Privacy policy

Immer (askimmer.ca) is a tax research assistant for bookkeepers in Canada, created and operated by Anton Pazynych. "We" and "us" in this policy mean the operator of Immer. The person accountable for privacy is Anton Pazynych, reachable at hello@askimmer.ca.

Immer is subject to the federal Personal Information Protection and Electronic Documents Act (PIPEDA). It is not affiliated with the Canada Revenue Agency or any other government body.

There are two kinds of personal information here. Yours, as an account holder: your email address and how you use the service. Your clients': what you choose to enter about them — a name, a province, notes, documents. For your clients' information you decide what goes in and why; we process it to give you answers. You are responsible for having your clients' consent to use their information this way, as you would be for any software you use in your practice.

We do not sell personal information, do not use it for advertising, and do not use your clients' information to train models or to test and improve the product.

Before a question, an earlier turn of the conversation, an attached document, a photo's text or a client note is sent to the AI model or stored, our server in Montreal masks social insurance numbers, business numbers, payment card numbers and bank account numbers. Photos are read on that same server; the image itself is never sent anywhere, and a photo that cannot be read is refused rather than guessed at. The name on a client profile is never sent to the AI model.

Masking covers the identifiers listed above. Other details you type — a street address, a date of birth — are sent as you wrote them, so leave out what the question does not need.

Your account, your clients, their documents and your conversations are stored in Montreal, Canada: the database and file storage (Supabase, region ca-central-1) and the application that processes requests (Vercel, region yul1). The public pages of the site are delivered through Vercel's worldwide network.

To write an answer, already masked text is processed in the United States by two services:

Other service providers: Stripe processes payments; Supabase and Vercel host the service (US companies; your data is stored in their Montreal regions); WHC (Canada) forwards mail sent to hello@askimmer.ca to an inbox hosted by Google. Each is bound by its own terms and privacy commitments. Information processed outside Canada is subject to the laws of that country, and its authorities may be able to access it.

• Your clients, documents and conversations are visible to your account only. The database enforces this for every request (row level security).
• The administrator of Immer can see account emails, access rights, credit balances and usage counts, in order to run the service and billing. The administrator panel does not show your clients, documents or conversations.
• We look at stored content only if you ask us to (for example, to investigate a problem you report) or if the law requires it.

• Conversations, clients and documents: until you delete them, or until your account is deleted.
• Deleting a conversation deletes its messages. Deleting a client deletes the documents on their file; conversations about that client stay in your history, no longer linked to the client — delete them separately if you want them gone.
• Deleting your account (on request, see below) deletes your profile, clients, documents, conversations and credit records. Usage counts with no link to you may be kept for service statistics. Payment records are kept by Stripe, and in our books for as long as tax law requires.

We use only the cookies needed to keep you signed in. The visit counter on the public pages sets no cookies. There are no advertising or tracking cookies, so there is no consent banner.

Connections are encrypted (HTTPS); the database is encrypted at rest by its provider; access to each person's data is limited by the database itself; identifiers are masked before they are sent or stored. No system is perfectly secure. If a breach creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada and notify the people affected, as PIPEDA requires.

You can ask to see the personal information we hold about you, have it corrected, withdraw your consent, or have your account and everything in it deleted. Write to hello@askimmer.ca. We answer within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

If one of your clients asks you about their information, you can view and delete it in the app; write to us if you need help.

The date at the top shows when this policy last changed. If a change affects what we collect or where it goes, we will tell account holders by email before it takes effect. The English version of this policy prevails over its translations.