbase.ca.