Privacy Policy

We may collect personal information that you choose to provide, including:

• Name
• Email address
• Phone number
• Province or general location
• Mobile carrier name
• Current plan details
• Monthly bill amount
• Uploaded mobile bill or screenshots
• Your response to the onboarding question about how you usually check your bill (used to improve the service and is optional)
• Information you provide when contacting us or requesting support

Uploaded bills may include information such as your name, phone number, account number, service address, plan details, usage details, discounts, and billing amount. Bill files and extracted bill text are processed in memory by our servers and are not written to permanent storage — see “Bill text processing and AI” below.

If you request ongoing check-in emails or join the watchdog waitlist, we record the date and time of your consent and your email address. If you request our negotiation service, we record an explicit per-customer authorization at the time of booking — see “Negotiation support” and “Concierge authorization records” below.

Please do not upload information that is not needed for our service, such as social insurance numbers, government ID documents, banking passwords, medical information, or unrelated personal documents.

Payments are processed by third-party payment providers, such as Stripe.

Rightward does not store your full credit card number or full payment credentials. We may receive limited payment-related information, such as your name, email address, billing address, payment status, transaction amount, tax amount, refund status, and receipt details.

Payment providers may process your information according to their own privacy policies and legal obligations.

We use personal information to:

• Review your current mobile bill or plan
• Compare your plan against available market options
• Send your savings report and any ongoing check-in emails you have consented to receive
• Surface relevant market changes since your audit (for example, a price drop or new plan on your carrier) in your check-in emails
• Provide negotiation support if you request it
• Maintain a record of your explicit authorization for any negotiation we conduct on your behalf
• Process payments, taxes, refunds, and receipts
• Respond to support questions
• Prevent fraud, misuse, or security issues
• Maintain legal, tax, accounting, and business records
• Improve our website and service

We do not sell your personal information and we do not use it for third-party advertising.

If you ask Rightward to negotiate with your mobile carrier, we may use the information you provide to contact the carrier or its retention department on your behalf.

We will use only the information reasonably necessary to discuss your current plan, compare available offers, and attempt to reduce your bill. When speaking with the carrier on your behalf, we typically disclose the account holder name, the account number printed on your bill, and details of your current plan.

We will not make material changes to your mobile service without your authorization. See “Concierge authorization records” below for the per-customer consent record we keep with each negotiation request.

When you upload a bill, our servers extract the text from the PDF in memory and send that text to Anthropic's Claude API for analysis. The original PDF and the extracted bill text are not written to disk and are not retained by Rightward after analysis is complete.

We store only the structured results of the analysis — for example, the detected carrier name, the detected plan name, the monthly bill amount, and the number of recommendations generated. These records are not directly linked to your email address or phone number unless you choose to provide one.

Per Anthropic's API privacy practices, content submitted to the Claude API is not used to train Anthropic's models. Anthropic may retain inputs and outputs for a limited period for safety and abuse monitoring per its own published policies, which you can review on Anthropic's website.

Rightward complies with Canada's Anti-Spam Legislation (CASL). We send commercial electronic messages only after you have given us express consent, for example by ticking the consent box on our savings-report email-capture form or by joining our watchdog waitlist.

With your consent, we may send check-in emails about your bill audit — typically a one-week check-in, a two-week household reminder, and, if you used our concierge negotiation service, post-completion follow-ups. These emails may include relevant market changes since your audit (for example, a price change on your carrier or a new alternative plan).

Every commercial email we send identifies Rightward Financial Inc. as the sender, includes our physical mailing address or website, and includes a working one-click unsubscribe link that remains active for at least 60 days. We honour unsubscribe requests promptly. We keep a record of your consent (date, time, and the context in which consent was given) for as long as required to support CASL compliance.

You can unsubscribe from check-in emails at any time using the link in any email or by emailing privacy@rightward.ca. Unsubscribing from check-ins does not affect transactional emails tied to a specific request you made (for example, a one-time savings report you asked us to send or a concierge service confirmation).

