Privacy Policy

Northstar is operated by [operator legal name required]. The privacy officer is [privacy officer required].

• Email: [privacy email required]
• Mailing address: [business address required]

Contact us to ask a privacy question, request access or correction, withdraw optional consent, or make a complaint. We may need to verify your identity before acting on a request.

• Account information: Clerk account identifier, email, display name, session and authentication information, and consent records.
• Financial information you provide: transactions, balances, account labels, budgets, categories, income, savings goals, recurring items, credit-card details, a self-reported credit score, forecasts, and files you import.
• Connected-account information: if enabled and authorized, Plaid account and institution identifiers, balances, transactions, holdings, connection status, and an encrypted access token. Northstar does not receive or store your bank password.
• Subscription and communications information: Stripe customer/subscription status and payment-session identifiers (not full card details), reminder preferences, delivery status, and support messages.
• Technical and security information: IP-derived request information available to our hosting providers, browser/device data, timestamps, security and audit events, rate-limit activity, webhook identifiers, and errors needed to protect and operate the service.

We collect information from you, your authenticated session, files you upload, providers you expressly connect, and service providers acting for us. We use it only for reasonable purposes that include:

• creating and securing your private workspace;
• displaying budgets, reports, projections, reminders, and connected financial data;
• processing optional subscriptions and sending service or security messages;
• detecting abuse, enforcing account boundaries, investigating incidents, and meeting legal obligations;
• responding to support and privacy requests and improving reliability using minimized operational information.

Northstar does not sell personal information and does not use financial information for third-party advertising or credit eligibility decisions.

We seek meaningful consent when you create a workspace and again when material policy versions change. Connected accounts, browser notifications, email reminders, and paid subscriptions are optional. You can withdraw optional consent by disabling the feature, disconnecting an institution, cancelling billing, or contacting us. Withdrawal does not affect processing already completed and may prevent the related feature from working.

Northstar is intended for adults who can enter a binding agreement. We do not knowingly collect personal information from children under 18.

We use providers only for defined operational roles: Clerk (authentication), Vercel (hosting and delivery), Neon (database hosting), Plaid (optional financial connections), Stripe (optional billing), and Resend (optional email). Provider availability may change, and each provider also publishes its own privacy terms.

These providers may process information outside Canada, including in the United States or other countries where they or their subprocessors operate. Foreign authorities may access information under local law. Contact our privacy officer for information about our policies and the countries used for a specific provider deployment.

Account and financial records are kept while your account is active so the service can operate. Security, consent, delivery, and billing records may be retained for a reasonable period required for fraud prevention, dispute handling, accounting, or law. Backups may persist temporarily until they rotate out. We securely delete or de-identify information when it is no longer reasonably required.

Disconnecting an institution revokes future provider access but ordinarily keeps previously imported records until you delete them. Account deletion first attempts to revoke active institution access, then deletes Northstar records and requests deletion of the Clerk identity. If a provider cannot confirm revocation or identity deletion, the interface reports the failure so you can retry or contact us. Stripe and other providers may retain records they are legally required to keep.

Safeguards include authentication on private routes, per-user record scoping, encrypted provider tokens bound to their owner and connection, HTTPS in transit, bounded request bodies, rate limits, webhook verification and replay protection, audit events, dependency review, and encrypted browser-generated backups. Access is limited to what is reasonably needed. No system can guarantee absolute security.

If a breach creates a real risk of significant harm, we will notify the Alberta Information and Privacy Commissioner and affected individuals as required, preserve required records, and take reasonable containment and remediation steps.

You can update profile information, export a portable encrypted backup, change reminder settings, disconnect providers, and request deletion in Settings. You may also request access to or correction of personal information and ask how it has been used or disclosed, subject to lawful exceptions. We will respond within the time required by applicable law.

If we do not resolve a concern, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada, as applicable. Exercising a privacy right will not result in retaliation.

Our use of cookies and similar storage is described in the Cookie Notice. Forecasts are generated from your saved inputs for informational purposes; Northstar does not make automated decisions that determine access to credit, employment, insurance, or another significant service.

We may update this policy when the service, providers, or law changes. We will update the date and version, and will request renewed acceptance before financial features continue when a change is material.