Privacy consent · disclosure

Consent to disclose your tax information

The consent that lets Hypertax send part of your tax information to a named AI vendor outside Canada. Separate from the consent to use, opt-in, and one choice per purpose.

Version disclose-2026.1Draft — not in forceCounsel review required

Effective from: 2026-01-01
Content hash: 3ab09ae9b4c132e9

This consent is not yet in force

No lawyer has cleared this wording (H03), so Hypertax is not asking anybody to agree to it and is not making any of the disclosures or uses it describes. Every feature below runs its no-consent path until that changes.

This is the standing text of Hypertax's consent to disclose your tax information. It is published here so you can read it, print it and keep it before you are ever asked to agree to anything. The copy you actually sign carries your name, the date you signed and the exact choices you made; you can download that copy at any time from your account.

This document covers disclosures only — information leaving Hypertax and going to somebody else. It does not let Hypertax use your information for anything beyond preparing your return. That is a separate document at /legal/consent/use, and you agree to it, or do not, separately. Keeping them apart is our own choice rather than something a law makes us do: agreeing that a vendor may read your T4 says nothing about agreeing to be emailed about next year's product, and one signature should not stand for both.

Who is asking, and who you are

The organisation asking for this consent is Hypertax, which prepares your Canadian T1 General return from the information you give it. Hypertax is responsible for your personal information under Canada's Personal Information Protection and Electronic Documents Act, including for information it hands to somebody else to process on its behalf.

Counsel review required · ENTITY-01

The registered legal entity behind the Hypertax trade name is not yet formed (H03). An accountable organisation has to be identifiable by name, and a trade name is not one. The entity name must replace the bare trade name here, and the privacy officer's contact details must be reachable, before any consent is presented to a real person.

The person consenting is you. Your name is filled into the copy you sign, from the name on your Hypertax account, and it appears on the copy you keep.

What we have to tell you before you decide

Before you agree to anything, we tell you in plain language what we want to do with your information, why we want to do it, exactly which part of your information is involved, and what we do for you instead if you say no. Every purpose is listed separately, in the table below, with its own choice. We ask only for the information that the purpose you tick actually needs.
Required wording — PIPEDA Sch. 1, Principle 4.3.2 (purposes stated so the individual can reasonably understand); Law 25 — consent given for specific purposes, in clear and simple language

You do not have to agree to any of this, and saying no is a complete answer rather than a problem to be solved. Your return is prepared the same way, by the same arithmetic, at the same price, with the same support. We will not refuse you service, charge you more, or ask you again and again because you said no. There is no box that agrees to everything at once: each purpose is a separate choice, every box starts empty, and ticking one has no effect on the others.
Required wording — PIPEDA Sch. 1, Principle 4.3.3 (consent not a condition of supply beyond what is necessary); Law 25 — consent must be free, and requested separately for each purpose

What you are choosing, one line at a time

There is no box that agrees to all of this at once. Each row below is a separate choice with its own tick box, every box starts empty, and ticking one has no effect on the others. Leaving every box empty is a complete and expected answer: the last column is what Hypertax does for you when you say no, and it is a working answer, not an error message.

Each row is a separate choice with its own tick box. Every box starts empty.
Your choice	Why we would do it	What leaves Hypertax	If you say no
Read my slip photos for me	To read the printed boxes on a T4 and fill them into your return so you only have to check them, instead of typing every box by hand.	The image file of the slip you upload. Your Social Insurance Number is masked out of the image before it is sent. No other part of your return is included. Limited to the slip images you upload, and nothing else.	You type the boxes from your slip yourself. Every field can be entered by hand and the return is prepared in exactly the same way, with the same arithmetic.
Explain a question to me in different words	To rewrite one of our interview questions in plainer words when our standard wording is not clear to you.	The text of the question itself and where it sits in our list of questions. Your answers, your figures, your name and your identifying details are not sent. Limited to the wording of our questions, and nothing else.	You see our standard wording together with the written help for that question. The question can still be answered and the return still completes.
Answer my support messages using our help articles	To answer a question you type into support chat, using Hypertax's published help articles.	The words you type into the support chat box. Our support assistant is never connected to your return, so no figure from your return is sent automatically — but whatever you choose to type is sent with your message. Limited to the messages you type into support, and nothing else.	Your message is answered from a search of the same help articles, run on Hypertax's own servers, and you can still ask for a human.

Hypertax does not offer, and will not accept, a consent to disclose your entire return. Each choice above is limited to the one narrow category of information named in it, and our software refuses to send anything wider than the category you ticked.

