Privacy Policy
How we collect, use, and protect your information.
Last updated: May 2026
At Plan with Grace, we understand that the information you share with us is deeply personal. You may be navigating one of the hardest periods of your life, and we take our responsibility to protect your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Who We Are
Plan with Grace is a product of Catalyst 17 Inc., a corporation incorporated under the laws of Ontario, Canada ("we," "us," or "our"). We operate planwithgrace.com and the Plan with Grace platform (the "Service"). Our registered address is Toronto, Ontario, Canada.
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at support@planwithgrace.com.
2. What Information We Collect
We collect information you provide directly to us, information generated through your use of the Service, and, in limited cases, information from third parties.
Information you provide:
Account registration details (email address, password)
Profile information (name, province or territory of residence)
Case details (name of the deceased, date of death, estate context)
Documents you upload to the Service
Messages you send to Grace, our AI assistant
Communications you send to our support team
Information generated automatically:
Log data (IP address, browser type, pages visited, timestamps)
Device identifiers and session tokens
Cookies and similar tracking technologies (see our Cookie Policy)
Information from third parties:
If you sign in using a third-party service (such as Google), we receive the profile information you authorise that service to share.
3. How We Use Your Information
We use your personal information to:
- Create and maintain your account
- Provide, personalise, and improve the Service
- Power Grace's AI-assisted guidance, including jurisdiction-aware estate and task information
- Respond to your questions and support requests
- Send you service-related communications (account notices, security alerts)
- Send you product updates and newsletters, where you have consented
- Detect and prevent fraud, abuse, and security incidents
- Meet our legal obligations under applicable Canadian law
We do not use your personal information to train third-party AI models or sell your data to advertisers.
4. Legal Basis for Processing
We process your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.
We rely on the following grounds:
- **Your consent**, which you provide when you create an account and accept these terms
- **Contractual necessity**, to deliver the Service you have signed up for
- **Legitimate interests**, such as improving the Service and maintaining security
- **Legal obligation**, where required by law
You may withdraw consent at any time by contacting us, though this may affect your ability to use the Service.
5. How We Share Your Information
We do not sell your personal information. We share it only in the following circumstances:
**Service providers:** We engage trusted third-party companies to help us operate the Service (for example, cloud hosting, authentication, and AI infrastructure providers). These providers process your information only on our behalf and are bound by data processing agreements.
**Legal requirements:** We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the safety of any person.
**Business transfers:** In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you before your information is subject to a different privacy policy.
**With your consent:** We may share your information for other purposes with your explicit consent.
6. Data Retention
We retain your personal information for as long as your account is active and for a reasonable period afterward to comply with our legal obligations, resolve disputes, and enforce our agreements.
You may request deletion of your account and associated data at any time by contacting support@planwithgrace.com. We will process deletion requests within 30 days, subject to any legal obligations that require us to retain certain records.
7. Data Storage and Security
Your data is stored on servers located in Canada and the United States. We use industry-standard security measures including encryption in transit and at rest, access controls, and regular security reviews.
No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. We will notify affected users and the relevant authorities in the event of a data breach as required by law.
8. Your Rights
Under PIPEDA and applicable provincial law, you have the right to:
- **Access** the personal information we hold about you
- **Correct** inaccurate or incomplete information
- **Withdraw consent** to processing, where consent is the legal basis
- **Request deletion** of your personal information, subject to legal retention requirements
- **File a complaint** with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca
To exercise any of these rights, please contact us at support@planwithgrace.com. We will respond within 30 days.
9. Children's Privacy
The Service is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, by sending you an email notice. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.
11. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy, please contact our Privacy Officer at:
Catalyst 17 Inc. — Privacy Officer Email: support@planwithgrace.com Location: Toronto, Ontario, Canada
You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.