Privacy Policy

1. Introduction

RemitRight is operated by OKTD.ca ("we", "us", or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered bill collection platform and related services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, business name, and billing information
• Customer Data: Information about your customers including names, contact details, and payment history
• Bill/Invoice Data: Invoice details, amounts, payment terms, and related documents
• Communication Data: SMS messages, conversation history, and payment communications
• Directory Profiles: Public business details from published sources and descriptions, services, service areas and appointment details submitted by verified listing owners
• Directory Ownership and Help Requests: Account-to-listing ownership records, verification-code records, and the time and wording of an optional request for personal invoice-setup help

Directory profile details are public. The account identifier behind a claim, verification codes and setup-help request records are not part of the public listing. If you request a setup email, we send your account email and business listing details to our support team to respond to that request. Claiming a listing does not subscribe you to marketing emails.

2.2 Automatically Collected Information

• Usage Data: How you interact with our platform, features used, and performance metrics
• Device Information: IP address, browser type, operating system, and device identifiers
• Cookies: We use cookies and similar tracking technologies to improve your experience

3. How We Use Your Information

• Service Delivery: Process payments, send collection messages, and manage your account
• AI Processing: Analyze invoice documents and customer replies, prepare messages, and transcribe audio when those features are used
• Communication: Send service updates, security alerts, and support messages
• Analytics: Understand usage patterns and improve our platform
• Compliance: Meet legal obligations and prevent fraud

This AI processing can send the relevant invoice, message or audio content to the AI providers listed below.

4. Third-Party Services

We use third-party service providers to operate our platform:

• Stripe: Payment processing and Stripe Connect for business payouts
• Twilio: SMS message delivery and communication services
• Supabase: Database hosting and authentication services
• AI Services: Lovable’s AI gateway, Google Gemini, OpenRouter and Anthropic can process invoice content and messages for supported features
• OpenAI: Audio submitted for transcription; its models can also be used through OpenRouter for message analysis
• Resend: Transactional and support email delivery

The information shared depends on the feature used. These providers have their own privacy policies.

5. Data Security

We implement industry-standard security measures to protect your information:

• HTTPS encryption for data sent between the app and its service providers
• Secure authentication with password hashing and session management
• Row-Level Security (RLS) in our database to isolate customer data
• Restricted access to personal information on a need-to-know basis

6. Your Privacy Rights and Requests

You can contact us about the requests below. Your legal rights depend on the federal or provincial privacy law that applies.

• Access: Request a copy of your personal information we hold
• Correction: Request corrections to inaccurate or incomplete data
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Data Format: Receive your data in a machine-readable format
• Opt-Out: Withdraw consent for certain data processing activities
• Complaint: Lodge a complaint with the Privacy Commissioner of Canada or the relevant provincial privacy regulator

For these requests or a privacy concern, contact us at welcome@remitright.ca

7. Data Retention

We retain your information only as long as necessary to provide our services and comply with legal obligations. You may request earlier deletion subject to applicable laws. For questions about how long a particular record is kept, contact welcome@remitright.ca.

8. Children's Privacy

RemitRight is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our platform. Your continued use of RemitRight after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions or concerns, contact us at: