Lucra Tax Inc. Privacy Policy
Effective Date: October 16th, 2025
Lucra Tax Inc. (“Lucra Tax,” “we,” “us,” “our”) is committed to protecting your privacy and handling your personal information lawfully and transparently. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information in connection with our online tax preparation and financial automation services.
This policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws in Canada (including those of British Columbia, Alberta, and Quebec).
- Personal Information means information about an identifiable individual.
- User / Customer refers to anyone who uses our services or platform.
- Service Providers / Vendors means third parties who assist in providing our services.
We are responsible for personal information under our control and have appointed a Privacy Officer to ensure compliance.
Contact:
Lucra Tax Inc.
Email: privacy@lucra.tax
We collect, use, and disclose personal information only for reasonable and lawful purposes, including to:
- Provide, maintain, and improve our SaaS platform
- Connect financial accounts via Plaid to retrieve and enrich transaction data
- Process and analyze bank statements using AI to identify potential tax deductions
- Verify identity, provide customer support, and communicate with users
- Detect fraud, ensure security, and comply with legal obligations
- Conduct aggregate, anonymized analytics and research
Depending on how you use our services, we may collect:
- Account Data: name, contact info, email, and login credentials
- Financial Data: bank account numbers, transactions, balances, and merchant details (via Plaid)
- Uploaded Documents: bank statements, receipts, or tax files you provide
- AI-Processed Outputs: categorized expenses, suggested deductions, or reports
- Usage Data: IP address, browser, device info, and app activity
- Billing Data: payment details processed by secure third-party providers
We collect, use, or disclose personal information with your knowledge and consent, except where otherwise permitted by law. You may withdraw consent at any time, though doing so may affect the functionality of certain services.
Lucra Tax uses Plaid to connect to your financial institution. By linking your account, you authorize Plaid and Lucra Tax to access and process your transaction data for tax preparation and expense categorization.
We also work with third-party vendors for hosting, analytics, AI processing, and customer support. All third parties are bound by confidentiality and security agreements consistent with Canadian privacy standards.
Your data may be stored or processed outside Canada (e.g., in the United States). In such cases, we use contractual and technical safeguards to ensure protection consistent with PIPEDA and applicable law.
We retain the personal information we collect for different periods of time depending on what it is, how we use it, and how you manage your account and settings:
- Data you can delete at any time: You may delete certain data whenever you like — such as your personal profile information, connected financial accounts, tax information, transaction data, uploaded bank statements, or receipts.
- Data deleted or anonymized automatically: Some information, such as technical logs or analytic records, is deleted or anonymized automatically after a defined period.
- Data retained until account deletion: We keep some data until you delete your Lucra Tax account, including information about your activity and usage of our services.
- Data retained for longer periods: We may retain certain information for longer periods when necessary for legitimate business or legal reasons — such as maintaining accurate financial records, meeting tax and audit requirements, detecting fraud or abuse, or ensuring the integrity and security of our systems.
When you delete data, we follow a secure deletion process to ensure your information is safely and completely removed from our servers, or retained only in anonymized form. We design our systems to protect data from accidental or malicious deletion, so there may be a short delay between when you request deletion and when copies are fully removed from our active and backup systems.
You may request:
- A copy or export of your personal data in a commonly used electronic format.
- Deletion of your account and associated personal information.
Upon receiving a verified request, we will:
- Provide an export of your data within a reasonable time; or
- Delete your personal information from our systems (except where retention is required for legal, accounting, or fraud-prevention purposes).
Requests can be made by contacting privacy@lucra.tax. We may require identity verification before processing.
We make reasonable efforts to ensure your personal information is accurate, complete, and up to date. You may access and correct your data at any time through your account or by contacting us.
We use administrative, technical, and physical measures appropriate to the sensitivity of your data, including encryption, access control, audit logging, and regular security testing. Despite these measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.
We are transparent about how we handle your personal information. This policy and any future updates will always be accessible at www.lucra.tax/privacy.
You have the right to access, correct, or delete your personal information, and to withdraw consent for certain uses. We respond to all verified requests within the timeframes required by law.
We may use aggregated or anonymized data for statistical analysis, research, and product development. This data cannot be used to identify you and may be retained indefinitely.
We use cookies and analytics tools to enhance performance, detect errors, prevent fraud, and improve user experience. You may disable cookies through your browser settings, though some features may stop working properly.
Lucra Tax is not intended for individuals under the age of majority in their province or territory. We do not knowingly collect personal data from minors.
If a breach of security safeguards results in a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada in accordance with PIPEDA requirements.
We may update this Privacy Policy periodically. Any material changes will be communicated through email or an in-app notice. The “Effective Date” will always reflect the most recent version.
Lucra Tax Inc.
Attn: Privacy Officer
Email: privacy@lucra.tax
Website: lucratax.ca
If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy authority.