Privacy policy

At a glance

• We collect what we need to provide, secure and improve Good Steward.
• We don't sell your personal information.
• You can see, export, correct or delete your information at any time.
• Our Privacy Officer answers questions at support@goodsteward.io.

1. Who we are

This policy covers Good Steward Money, Good Steward Local, the website at goodsteward.io, the free tools and the training. Good Steward Technologies Inc. ("Good Steward", "we", "us") is responsible for the personal information it describes.

Our Privacy Officer is accountable for how we handle personal information. You can reach the Privacy Officer at support@goodsteward.io.

2. What we collect

• Account details, such as your name and email address, and information from a sign-in provider if you use one.
• Budget and transaction information that you enter, import or sync from your financial institutions, such as accounts, balances, transactions, categories and notes.
• Subscription and payment status. Our payment processor handles your card details, and we don't store them.
• Usage, device and log information, such as pages viewed, actions in the app, browser and device type, IP address and error reports.
• Messages you send us, and copies of the messages we send you.

3. How we use it

We use personal information to:

• provide the service, including your account, your budgets, bank connections and syncing between your devices;
• organize your information, for example by suggesting categories for your transactions;
• keep the service and your account secure, and prevent fraud and abuse;
• handle billing;
• send service messages, reminders and replies to your support requests;
• understand how the service is used, find problems and improve it;
• meet our legal obligations.

If we send news or marketing emails, we send them only as the law allows, and each one has an unsubscribe link.

4. Who we share it with

We share personal information only as this policy describes. We don't sell your personal information.

• Service providers that help us run Good Steward, such as those that host data, connect to financial institutions, categorize transactions, process payments, deliver email, measure usage and errors, or provide sign-in. They handle it on our behalf, under their agreements with us.
• Authorities or others, when the law requires it, or to protect the rights, safety or property of our users, the public or Good Steward.
• A buyer or successor, if Good Steward is sold, merged or reorganized. This policy keeps applying to your information.
• Anyone else you ask us to share it with.

5. Where your information is stored

We and our service providers store and process information in Canada, the United States and other countries. While your information is outside your country, the courts, law enforcement and national security authorities there may be able to access it under their laws. When we transfer information about people in the EU or UK, we rely on adequacy decisions, such as the one for Canada, or on other safeguards the law allows.

6. How long we keep it

We keep your information while your account is open and as long as we need it for the purposes in this policy. After that, we delete it or remove what identifies you, unless we must keep it longer for legal, tax, accounting, security or dispute reasons. Deleted information stays in backups until they are overwritten on a rolling schedule.

7. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences and understand how the app is used, including tools that capture how you interact with pages, such as clicks and scrolling, with anything you type hidden. You can control cookies in your browser. To opt out of usage analytics, email support@goodsteward.io.

Blocking some cookies may stop parts of the service from working.

8. Your rights and choices

You can:

• see the personal information we hold about you and get a copy;
• correct it;
• export your budget data;
• disconnect a bank at any time, which stops new data from that bank;
• ask us to delete your account. We delete it and its data within 30 days and confirm by email;
• withdraw your consent, for example to usage analytics (section 7), subject to legal or contract limits;
• complain to the privacy regulator where you live, such as the Office of the Privacy Commissioner of Canada or Quebec's Commission d'accès à l'information.

To make a request, email our Privacy Officer at support@goodsteward.io from your account email. We may need to confirm your identity. We answer within 30 days.

9. Security

We use reasonable administrative, technical and physical safeguards to protect your information.

We implement industry standard security measures to protect your data:

• Bank level encryption in transit and at rest
• Passwords are securely hashed and are never stored in plaintext
• Access controls and authentication
• We never receive or store your banking credentials.
• We routinely conduct security reviews of our code and security audit of our infrastructure.

If a breach affects your information, we notify you and the regulators where the law requires.

10. Good Steward Local

If you opt in to the paid bank sync service, your budget file is stored on our servers; otherwise it stays on your device.

11. Age

The service is for people 18 and older. We don't knowingly collect personal information from anyone younger. If we learn that we have, we delete it.

12. US residents

If you live in a US state with a consumer privacy law, you may have the right to know, access, correct and delete your personal information, and to opt out of its sale or of targeted advertising where those apply. To use these rights, contact us as described in section 8. We won't treat you differently for using them.

13. Users outside Canada and the US

Good Steward is built for people in Canada and the United States. If you are in the European Economic Area or the United Kingdom, the GDPR or UK GDPR applies to the extent these laws apply. Good Steward Technologies Inc. is the controller of your personal information.

We rely on these legal bases: our contract with you, to provide the service; our legitimate interests, such as security and improving the product, balanced against your rights; your consent, where we ask for it; and our legal obligations.

You also have the right to object to processing based on legitimate interests, to restrict processing, and to receive your data in a portable form. You can complain to your local data protection authority.

14. Changes to this policy

We may update this policy. For material changes, we'll email you in advance, before they take effect. Other changes take effect when we post them with a new "Last updated" date.

15. Contact

Privacy Officer, Good Steward Technologies Inc.
support@goodsteward.io