Privacy Policy
Last updated: July 12, 2026
This Privacy Policy explains how maplediv ("we," "us," or "our"), operated from Montreal, Quebec, Canada, collects, uses, discloses, and protects personal information when you use https://maplediv.com and related services (the "Service").
Scope and legal framework
We design our practices to align with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec users, Quebec's Act respecting the protection of personal information in the private sector (including Law 25 amendments). If you use the Service from outside Canada, your information may be processed in Canada and in other countries where our service providers operate.
This Policy should be read together with our Terms of Service.
Information we collect
We collect information you provide, information created when you use the Service, and information from third-party providers needed to run maplediv.
Account and identity
- Sign-in: Google OAuth (email address and Google profile identifiers needed to create and authenticate your account). We do not currently offer email/password registration in the product UI.
- Username (often derived from your Google name or email), optional bio and location, and whether your profile is public.
- Optional website / social link fields if stored on your profile, and display preferences (for example theme).
- Legal acceptance records when you agree to this Policy and our Terms (may include timestamp and, when our server receives an acceptance event, IP address and user-agent for audit purposes).
Portfolio and financial information you enter
- Portfolios you create (name, description)
- Holdings you add: ticker/symbol, shares (including fractional), cost basis, and account type (TFSA, RRSP, Non-Registered / taxable)
- Watchlist symbols and income goals you set
- Outputs derived from your data (for example MapleAudit diagnostics and MapleAI portfolio-fit research results generated at request time)
You are solely responsible for the accuracy of holdings and amounts you enter. We do not custody cash or securities and we do not verify your brokerage statements.
Payments and subscription
- Subscription status, plan type (free / premium), billing period metadata, and Stripe customer / subscription identifiers
- Payment card details are processed by Stripe. We do not store full card numbers on our servers.
Usage, device, and technical data
- Pages and features used, approximate session activity, and error/security signals
- Browser type, device category, and similar technical metadata
- IP address and user-agent when needed for security, rate limiting, CSRF protection, or legal-acceptance logging
Market and news data (not your personal brokerage account)
- Quotes, historical prices, and related market metadata from third-party market-data providers (for example Yahoo Finance)
- Financial news headlines from providers such as Finnhub
- Company logos or branding assets from third-party sources where used
Earn (optional cryptocurrency mining dashboard)
- If you use Earn, we may process mining configuration/status information you run locally and display pool-related statistics. Mining occurs on your hardware under your control; pool operators (for example SupportXMR) have their own practices.
How we use information
- Provide the Service: dashboard, portfolio tracking, Explore, Tools/calculators, news, Social/public profiles, MapleAudit, MapleAI, Premium features, and Earn
- Authenticate you via Google and maintain your session
- Process Premium subscriptions and cancellations through Stripe
- Fetch and display market data and news for tickers you request or hold
- Generate MapleAudit analyses and PDFs, and MapleAI portfolio-fit research (deterministic, explainable analysis — not a promise of future returns)
- Secure the Service (fraud prevention, abuse detection, rate limiting)
- Communicate service notices (account, billing, security, material policy changes)
- Understand usage and improve reliability (including analytics where enabled)
- Comply with law and respond to lawful requests
We do not sell your personal information. We do not use your holdings to execute trades on your behalf.
Public profiles and social features
Profiles are private by default. If you set your profile to public, other users may see information such as your username, bio, location (if provided), and limited portfolio presentation (for example ticker symbols / sector labels). We do not intend public profiles to expose your share quantities or cost basis.
Do not put sensitive personal or financial details in public bio/location fields. You can switch your profile back to private in settings.
Sharing and service providers
We share personal information only as needed to operate maplediv, with your direction, or when required by law. Key processors and integrations include:
- Supabase — authentication, database, and related backend services
- Stripe — payment processing and subscription billing
- Google — OAuth sign-in; Google Analytics if configured on our deployment
- Vercel (or equivalent host) — application hosting and related infrastructure
- Yahoo Finance / market-data APIs — quotes and historical prices (ticker requests)
- Finnhub — financial news where used
- TradingView / logo sources — branding or chart-related assets where used
- Mining pools (Earn) — if you connect/run mining software against a pool
Each provider has its own privacy policy. We are not responsible for their independent practices beyond our contractual and legal obligations as a customer of those services.
We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset transfer (with appropriate notice where required).
Cookies and similar technologies
We and our providers use cookies and local storage for purposes such as:
- Authentication / session continuity (Supabase Auth cookies)
- UI preferences (for example theme)
- Remembering legal acceptance in your browser
- Short-term caching of market data in the browser to improve performance
- Analytics measurement when Google Analytics (or host analytics) is enabled
You can control cookies through your browser settings. Blocking essential cookies may prevent sign-in or core features from working. Where analytics is enabled, you may also use industry opt-out tools offered by Google or your browser.
Data security
We use reasonable administrative, technical, and organizational measures appropriate to the nature of the Service (including encrypted transport (HTTPS), access controls, and reliance on reputable infrastructure providers). No online service is perfectly secure.
- Protect access to your Google account and devices
- Notify us promptly at maplediv@gmail.com if you suspect unauthorized use of your maplediv account
Retention
- Account, profile, portfolio, and holdings data: kept while your account is active; deleted or anonymized after account deletion requests, subject to legal retention needs
- MapleAudit PDFs: generated on demand for eligible Premium users; we do not operate a long-term "PDF library" retention product as a separate stored archive beyond what is needed to fulfill a generation request and operate the Service
- Billing / subscription records: retained as needed for accounting, dispute resolution, tax, and legal compliance (often several years)
- Security and acceptance logs: retained for a limited period consistent with security and compliance needs
- Aggregated / de-identified analytics: may be retained longer
Your privacy rights
Subject to applicable law (including PIPEDA and Quebec Law 25), you may request to:
- Access personal information we hold about you
- Correct inaccurate or incomplete information
- Withdraw consent where processing is based on consent (without affecting prior lawful processing)
- Request deletion of your account and associated personal information
- Ask about our use of service providers and cross-border processing
- Export portfolio-related data you provided (where export tools are available in-product, or by emailing us)
Email maplediv@gmail.com with subject line "Privacy Request". We aim to respond within a reasonable time (typically within 30 days, sooner when practicable). We may need to verify your identity before fulfilling requests.
Quebec residents may also contact the Commission d'accès à l'information du Québec regarding privacy concerns after attempting to resolve the matter with us.
Children
Not financial advice
Changes to this Policy
We may update this Policy from time to time. The "Last updated" date will change when we do. For material changes, we will provide additional notice as appropriate (for example a notice in the Service or email to your account address).
Continued use after the effective date of changes constitutes acceptance of the updated Policy, except where additional consent is required by law.
Contact / Privacy Officer
Email: maplediv@gmail.com
Website: https://maplediv.com
Operating location: Montreal, Quebec, Canada
For privacy matters, include "Privacy Request" in the subject line. We aim to acknowledge inquiries within a few business days.
By using maplediv, you acknowledge that you have read this Privacy Policy.