Privacy centre
The local-data controls below apply to this browser only, not your optional cloud account or Stripe records. Manage account export and deletion on the account page. Local tool inputs are not automatically synchronized; hosting, sign-in and test billing involve the separate data flows described in the privacy policy.
Account data — export or deleteStrictly necessary storage
Keeps your profile, roadmap ticks, eligibility progress, tracked budget, language and plan setting on this device so the tools work when you come back.
Always active. Stored in this browser; CARVED does not send these values to a server. Normal website requests still reach the hosting provider. You can delete it all at any time.
Usage analytics
Records coarse events (such as a tool step opened) on this device only, to help improve the tools. Never income, dates, names or free text.
Off by default. When on, events stay in this browser and are not transmitted. This switch does not control the hosting platform's own visitor analytics, described in the privacy policy.
Personalized partner suggestions
Uses your saved profile answers, on this device, to choose which partner offers appear in the dashboard's commercial section.
Off by default. When off, the commercial section shows the same general offers to everyone, without using your profile. Free resources, calculators and results never depend on this choice.
Partner link tracking
Would let an approved, active partner recognise that a visit came from CARVED, through a tracking link.
Off by default. When off, CARVED never opens a tracking link; the plain provider link is used, or the link is shown as unavailable. No active partner exists today. It cannot control tracking on a partner's own website.
Marketing emails and partner offers
Would send optional promotional messages and partner offers by email.
Prototype preference only, off by default. No email address is collected, nothing is sent and no subscription is created.
Marketing text messages
Would send optional promotional text messages.
Prototype preference only, off by default. No phone number is collected, nothing is sent and no subscription is created.
Consent version 2026-10-05.1 · 0 record(s) on this device
If the purposes for which information is used change materially, consent must be refreshed before the new use begins — an existing consent does not carry over to a new purpose.
Deadline and task reminders
Operational reminders about the items you chose to track. Kept separate from marketing and partner offers.
Product news and promotions
Marketing messages about new features, plans and partner offers. Requires express opt-in.
Before any commercial electronic message is sent, the sender and current contact details must be identified and a working one-click unsubscribe must be processed promptly. That is a launch requirement, not a setting.
| Stored item | Purpose | Retention |
|---|---|---|
| In-app plan reminder preference | Opt-in display of dated tasks; no message delivery | Kept on this device until you delete it |
| First-year plans | Initial baselines, forecasts, monthly actuals, scenarios and preparation tasks | Kept on this device until you delete it |
| First-year plan recovery copy | One earlier copy kept only when you recover a damaged plan, resolve a tab conflict or open an online snapshot | Kept on this device until you delete it |
| Newcomer profile | Province, city, status, arrival date, family, income and childcare used for estimates | Kept on this device until you delete it |
| Settlement roadmap progress | Which roadmap tasks you ticked | Kept on this device until you delete it |
| Eligibility progress | Which eligibility and deadline items you marked complete | Kept on this device until you delete it |
| Financial tracking | Your monthly budget scenarios, planned and actual amounts | Kept on this device until you delete it |
| Plan setting | Whether the mock Premium switch is on | Kept on this device until you delete it |
| Consent and communication preferences | Your optional-purpose choices with purpose, timestamp, version and channel | Kept on this device until you delete it |
| Language preference | Whether you chose English or French | Kept on this device until you delete it |
| Beta feedback answers | The closed answers and optional comment you saved in the beta feedback panel | Kept on this device until you delete it |
| Local product analytics | Consent-gated counts of screens and actions, stored on this device only | Kept on this device until you delete it |
| Saved contribution room inputs | TFSA, RRSP and FHSA amounts you chose to save in the Saving & investing tool | Kept on this device until you delete it |
| Rule review inbox (staff page) | Rule updates imported, approved or rejected on the internal review page | Kept on this device until you delete it |
| Old beta welcome setting | Left over from a removed welcome window; deleted with everything else | Kept on this device until you delete it |
Usage analytics is off, so no event is recorded. Turn it on in the privacy centre if you want to help improve the tools.
Only safe metadata is stored: event name, timestamp, route, language, currency code, plan and province code.
0 stored event(s)
No event has been recorded on this device yet.
Website hosting (Lovable platform)
Delivers the website. Every visit sends standard technical request data (such as IP address, time, requested page and browser details) to the hosting infrastructure.. The values you type into the tools are not sent in these requests by CARVED's code. Log region, retention and contractual safeguards are not yet confirmed.
Platform visitor analytics (Lovable published-site analytics)
The hosting platform offers built-in visitor analytics for published sites (for example visits and page views), processed on the site owner's behalf. Its documentation says it is on by default and can be switched off in project settings.. Not controlled by CARVED's consent switches, which only cover on-device analytics. Whether it is on for this site, and its region and retention, have not been verified. The owner must check Project settings → General → Publishing → Visitor analytics.
Email correspondence (hello@carvedcanada.ca)
Receives messages you choose to send, including privacy requests and complaints.. Email is handled by a mail provider outside this website. Deleting data in your browser does not delete emails you sent.
Editor preview error reporting (preview only)
In the editor preview only, app errors are forwarded to the build tool so they can be fixed.. CARVED's error handler sends only a fixed error code, an error-screen type and an allowlisted page path — never code locations, stack traces, the error message, names, causes or anything you typed. Platform-level logs outside CARVED's code are not controlled by this handler.
Optional usage analytics (stored on this device only)
If you turn it on, records coarse events (such as which tool step was opened) on this device to help improve the tools.. Off by default. Never records income, savings, dates, names, city or free text. CARVED's code adds no external analytics or advertising tool. This is separate from the hosting platform's own visitor analytics, listed above.
Stripe — sandbox payment processing
Hosts test Checkout, subscription management and test invoices; receives the account reference and email when available. CARVED does not receive card numbers.. Sandbox connection only; no real money charged or commercial Plus access. Current webhook delivery remains to be verified after deployment. Real payments remain disabled; merchant, tax, contract and privacy decisions are unresolved.
Lovable Cloud — optional accounts and protected storage
Processes optional sign-in, email and session data; stores account/subscription references and the plans and deadlines you explicitly save with verified sandbox access.. Free local tool inputs are not automatically synchronized. Owner-only row security protects saved records. Account export/deletion is separate from local deletion; provider records/logs may remain. Retention, transfer safeguards and privacy assessment adoption are pending.
Email / SMS marketing delivery (none connected)
Would send messages; not enabled. Messaging toggles are prototype preferences only; no address or number is collected and no subscription is created.