Privacy Policy

We collect personal information you provide directly to us, including when you submit an assessment request through our website, engage our services, or communicate with us. This information may include:

• Contact details: name, email address, phone number, company name, job title
• Business information: province, industry, number of technical employees, description of your R&D activities
• Communication records: emails, notes from calls, and messages you send us
• Financial information (for clients only): payroll data, subcontractor invoices, expense records, and other financial documentation required for SR&ED claim preparation
• Technical information: IP address, browser type, device information, and pages visited, collected automatically through cookies and similar technologies

We use your personal information for the following purposes:

• To respond to your inquiries and provide a preliminary SR&ED refund estimate
• To deliver our SR&ED tax credit consulting services, including preparing T661 narratives, Schedule 31 calculations, and provincial credit filings
• To communicate with you about your claim, our services, and relevant industry updates
• To comply with legal, regulatory, and tax obligations
• To improve our website, services, and internal processes
• To defend claims and manage the CRA review process on your behalf, where applicable

We process your personal information based on:

• Your consent, which you provide when submitting an assessment request or engaging our services
• Performance of a contract, when we deliver services under an engagement letter
• Compliance with legal obligations, including tax reporting and regulatory requirements
• Our legitimate interests in operating and improving our business, provided these interests do not override your rights

We do not sell your personal information. We share information only in the following circumstances:

• With the Canada Revenue Agency (CRA) and provincial tax authorities when filing your SR&ED claim on your behalf
• With service providers who help us operate our business, including cloud hosting (Vercel), database (Supabase), email delivery (Resend), and analytics providers — all under strict confidentiality agreements
• With your accountant or other advisors, only with your written authorization
• When required by law, court order, or to protect our legal rights
• In connection with a merger, acquisition, or sale of business assets, subject to confidentiality protections

We retain your personal information only as long as necessary to fulfill the purposes described in this policy, or as required by law. Specifically:

• Assessment request submissions from non-clients: retained for up to 24 months, after which they are deleted or anonymized
• Client records: retained for the duration of our engagement and for a minimum of 7 years thereafter, in accordance with CRA record-keeping requirements
• Technical/analytics data: retained for up to 12 months in identifiable form

Under PIPEDA and Quebec's Law 25, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention requirements)
• Withdraw consent for the collection or use of your information (though this may limit our ability to provide services)
• Request that we cease using or disclosing your information for specific purposes
• Lodge a complaint with the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec

To exercise any of these rights, contact us at the address below.

We implement industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls limiting who can view sensitive information
• Regular security audits of our systems and third-party providers
• Employee training on privacy and confidentiality
• Incident response procedures in the event of a data breach

While we take reasonable steps to protect your information, no system is entirely secure. If you have reason to believe your data has been compromised, please contact us immediately.

Some of our service providers may store or process your information outside of Canada, including in the United States. When we transfer information internationally, we take steps to ensure it remains protected by appropriate safeguards, including contractual protections with our providers. By using our services, you consent to such transfers.

Our website uses cookies and similar technologies to remember your language preferences and analyze how visitors use our site. Currently we use:

• Essential cookies: required for basic site functionality (e.g., language preference stored as "sc_lang")
• Analytics cookies (if enabled): to help us understand website traffic and improve user experience

You can control cookies through your browser settings. Blocking essential cookies may affect site functionality.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The updated version will be indicated by a new "Last updated" date. We encourage you to review this policy periodically. Material changes will be communicated to active clients directly.

For questions, concerns, or requests regarding this Privacy Policy or the personal information we hold about you, please contact:

Synergy Credits Consulting Inc.

Email: team@synergycredits.ca

Location: Montréal, Québec, Canada

For unresolved concerns, you may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca, or the Commission d'accès à l'information du Québec at cai.gouv.qc.ca.