Privacy Policy

1. Who we are

Nummo Financial Inc. (“Nummo”, “we”) is a Canadian company incorporated in Canada, with its registered office at 40 King St W, 41st Floor, Toronto, Ontario M5H 3S1. We provide online accounting software to Canadian businesses and the accountants who serve them.

Questions about this policy, or a request to exercise any right described in it, go to our Privacy Officer at [email protected]. We answer within 30 days, which is the limit both federal and Quebec law set.

2. The two kinds of information here

This distinction matters, because your rights differ depending on which one is involved.

Information about you, our customer

• Your name, email address and, if you give one, your phone number.
• Your business name, address and sales-tax registration numbers.
• How you sign in — a password we store only as a hash, or a Google or Microsoft account you choose to use.
• Billing details. Card numbers go directly to Stripe and never reach our servers; we hold the last four digits, the card brand and your subscription status.
• Technical records: IP address, browser, and a log of sign-ins and significant actions. We keep these to investigate security incidents and to show an audit trail.

Information you put into your books

Invoices, bills, expenses, payroll records, your chart of accounts, documents you upload, and the details of your own customers, suppliers and employees. Some of this is personal information about people who are not our customers — an employee’s SIN on a payroll record, for instance.

3. Why we collect it

We use the information above only to:

• provide the software — keep your ledger, calculate sales tax and payroll deductions, produce your statements and slips;
• authenticate you and protect the account against unauthorised access;
• take payment for your subscription;
• send you messages the service requires — sign-in codes, invoices we send on your behalf, notices about your account, and alerts you have switched on;
• support you when you ask for help;
• meet our own legal obligations, including tax and record-keeping law.

We do not sell personal information. We do not share it with advertisers. We do not use your books to train machine-learning models.

4. Where your data is held

In Canada. Nummo runs in Amazon Web Services’ Montreal region (ca-central-1), which is the only region our infrastructure is deployed to. Your ledger, your documents and your payroll records are stored there, encrypted at rest, in a database that is not reachable from the public internet.

Each business’s data is separated from every other business’s by the database itself, using row-level security, rather than by application code remembering to filter. Backups are retained for 14 days and stay in the same region.

Some of the suppliers listed in section 6 are not Canadian companies, and a small amount of information reaches them in the course of their work. That is set out there, including what leaves the country and what does not.

5. Who can see your books

• You and anyone you invite. You control who has access to your company and at what level.
• An accountant you invite. If you give an accounting firm access, people at that firm can see and work in your books until you remove them.
• Nummo staff, rarely and deliberately. A small number of our people can reach customer data when it is necessary to operate the service, investigate a fault you have reported, or respond to a security incident. Administrative actions are logged.
• Law enforcement or a regulator, only when legally compelled. We will tell you unless we are prohibited from doing so.

6. Suppliers who process data for us

We use the following service providers. Each is bound by contract to use the information only to provide its service to us.

What this means in practice:your ledger does not leave Canada. What reaches a supplier outside Canada is limited — your billing contact and subscription with Stripe, and your email address with Google or Microsoft if you sign in that way. Information held in another country may be accessible to that country’s authorities under its own law.

If you connect a bank feed, the provider of that feed will also appear in this list, along with what it receives. Bank feeds are not enabled today.

7. How long we keep it

While your account is open, we keep your books so you can use them. Accounting records have statutory retention periods — the Canada Revenue Agency generally requires six years — and you should assume you need yours for that long.

If you close your account, you can export your data first, and we delete it within 90 days unless the law requires us to keep something longer. Backups age out on the 14-day cycle described in section 4. Logs needed for security and audit are kept for up to 24 months.

8. Your rights

Under Canada’s Personal Information Protection and Electronic Documents Act, and under Quebec’s Law 25 if you are in Quebec, you may:

• ask what personal information we hold about you and get a copy of it;
• have it corrected if it is wrong;
• withdraw a consent you gave, where the processing depends on consent;
• ask us to delete it, subject to what we must keep by law;
• receive it in a structured, commonly used technical format, or have it sent to another organisation — the right to portability, which took effect in Quebec in September 2024;
• complain to us, and then to the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec if our answer does not satisfy you.

Write to [email protected]. We may need to confirm who you are before we act, which protects you more than it protects us.

9. If something goes wrong

If a security incident creates a real risk of serious harm to anyone, we will notify the affected people and the relevant regulator as the law requires, and tell you what happened, what was involved, and what we have done about it.

10. Children

Nummo is business software and is not directed at children. We do not knowingly collect personal information from anyone under 16.

11. Changes

If we change this policy in a way that materially affects you, we will tell you before it takes effect — by email or in the product — rather than quietly changing the date at the top.