← Back to home

Privacy Policy

Last updated: October 22, 2026

1. Introduction

At Mguard.ai ("we", "our", or "us"), we are deeply committed to safeguarding your personal and financial data. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your information when you use our mortgage risk analysis services (the "Services"). By using Mguard.ai, you acknowledge that you have read and understood how we process your sensitive information.

2. Information We Collect

To provide accurate mortgage risk audits, we collect the following types of information:

  • Account Information: Your name and email address from your Google sign-in.
  • Mortgage Documents (Sensitive Data): When you upload a Mortgage Commitment or related documents (PDF/Images), we process the text contained within these files to perform our AI-driven risk analysis.
  • Technical Data: IP address, browser type, and usage metrics to ensure service security and improve performance.

3. How We Use Your Information

We use your data strictly for the following purposes:

  • Risk Analysis: To identify hidden clauses (e.g., IRD penalties, Bona Fide Sale clauses) and generate your Strategic Audit Report.
  • Service Improvement: To operate and improve the Services (for example, fixing errors and understanding feature usage in aggregate). We do not use your mortgage documents or audit data to train or refine AI models.
  • Communication: To respond to inquiries and support requests that you send us.
  • Security: To prevent fraudulent uploads and protect the integrity of our platform.

4. Data Storage and Security

Given the sensitive nature of mortgage documents, we implement rigorous security measures:

Encryption:

All data is encrypted during transit (SSL/TLS) and at rest (AES-256).

Document and Results Storage:

We do not keep your original PDF file. Your audit results (the extracted mortgage profile and clause analysis) are stored in a local vault in your own browser on your device, so you can reopen them on that same device. On our servers, we keep an analysis cache of the results so that re-uploading the same document does not require a new analysis; cached results are retained for 90 days and then deleted. When you delete a saved audit from the dashboard, both the copy in your browser and the matching server cache entry are deleted. You can also request full account deletion under Section 6.

Access Control:

We maintain strict database-level access controls to ensure that your financial data is never accessible to unauthorized parties.

5. Sharing of Information

We do not sell your personal or financial data to third parties. We only share information with:

  • AI Service Providers: We use Google's Gemini API to process document text. Under Google's API terms, data submitted through the API is not used to train Google's models.
  • Infrastructure Providers: The Services are hosted on Vercel, account data and analysis caches are stored in a managed PostgreSQL database (Neon), and sign-in is provided by Google.
  • Legal Compliance: We may disclose data if required by Canadian law (e.g., a court order) or to protect the safety of our users.
  • Data Residency: Data may be processed on servers located in the United States via Google Cloud/Gemini API infrastructure.

6. Your Rights and Data Governance

In accordance with PIPEDA (Canada) and Ontario privacy standards, you have the right to:

  • Access and export your audit history.
  • Delete a saved audit from the dashboard, which deletes both the copy stored in your browser and the matching analysis cache on our servers.
  • Request full deletion of your account and associated data by contacting us at the email address in Section 10; we process verified requests sent by email.
  • Withdraw consent for data processing at any time (which may limit service functionality).

7. Cookies

We use only cookies that are essential to operate the Services, such as the cookie that keeps you signed in to your account. We do not use tracking, advertising, or third-party analytics cookies.

8. Children's Privacy

Our Services are intended for adults (18+) engaged in real estate transactions. We do not knowingly collect information from individuals under the age of 18.

9. Changes to This Policy

We may update this policy to reflect changes in AI technology or privacy laws. When we make changes, we will post the updated policy on this page and revise the "Last updated" date above. Significant changes will also be highlighted with a prominent notice in the Services.

10. Contact Information

If you have questions regarding your privacy or wish to request data deletion, please contact our Data Privacy Officer at:

Email: legal@mguard.ai or support@mguard.ai