← Provenance Claims

Privacy

Last updated 2026-07-29

Provenance Claims prepares SR&ED tax credit claims. Doing that means handling two sensitive things: your engineering records and your payroll figures. This page explains exactly what happens to both. It is written to be read, not to be survived.

This website collects nothing

There are no analytics, no cookies, no tracking pixels, and no third-party scripts. The refund calculator runs entirely in your browser; the numbers you enter are never transmitted anywhere. If you email us, we have your email address, and nothing else.

What we access during an engagement

We do not need, and do not ask for, customer data held inside your systems, production databases, or personal information about your users.

Where processing happens

Analysis is local-first. Your repository is processed on infrastructure we control, and the bulk of the work, including all initial classification, runs on a local model with no external network calls.

Drafting the claim narrative uses a frontier AI model operated by a third party. Only excerpts are sent: commit messages, pull request text, and short summaries of what changed. Full source files are not sent. This step happens only with your written consent, recorded in the engagement letter, and you may decline it, in which case drafting runs locally and we tell you that review will take longer.

We do not sell your data, and we do not permit it to be used to train anyone's models.

What we keep, and for how long

We retain a claim defense file: the evidence ledger, the drafted narratives, and the citations linking them. If the CRA reviews your claim, this file is what defends it, so it is kept for the CRA's record retention period of six years from the end of the tax year the claim relates to.

Working copies of repository data are deleted once the claim is filed. You can ask us to delete the defense file earlier, and we will, with the caveat in writing that doing so weakens your position if the claim is later reviewed.

Who else sees it

Nobody else. We do not use client work in marketing without asking first, and the sample materials we show prospective clients are built from public open-source code, not from client engagements.

Your rights

Under Canadian privacy law (PIPEDA) you can ask what personal information we hold, ask for corrections, and withdraw consent for a particular use. Email ryan@provenanceclaims.ca and you will get a real answer from a person within a few business days.


Provenance Claims · Vancouver, British Columbia · ryan@provenanceclaims.ca