Privacy Policy
TaxReminder (“we”, “us”) sends reminders about Canadian tax deadlines. This policy explains what personal information we collect, why we collect it, how we protect it, and the choices you have. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.
1. Who we are
TaxReminder is a service of Blue Ocean Marketing, operating as TaxReminder.ca, located in Ontario, Canada. For any privacy question, or to exercise the rights described below, contact our privacy officer at privacy@taxreminder.ca.
2. Information we collect
We collect only what the service needs to work.
Information you give us
- Account details: first and last name, email address, and (if you choose SMS reminders) your mobile number.
- Location for tax purposes: your province or territory, municipality, and time zone, used to determine which deadlines apply to you and when to send reminders.
- Tax profile: whether you are self-employed, and for each business or corporation you add: its name, business number, fiscal year end, province of incorporation, and whether it is a Canadian-controlled private corporation.
- Filing activity: which deadlines you have marked as completed, and any instalment or payment amounts you choose to record.
- Preferences: which channels you want reminders on (email, SMS) and how many days before each deadline.
Information we generate
- Deadline schedules calculated from the tax profile you provide.
- Delivery records: for each reminder we send, the channel, recipient address or number, subject, a short preview, delivery status and provider response. We keep these so we can show you what was sent and investigate failures.
- Authentication data such as login timestamps, handled by our authentication provider.
We do not ask for and do not want your Social Insurance Number, CRA credentials, tax returns, or banking information. Please do not enter them anywhere in the service.
3. Why we use it
- To calculate which tax deadlines apply to you and when.
- To send the reminders you asked for, on the channels and schedule you chose.
- To provide your dashboard, including what is upcoming, overdue, and completed.
- To let an accounting firm you work with manage deadlines on your behalf, if you were added by one.
- To keep the service secure, diagnose faults, and meet our legal obligations.
We do not sell personal information, and we do not use it for advertising or share it with advertisers.
4. Consent, and how to withdraw it
We collect and use your information with your consent, which you give when you create an account and choose your reminder settings. SMS reminders require you to enter your own mobile number and explicitly select the SMS channel.
You can withdraw consent at any time:
- SMS: reply STOP to any message, or turn off the SMS channel in your account settings.
- Email: use the unsubscribe or opt-out link in any reminder, or change your settings.
- Everything: delete your account, which removes your personal information as described in section 7.
Withdrawing consent means we can no longer send the reminders the service exists to provide.
5. If an accounting firm added you
Accounting firms use TaxReminder to track deadlines for their clients. If a firm added you, that firm decides what information to enter about you and can see your deadlines and filing status. In that relationship we act as a service provider to the firm. The firm remains responsible for having your consent to share your information with us. You can still control your own notification preferences and opt out of messages at any time, and you may contact us directly to ask what we hold about you.
6. Who we share it with
We share personal information only with service providers who help us operate, and only to the extent they need it:
- Supabase — database and authentication. Our database is hosted in the Canada (Central) region.
- Vercel — application hosting and delivery.
- Resend — sending reminder and account emails.
- Twilio — sending SMS reminders, where you have chosen SMS.
Some of these providers are based in, or may process data in, the United States and other countries. Where that happens, your information may be accessible to courts, law enforcement or national security authorities of those countries. We require our providers to protect personal information to a standard comparable to this policy.
We may also disclose information where required by law, or to establish or defend legal claims.
Mobile numbers and SMS consent. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Your mobile number is passed to Twilio solely to deliver the reminder messages you asked for, and to no one else for any other purpose.
7. How long we keep it
We keep your information for as long as your account is active. If you delete your account, we delete your personal information and your tax entity records within 30 days, except where we must retain something to comply with a legal obligation or to resolve a dispute. Delivery records may be retained in aggregated or de-identified form for service reliability reporting.
8. How we protect it
- All traffic to and from the service is encrypted in transit (HTTPS/TLS).
- Data is encrypted at rest by our database provider.
- Passwords are never stored by us in readable form; authentication is handled by our provider.
- Each firm’s and each individual’s data is isolated, so one customer cannot access another’s records.
- Access to production systems is limited to those who need it to operate the service.
No system is perfectly secure, but we take these safeguards seriously and review them as the service grows.
9. Your rights
Under PIPEDA you may:
- Access the personal information we hold about you.
- Correct anything inaccurate or incomplete — most of it you can edit yourself in settings.
- Withdraw consent as described in section 4.
- Delete your account and the information associated with it.
- Complain about how we handle your information.
Write to privacy@taxreminder.ca and we will respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
10. Cookies
We use only the cookies needed to keep you signed in and to keep the service secure. We do not use advertising or cross-site tracking cookies.
11. Children
The service is intended for adults managing their own or their clients’ tax obligations. We do not knowingly collect information from children.
12. Changes to this policy
If we make a material change we will update the date at the top of this page and notify account holders by email before the change takes effect.
13. Contact
Privacy officer — privacy@taxreminder.ca
TaxReminder.ca, Ontario, Canada