When you book our concierge negotiation service, we record a per-customer authorization at the time of booking. This record includes:

• The exact authorization wording you saw and accepted
• The specific mobile carrier you authorized us to contact
• The timestamp of your consent, stamped server-side

We keep this record for the duration of the service and afterward as a documented record of authorization. It allows us to demonstrate your consent if a carrier requests proof and to resolve any dispute about what was agreed.

When you visit our website, we may collect limited technical information, such as IP address, browser type, device type, pages visited, referring website, and date and time of visit.

We use Plausible for product analytics. Plausible is a privacy-respecting, cookieless analytics service that does not track you across other websites and does not collect personally identifiable information. Events we record include page views and non-identifying interactions such as “Analysis Started” or “Email Captured”.

We also use Vercel Analytics for first-party performance and reliability data about our website. Vercel Analytics is anonymous and does not use third-party cookies.

We may use cookies or similar technologies to operate the website, improve performance, and protect against misuse. We do not use third-party advertising cookies and we do not run third-party advertising on this site.

You can control cookies through your browser settings. Some website features may not work properly if cookies are disabled.

We may share personal information only where reasonably necessary, including with:

• Mobile carriers, if you request negotiation support
• Anthropic (Claude API) — to analyze your bill text, as described in “Bill text processing and AI”
• Supabase — for application database hosting
• Vercel — for application and website hosting
• Resend — to deliver the savings report and any check-in emails you have consented to receive
• Stripe — to process payments, taxes, refunds, and receipts for our concierge service
• Plausible and Vercel Analytics — for privacy-respecting product analytics
• Professional advisors, such as accountants, lawyers, or compliance consultants
• Government, tax, legal, or regulatory authorities where required or permitted by law

We require service providers to handle personal information appropriately and only for the services they provide to us. We do not sell or rent personal information to third parties.

We keep personal information only as long as reasonably necessary to provide our service, respond to inquiries, process payments and refunds, maintain business records, resolve disputes, prevent fraud, and comply with legal, tax, and accounting obligations.

• Uploaded bills and extracted bill text are processed in memory only and are not written to permanent storage.
• Analysis records (carrier detected, monthly cost detected, recommendations generated) are retained to operate and improve the service. These records are anonymous unless you choose to provide an email or phone number.
• Email addresses captured with your consent are retained until you unsubscribe, plus a reasonable period to maintain a CASL compliance record of your prior consent.
• Negotiation request records, including authorization records, payment details, and outcomes, are retained for as long as required by applicable financial, tax, and consumer-protection law.

When personal information is no longer needed for these purposes, we will delete, anonymize, or securely dispose of it.

We use reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, or destruction. All traffic between your browser, our servers, and our database is encrypted in transit.

No website, email system, payment system, or internet transmission is completely secure. Please avoid sending information that is not necessary for the service. To report a suspected security issue, email security@rightward.ca.

Some of our service providers store or process personal information in Canada, the United States, or other jurisdictions where they operate. For example, Stripe, Anthropic, Resend, Plausible, and Vercel may process information in the United States or other regions, subject to their own published policies.

When information is processed outside Canada, it may be subject to the laws of that jurisdiction, including lawful access requests available to courts and government authorities in that jurisdiction. We use reasonable measures to protect personal information handled by our service providers.

You may contact us to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent, subject to legal, contractual, or operational limits
• Unsubscribe from check-in emails at any time, either via the unsubscribe link in any email or by emailing us
• Ask questions about our privacy practices
• Request deletion of information where legally and operationally possible

We may need to verify your identity before responding to a privacy request. We aim to respond to privacy requests within 30 days, as required under the Personal Information Protection and Electronic Documents Act (PIPEDA).

Rightward may introduce optional account-based features, recurring bill tracking, subscriptions, or financial account linking in the future. The watchdog waitlist on our website is an early-access signup list for one such Phase 2 product.

We do not currently collect bank account transaction data through our website. If we introduce financial account linking or similar features, we will update this Privacy Policy and request any required consent before collecting or accessing that information.

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised “Last Updated” date. Material changes that meaningfully affect how we collect, use, or share your information will be communicated through the website and, where appropriate, by email to customers we have an active service relationship with.