Privacy Policy

1. Overview

Loonie Nest is owned and operated by Ventrous Labs Inc. ("we," "our," or "us"). This Privacy Policy explains how we collect, use, and protect your information when you use our Canadian financial tools.

2. Information We Collect

To provide the "save and return" functionality of Loonie Nest, we collect:

• Identity & Authentication Data: Your email address and login credentials.
• User-Provided Financial Data: We store the numbers you manually enter into our calculators (e.g., income, savings, expenses).

  Note: We do not verify this data or link to external financial institutions. We simply store what you provide so your plan is ready when you log back in.

• Transaction Data: When you purchase a plan, we collect record of the transaction (date, amount, and plan type).
• Usage Analytics: De-identified data regarding how you interact with the site (e.g., which calculators are most popular) to help us improve the tool.
• Cookies & Tracking Technologies: We use cookies for analytics and marketing, and you choose which ones run. See "Cookies & Your Choices" below for the full list and how to change your preferences.

3. Cookies & Your Choices

When you first visit Loonie Nest, a banner asks you to accept all cookies, keep only the strictly necessary ones, or choose exactly what you want. Strictly necessary cookies are always on, since the site needs them to work. Everything else stays off until you turn it on.

• Strictly necessary: Required for the site to work, such as keeping you signed in. These cannot be turned off.
• Performance: Google Analytics 4 and Microsoft Clarity, used to understand how people use the site. Off until you consent. Separately, we use Vercel Analytics for aggregate traffic counts; it sets no cookies and does not identify or track you, so it runs without consent.
• Marketing & advertising: Advertising tags from Meta, Reddit, and Microsoft. Off until you consent.

Marketing email is separate from the choices above. We only send it if you asked us to, either when prompted in the app or from the email preferences in your account. Every message has an unsubscribe link, and you can turn it off at any time from your account. Turning it off does not stop receipts or messages about your account.

When you enable analytics or marketing, we also set a first-party cookie that records how you arrived at the site; it supports traffic attribution for both and expires within hours. You can change your choice at any time using the "Cookie preferences" link in the footer of any page.

4. Third-Party Services

We use specialized third-party providers to ensure your most sensitive data is handled by experts:

Most of these providers are located outside Canada, primarily in the United States. Your information may be stored or processed there, which means it can be subject to the laws of that country, including lawful access requests by its courts and government agencies.

• Clerk (Authentication): Clerk manages our sign-in process. When you create an account, your credentials are secured by Clerk. You can view their Privacy Policy here.
• Stripe (Payments): All payments are processed by Stripe. We do not store your credit card details. You can view Stripe's Privacy Policy here.
• Neon (Database): Your financial inputs and account preferences are stored in a secure database. You can view their Privacy Notice here.
• Brevo (Email): We use Brevo to send account and transactional email, and marketing email to people who have asked for it. Brevo receives your email address and your subscription status. You can view their Privacy Policy here.
• Google Analytics 4 (GA4): We use GA4 to understand website traffic. This data is aggregated and does not identify you personally. You can learn more at Google's Privacy & Terms.
• Vercel Analytics: We use Vercel Analytics to measure web performance and traffic patterns. This data is aggregated and does not identify you personally. You can view their Privacy Policy here.
• Microsoft Clarity (Session Analytics): We use Microsoft Clarity to capture heatmaps and session replays that help us understand how visitors interact with our site. This only runs if you've consented to performance cookies (see "Cookies & Your Choices" above). You can learn more at the Microsoft Privacy Statement.
• Advertising Platforms: We work with advertising platforms (Meta, Reddit, Microsoft Bing Ads). This may involve sharing limited data with those platforms for conversion measurement purposes, and only runs if you've consented to marketing & advertising cookies (see "Cookies & Your Choices" above). You can view Meta's Privacy Policy here, Reddit's Privacy Policy here, and Microsoft's Privacy Statement here.

5. Data Retention

We retain your account information and financial inputs for as long as you maintain an active account with Loonie Nest. This allows you to access your financial plans across different sessions and devices.

If you choose to delete your account, we will purge your personal data from our active databases within 30 days, except where we are required to retain transaction records for tax or legal purposes (e.g., Stripe's records of your purchase).

6. Security

We use HTTPS encryption for all data transmissions. By using Clerk for authentication and Stripe for payments, we ensure that your passwords and payment methods are never stored on our own infrastructure. While we take every reasonable precaution, no system is 100% secure.

If we become aware of a data breach or security incident affecting your information, we will investigate promptly, take reasonable steps to address the issue, and notify affected users as required under applicable laws. We are not responsible for any breach of data by third-party providers.

7. Your Rights (PIPEDA & PIPA)

As a British Columbia-based company, we comply with the Personal Information Protection Act (PIPA) and Canada's federal PIPEDA standards. You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we update any inaccurate information.
• Erasure: Request that we delete your account and all associated data.

To exercise these rights, contact our Privacy Officer at support@loonienest.com.

8. Business Transfers & Corporate Changes

If we are involved in a merger, acquisition, financing, reorganization, or the sale or transfer of all or part of our business or assets, your personal information may be transferred as part of that transaction. Any such transfer is conducted in accordance with the "Business Transaction" provisions of PIPEDA and BC PIPA.

• Due Diligence: We may share limited information with potential purchasers or partners to evaluate a transaction. We only share what the evaluation requires, under a confidentiality agreement that restricts use to assessing the transaction and requires the information be destroyed if the deal does not go ahead.
• Successor Ownership: If a transaction is completed, whoever receives your information is bound by the commitments in this policy. We will notify you of any such change as required by law.

9. Changes to This Policy

We may update this policy as we add new features. Material changes will be noted by updating the "Last updated" date at the top of this page.

10. Contact Us