Privacy policy
Last updated: July 2026 · Drafted for PIPEDA and Quebec Law 25.
Suffisa was designed so that the most private thing about your retirement — the numbers — never has to leave your device. This policy explains what we do and don't collect, in plain terms.
What we collect
We use privacy-friendly external analytics to count page views and unique visitors, without advertising profiles and without your simulation inputs. We also count the unique browsers that finish an analysis: a random browser identifier is converted to a server-salted one-way digest, and we store only that digest and the first completion time. We do not store the identifier itself, your IP address, user agent, or any simulation input for this measurement. If you create an account: your email address, language preference, and — if you subscribe — your province (for tax on receipts) and PayPal payment confirmations (never your card number). If you save a plan: the plan's inputs, encrypted at rest.
What never leaves your device
The free simulator runs entirely in your browser. Anonymous plans are stored only in your browser's local storage; we can't see them, and no simulation input is ever sent to us unless you explicitly choose Save. A separate random browser identifier used only for the completed-analysis count stays in local storage; clearing browser storage resets it.
How saved plans are stored
Saved plans are encrypted (AES-256) before they are written to our database, which is itself encrypted at rest. Share links you create expose a read-only view of a plan's numbers to anyone holding the link, until you revoke it.
Payments
Suffisa Plus is billed through PayPal. PayPal processes your payment details under its own privacy policy; we receive and keep only the confirmation (subscription status, amount, date) needed for your receipts.
What we share
We don't sell or rent personal information, and we don't use advertising trackers. Service providers that touch data (hosting, email delivery, payments) do so only to run Suffisa.
Retention and deletion
Your data stays until you delete it. "Delete account and all data" on the account page removes your profile, saved plans, and share links immediately; payment records required for tax purposes are kept only as long as law requires. The anonymous completed-analysis digest is retained for up to 24 months.
Your rights (PIPEDA & Law 25)
You can access, export, correct, or delete your personal information at any time — export and deletion are self-serve on the account page. Quebec residents have the additional rights provided by Law 25, including data portability.
Contact
Privacy questions or requests: hello@suffisa.com. We answer within 30 days, as PIPEDA requires.