Privacy policy
Carte IQ works without an account and without any bank connection. This policy describes, processing by processing, the data actually collected, how long it is kept and the providers involved.
On this page
- info@carteiq.ca
What this policy covers
This policy applies to the Carte IQ site (www.carteiq.ca) and describes every processing of personal data as it actually exists in the service. It does not cover the issuer sites Carte IQ links to: each applies its own policy.
Questionnaire and personalized results
Your questionnaire answers (monthly spending by category, goal, preferences, cards held, province) are kept in your browsing session, as a cookie encrypted and signed by the server. They are tied to no account and no identity.
When an analysis runs, the scenario and its result are stored to produce the result page, reachable through a tokenized link, and are deleted automatically after 24 hours. If you choose to share a result, a copy of the result is kept behind a share link for 30 days by default, 90 days at most; you can revoke that link at any time.
Statement import
If you import a statement (PDF or CSV) to prefill your spending, the file is analyzed when submitted. Only the spending summary by category is kept in your session while you complete the questionnaire; the original file is neither stored nor sent to a third party.
Province and spending level
Carte IQ remembers in your session the province you selected in the province selector. When the network infrastructure routing your request passes an approximate province code (geolocation headers), that code may preselect a province before you choose; it is only used to filter eligible cards and you can correct it at any time. Carte IQ does not record your IP address for this processing.
E-mail offer alerts
When you subscribe to alerts you provide an e-mail address, a language and your alert preferences (card or offer followed, alert type, lead time). The subscription is active only after e-mail confirmation (double opt-in); the date of your consent is recorded. Every e-mail contains an immediate unsubscribe link. E-mails are sent through the delivery provider Resend, which processes your address for delivery.
Assistant
The conversational assistant is optional. When you use it, your message and the context of the page you are viewing (for example the strategy or card shown) are sent to the provider OpenAI to produce the reply. The conversation is kept only in your browser tab, for the duration of your visit. No banking data, no statement and no e-mail address are transmitted through this channel.
Audience measurement
In production, Carte IQ uses Google Analytics 4 to measure traffic (pages viewed, referrer, device). This service sets its own cookies and is governed by Google’s policy. No questionnaire data is sent to this tool.
Hosting and technical logs
The site is hosted on the Heroku platform. Like any web server, the host produces technical logs (IP address, requested page, timestamp) kept briefly for the operation and security of the service. Public forms (alerts, statement import) are protected by a per-IP request limit.
Cookies
Carte IQ uses one encrypted, signed session cookie for the questionnaire, the remembered province and spending level, plus Google Analytics cookies in production. Carte IQ sets no advertising cookie.
Your choices
- Deleting your browser cookies clears the questionnaire and the remembered preferences.
- A personalized result disappears by itself after 24 hours; a share link can be revoked before it expires.
- Any alert can be unsubscribed in one click from the e-mail received.
Your rights and the person in charge
In Quebec, the Act respecting the protection of personal information in the private sector (Law 25) and, elsewhere in Canada, PIPEDA give you the right to access the personal information Carte IQ holds about you, to have it corrected and to withdraw your consent. In practice Carte IQ only keeps an e-mail address for alerts and a temporary result, so an access request gets a simple answer. The person in charge of personal information can be reached at the contact address published on the Contact page and answers within 30 days. If you are not satisfied with the answer, you may file a complaint with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.
Changes
The last review date appears at the top of this page. A significant change to data handling will be reflected here before it takes effect.
Frequently asked questions
Does Carte IQ access my bank accounts?
No. There is no connection to any financial institution. Spending comes from what you enter or from a statement you choose to import, analyzed on the spot.
Do I need an account?
No. There are no accounts on Carte IQ. The questionnaire lives in your browsing session and personalized results are reachable through a temporary link.