What we collect, why,
and what we’ll never do with it.

Account information — your name, email address, two-factor authentication enrollment, and sign-in records.

The records your family adds — holdings and their values, ownership details, documents you upload or forward by email, messages in the portal’s conversations, and contacts your family keeps on file. This can include financial information; that is the purpose of the service.

Technical basics — the standard server logs any website keeps (IP address, browser type, timestamps), used for security and troubleshooting, plus internal usage metering (for example, AI processing volumes).

Only to run the service: signing you in securely, filing and reading the documents you send, answering the questions you ask, sending the alerts you’ve chosen (deadlines, mentions), and keeping the platform safe. We do not use your information for advertising, we do not sell it, and we do not share it with anyone except the service providers below.

When you upload or forward a document, or ask Montaris a question, that content is processed by Anthropic (the AI provider, located in the United States) to produce summaries, filings, and answers. This happens under commercial API terms — your data is not used to train their models. AI processing is core to how Montaris works; if you prefer a document never be AI-processed, don’t upload it.

Your database records and documents are stored with Supabase, in a Canadian data region, on AWS infrastructure. The website itself is served by Vercel (US). Email you forward to the platform passes through ForwardEmail (US) before it is filed. Encrypted backups are kept in a separate, private repository. Because some providers operate in the United States, some information crosses the border in transit and may be subject to US law while there.

For as long as your family uses Montaris — the point of the service is a permanent, organized record. If your family leaves, you can export your records, and we delete them (including from routine backups as those cycle out) within 90 days of a written request.

You can ask us at any time what we hold about you, ask for corrections, or ask for deletion. Within the portal you already see everything your permissions grant — that transparency is the design. For anything else, email howie@atrbenefits.com and you’ll have an answer within 30 days. If you believe we’ve mishandled your information, you may also complain to the Office of the Privacy Commissioner of Canada.

If a breach of our safeguards ever creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner promptly, tell you plainly what happened and what we’re doing about it — as the law requires and as you’d expect from people you trust.

Montaris is not directed at children. This policy may be updated as the service evolves — material changes are announced in the portal, and the effective date above always tells you the current version. How we secure everything described here is documented at montaris.io/trust.