Privacy Policy

Insight Planning Wealth Management (“Insight Planning,” “we,” “our,” or “us”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, and disclose personal information in connection with our client portal and advisory services, in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

1. What Personal Information We Collect

We collect personal information that is necessary to provide wealth management services to you, including:

• Identity information: full name, date of birth, government-issued identification;
• Contact information: email address, phone number, mailing address, province of residence;
• Financial information: asset values, account holdings, income, liabilities, retirement goals, insurance coverage, and estate planning details;
• Household information: spouse or partner details, dependent information (where relevant to planning);
• Account credentials: email address and encrypted password for portal access;
• Portal activity: login timestamps, pages visited, documents uploaded or downloaded, messages sent through the portal, and calculator inputs;
• Device information: IP address and browser type (collected automatically for security purposes).

We collect only the information necessary to provide our services. You may decline to provide certain information, but this may limit our ability to serve you effectively.

2. How We Use Your Personal Information

We use your personal information for the following purposes:

• Providing wealth management advisory services and financial planning;
• Operating and maintaining your client portal account;
• Preparing financial plans, investment recommendations, and planning reports;
• Communicating with you about your account, meetings, and updates;
• Facilitating collaboration with authorized third-party professionals (such as your accountant or lawyer) when you invite them;
• Complying with legal and regulatory requirements applicable to financial advisors in Canada;
• Improving our services and the functionality of the Portal;
• Detecting and preventing fraud or unauthorized access.

We do not sell, rent, or trade your personal information to third parties.

3. Use of Artificial Intelligence Tools

We may use artificial intelligence tools to assist in preparing financial analysis, drafting communications, summarizing documents, or generating planning insights. These tools process information securely and are used solely to support the services provided by Insight Planning advisors — they do not make autonomous financial decisions on your behalf.

Where AI tools are used to process your personal information, we ensure appropriate contractual and technical safeguards are in place. Client information processed by AI tools is not retained or used to train third-party AI models. You may contact us at any time to ask whether AI tools were used in connection with your account or any specific communication.

4. How We Store Your Information

Your personal information is stored on secure cloud infrastructure provided by Supabase, with data residency in Canada. We use industry-standard security measures including:

• 256-bit TLS encryption for all data transmitted to and from the Portal;
• Encryption of data at rest;
• Row-level security policies that ensure each user can only access their own data;
• Multi-factor authentication available for portal access;
• Automatic session expiry after periods of inactivity.

While we take all reasonable precautions to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use a strong, unique password and to enable multi-factor authentication on your account.

5. Who Has Access to Your Information

Access to your personal information is strictly limited to:

• Insight Planning advisory team: advisors and staff who need access to provide services to you;
• Invited professionals: accountants, lawyers, or other professionals you specifically invite to your portal chat room — limited to the chat function only;
• Service providers: technology providers (including our portal infrastructure provider) who are bound by confidentiality obligations and are prohibited from using your data for any other purpose;
• Regulators and legal authorities: where required by applicable law, regulation, or court order.

Invited third-party professionals can access only the chat room to which they were invited. They cannot view your financial data, documents, or planning information.

6. Retention of Your Information

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal and regulatory obligations. For active clients, this means we retain information for the duration of our advisory relationship and for a minimum of seven (7) years afterward, as required under Canadian securities regulation.

Portal activity logs and audit records are retained for seven (7) years. When information is no longer required, it is securely deleted or anonymized.

7. Your Rights Under PIPEDA

You have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Request deletion of your personal information, subject to our legal and regulatory retention obligations;
• Withdraw consent to the collection or use of your personal information for certain purposes (noting that withdrawal may affect our ability to provide services to you);
• File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

To exercise any of these rights, please contact our Privacy Officer at info@insightplanning.com. We will respond to requests within 30 days.

8. Electronic Communications

By using the Portal, you consent to receive notices, documents, client updates, statements, and other communications electronically through the Portal and by email. You may withdraw this consent at any time by contacting us, noting that doing so may require us to deliver certain documents by alternative means.

9. Cookies and Tracking

The Portal uses session cookies that are strictly necessary for authentication and security. We do not use advertising cookies, third-party tracking cookies, or analytics that share your data with third parties. Session cookies expire automatically when you log out or after a period of inactivity.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting a notice on the Portal or by sending an email to your registered address. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

11. Contact Our Privacy Officer

Questions or concerns about this Privacy Policy or our privacy practices may be directed to:

You also have the right to contact the Office of the Privacy Commissioner of Canada: www.priv.gc.ca | 1-800-282-1376