Privacy Policy

Last updated: July 23, 2026

Currents Inc. ("Currents," "we," "us," or "our") is committed to protecting the privacy of individuals and businesses that use our automated bookkeeping services. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian provincial privacy legislation.

1. Information We Collect

1.1 Account Information

When you create an account or request a trial, we collect your name, email address, company name, and any optional message you provide.

1.2 Financial Documents

To deliver bookkeeping services, you upload bank statements (PDF or CSV), receipts (images or PDFs), and related financial documents. These documents contain transaction details such as dates, amounts, payees, and account numbers.

1.3 Categorized Transaction Data

Our system processes your financial documents to produce categorized, reconciled transaction records. This processed data includes transaction dates, descriptions, amounts, categories, and receipt linkages.

1.4 Automatically Collected Information

We collect standard web telemetry (IP address, browser type, device type, page views) to monitor site performance and security. This data is not used for marketing purposes.

2. How We Use Your Information

• Providing and improving our automated bookkeeping services
• Categorizing and reconciling your financial transactions
• Syncing processed data to your accounting software (QuickBooks Online or Zoho Books)
• Communicating with you about your account, service updates, and support
• Detecting and preventing fraud or unauthorized access
• Complying with legal and regulatory obligations (e.g., CRA record-keeping requirements)

3. Data Storage and Sovereignty

All data you upload and all processing occurs within AWS ca-central-1 (Canada). Your bank statements, receipts, and categorized transaction data are stored exclusively in Canadian data centers unless you consent to specific cross-border transfers (see §4).

4. Cross-Border Transfers

To deliver certain services, your data may be transferred to the following service providers located outside of Canada, as permitted under PIPEDA §7.1(2):

• Intuit Inc. (United States) — If you select QuickBooks Online as your accounting provider, categorized transactions are synced to Intuit's servers via their API. Intuit is bound by its own privacy policy and applicable US law.
• Stripe Inc. (United States) — Payment processing and subscription management are handled by Stripe. Your email and billing details are shared with Stripe to process payments. Stripe is PCI-DSS Level 1 certified.
• Zoho Corporation (India / United States) — If you select Zoho Books as your accounting provider, categorized transactions are synced to Zoho's servers via their API.

You will be asked to provide explicit consent to these transfers during account registration. You may withdraw consent at any time by cancelling your subscription.

5. Data Sharing

We do not sell, rent, or trade your personal or financial information to third parties for marketing purposes. We may share your information with:

• Service providers who assist in delivering our services (AWS, Stripe, Intuit, Zoho) under strict data processing agreements
• Legal authorities when required by law, regulation, or court order

6. Data Retention

• Financial records are retained for 7 years from the end of the relevant tax year, consistent with CRA requirements under the Income Tax Act.
• Account data (profile, preferences) is deleted within 90 days of account closure, unless retention is required by law.
• System logs are retained for up to 12 months for security and debugging purposes.

7. Security

We implement industry-standard security measures including encryption at rest (AES-256) and in transit (TLS 1.2+), access controls, regular security reviews, and audit logging. Authentication is managed via AWS Cognito with configurable password policies and multi-factor authentication.

8. Your Rights Under PIPEDA

You have the right to:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate or incomplete information
• Withdrawal of consent — Withdraw consent for data collection or cross-border transfers, with the understanding that some services may no longer be available
• Complaint — Lodge a complaint with us or with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca)

To exercise any of these rights, contact us at privacy@currentsbk.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website. Your continued use of the service after changes are posted constitutes acceptance of the revised policy.

10. Contact

Currents Inc.
Email: privacy@currentsbk.com