Who receives the information

We name every organisation your information would be sent to, and what it would do with it. We do not describe them as our partners, our service providers or trusted third parties, because those words tell you nothing. If we want to add an organisation, that is a new version of this document and we ask you again.
Required wording — PIPEDA Sch. 1, Principle 4.3.2 and OPC Guidelines for obtaining meaningful consent (the individual must know with whom the information is being shared)

Every recipient this consent authorises, named individually.
Who	What they do	Where they handle it	Safeguard while it is abroad
Anthropic PBC	Reads or writes text on our behalf (AI vendor)	Handles it outside Canada	Commercial terms requiring zero retention and no training on our data (WISP-VND-02, not yet in place)
OpenAI, L.L.C.	Reads or writes text on our behalf (AI vendor)	Handles it outside Canada	Commercial terms requiring zero retention and no training on our data (WISP-VND-02, not yet in place)

Your information leaves Canada

Some of the organisations named in this document handle your information outside Canada. While your information is in another country it is subject to the laws of that country, and the courts, law-enforcement bodies and national-security authorities of that country may be able to obtain access to it. Canadian privacy law cannot prevent that, and neither can we. Hypertax stays accountable for your information wherever it is handled: every organisation named here is bound by contract to protect it to a standard comparable to the protection it has in Canada, and we mask your Social Insurance Number before anything leaves us.
Required wording — OPC Guidelines for processing personal data across borders (notice that the information is processed abroad and becomes subject to that country's laws); PIPEDA Sch. 1, Principle 4.1.3 (accountability for transferred information)

Counsel review required · CROSS-BORDER-01

ASSUMPTION, NOT A VERIFIED FACT. Anthropic PBC and OpenAI, L.L.C. are United States companies, and Hypertax has not contractually pinned inference to any named region, so both are recorded above as handling information outside Canada and the transfer notice is printed on that basis. The safeguard named beside each recipient is the one WISP-VND-02 specifies and it is NOT YET IN PLACE; PIPEDA Principle 4.1.3 requires the contractual means to exist, not merely to be intended, before information is transferred. H03 must confirm the terms with both vendors, or amend the safeguard column to say what is actually signed, and re-issue this instrument either way. Tracked as CPRIV-Q2 in docs/COMPLIANCE.md.

Your Social Insurance Number is masked out before anything leaves Hypertax, for every choice above, and our software enforces that rather than relying on anybody remembering. Masking is not a substitute for telling you that the information travels: it reduces what is exposed if something goes wrong, which is a different thing from your being able to decide.

How long this lasts

This consent lasts until you withdraw it. It does not expire on a fixed date, and it does not renew itself quietly. Two things end it on their own: you withdrawing it, and Hypertax publishing a new version of this document — which we do at least once a tax year. When a new version takes effect, your agreement to the old one stops authorising anything and we ask you again, from scratch, with the boxes empty.

Your agreement to the old version is not deleted when that happens. It stays on record, unchanged, as evidence of exactly what you agreed to and when.

How to withdraw it

You can change your mind at any time. Turn a choice off in your account settings and it stops applying immediately — you do not have to give a reason, and nothing about your return, your price or your support changes. Withdrawing cannot undo something that was already done with your information before you withdrew. We keep the record of what you agreed to and when, unchanged, because that record is the evidence that a disclosure we made was one you had authorised.
Required wording — PIPEDA Sch. 1, Principle 4.3.8 (withdrawal of consent at any time)

In practice: go to your account settings and turn any choice off. The next request that would have used it is refused by the same check that would refuse it if you had never agreed. Withdrawing one choice leaves the others exactly as they were — they are stored as separate records for that reason.

Your copy

When you sign, Hypertax gives you the completed consent to print or save at that moment, and keeps it available in your account afterwards. Nothing in a consent is edited after you sign it. If the wording needs to change, that is a new version and a new signature.

If you think something has gone wrong

If you think your information has been collected, used or disclosed improperly, tell us first, using the privacy contact in our privacy policy; we will answer you in writing. You do not have to come to us first, and you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376. If you live in Quebec, you may instead complain to the Commission d'accès à l'information du Québec at cai.gouv.qc.ca or 1-888-528-7741.
Required wording — PIPEDA Sch. 1, Principle 4.10 and ss. 11–12 (challenging compliance, complaint to the Privacy Commissioner); Quebec Act respecting access to documents — Commission d'accès à l'information

How you sign

You sign by typing your own name into the signature box and confirming. Hypertax does not fill your name in for you and there is no button that signs on your behalf, because a consent given by one click on a page nobody read is not a consent anybody could call enlightened. The date is recorded when you confirm.

Read this document.
Tick only the choices you want. Ticking none is fine.
Type your name.
Confirm. Your copy is available to download straight away.