Privacy consent · use

Consent to use your tax information

The consent that lets Hypertax itself use your tax information for something other than preparing this return. Separate from the consent to disclose, opt-in, and one choice per purpose.

Version use-2026.1Draft — not in forceCounsel review required

Effective from: 2026-01-01
Content hash: 682f410dafc3837c

This consent is not yet in force

No lawyer has cleared this wording (H03), so Hypertax is not asking anybody to agree to it and is not making any of the disclosures or uses it describes. Every feature below runs its no-consent path until that changes.

This is the standing text of Hypertax's consent to use your tax information. It is published here so you can read it, print it and keep it before you are ever asked to agree to anything. The copy you actually sign carries your name, the date you signed and the exact choices you made; you can download that copy at any time from your account.

This document covers uses only — Hypertax itself doing something with your information other than preparing and filing this return. Sending your information to an AI vendor is a different question and lives in a different document, at /legal/consent/disclose. We keep them apart because they are genuinely different decisions and one signature should not stand for both; agreeing to one has no effect on the other.

Who is asking, and who you are

The organisation asking for this consent is Hypertax, which prepares your Canadian T1 General return from the information you give it. Hypertax is responsible for your personal information under Canada's Personal Information Protection and Electronic Documents Act, including while a hosting company holds it on our behalf.

Counsel review required · ENTITY-01

The registered legal entity behind the Hypertax trade name is not yet formed (H03). An accountable organisation has to be identifiable by name, and a trade name is not one. The entity name must replace the bare trade name here, and the privacy officer's contact details must be reachable, before any consent is presented to a real person.

The person consenting is you. Your name is filled into the copy you sign, from the name on your Hypertax account, and it appears on the copy you keep.

What we have to tell you before you decide

Before you agree to anything, we tell you in plain language what we want to do with your information, why we want to do it, exactly which part of your information is involved, and what we do for you instead if you say no. Every purpose is listed separately, in the table below, with its own choice. We ask only for the information that the purpose you tick actually needs.
Required wording — PIPEDA Sch. 1, Principle 4.3.2 (purposes stated so the individual can reasonably understand); Law 25 — consent given for specific purposes, in clear and simple language

You do not have to agree to any of this, and saying no is a complete answer rather than a problem to be solved. Your return is prepared the same way, by the same arithmetic, at the same price, with the same support. We will not refuse you service, charge you more, or ask you again and again because you said no. There is no box that agrees to everything at once: each purpose is a separate choice, every box starts empty, and ticking one has no effect on the others.
Required wording — PIPEDA Sch. 1, Principle 4.3.3 (consent not a condition of supply beyond what is necessary); Law 25 — consent must be free, and requested separately for each purpose

What you are choosing, one line at a time

There is no box that agrees to all of this at once. Each row below is a separate choice with its own tick box, every box starts empty, and ticking one has no effect on the other. Leaving both empty is a complete and expected answer: the last column is what happens when you say no, and nothing about your return changes.

Each row is a separate choice with its own tick box. Every box starts empty.
Your choice	Why we would do it	What we would use	If you say no
Learn from my return, with my identity removed, to make Hypertax better	To measure where our slip reading and our question wording go wrong, and fix them for everyone.	Field values with every identifier stripped out first — no name, no Social Insurance Number, no address, no employer, no account, no dollar amount that could single you out. What is kept cannot be traced back to you. Limited to information that cannot be traced back to you, and nothing else.	We improve Hypertax from our own test cases and from problems users report by hand. Your return is used only to prepare your return.
Email me about another Hypertax product or a later tax year	To tell you about a Hypertax product or a later tax year that may suit you. This is the only kind of product we would ever contact you about; we do not sell or introduce loans, refund advances, insurance, investments or bank accounts, and this consent does not authorise us to.	Only which tax year you prepared and which tier you bought. No figure from your return is used to decide what to send you, and no figure from your return appears in anything we send. Limited to information that cannot be traced back to you, and nothing else.	We do not email you about other products. Emails about your account, your payment and your return are not marketing, do not depend on this consent, and continue either way.

Hypertax does not offer, and will not accept, a consent to use your entire return. Each choice above is limited to the narrow category of information named in it.

Who holds the information

Neither choice above sends anything to another company to do something with. What is listed below is the company that physically holds Hypertax's systems: our application, the database your return sits in, the encrypted storage for the documents you upload, and our backups. It stores the information; it does not use it.

Every recipient this consent authorises, named individually.
Who	What they do	Where they handle it	Safeguard while it is abroad
Amazon Web Services, Inc.	Stores your files	Handles it outside Canada	AWS customer agreement and data processing addendum; region and contract status to be confirmed (WISP-VND-02, not yet in place)

Your information is held outside Canada

Some of the organisations named in this document handle your information outside Canada. While your information is in another country it is subject to the laws of that country, and the courts, law-enforcement bodies and national-security authorities of that country may be able to obtain access to it. Canadian privacy law cannot prevent that, and neither can we. Hypertax stays accountable for your information wherever it is handled: every organisation named here is bound by contract to protect it to a standard comparable to the protection it has in Canada, and we mask your Social Insurance Number before anything leaves us.
Required wording — OPC Guidelines for processing personal data across borders (notice that the information is processed abroad and becomes subject to that country's laws); PIPEDA Sch. 1, Principle 4.1.3 (accountability for transferred information)

Counsel review required · HOSTING-01

Hypertax's own systems run outside Canada today, which is why this consent carries a cross-border notice even though nothing here is sent to another company to use. Now that every filer is Canadian, H03 should decide whether hosting in a Canadian region is simply the better answer: it would remove the transfer from both instruments rather than disclose it. Until that decision is made, this notice must stay, the exact regions in use must be confirmed, and the safeguard column must say what is actually signed. Tracked as CPRIV-Q2 in docs/COMPLIANCE.md; the same fact is stated in the privacy policy under 'Where your information is stored'.

When we ask you

We ask about the marketing choice before your finished return is put in front of you, never after, and if you say no we do not ask you again for that return. No law makes us do that; we do it because asking somebody for a marketing permission at the moment they are trying to finish their taxes is pressure dressed up as a question, and a consent given under pressure is not free. Separately, Canada's anti-spam law requires your express agreement before we send you a commercial email at all, which is what the second choice above is.

How long this lasts

This consent lasts until you withdraw it. It does not expire on a fixed date, and it does not renew itself quietly. Two things end it on their own: you withdrawing it, and Hypertax publishing a new version of this document — which we do at least once a tax year. When a new version takes effect, your agreement to the old one stops authorising anything and we ask you again, from scratch, with the boxes empty.

Your agreement to the old version is not deleted when that happens. It stays on record, unchanged, as evidence of exactly what you agreed to and when.

How to withdraw it

You can change your mind at any time. Turn a choice off in your account settings and it stops applying immediately — you do not have to give a reason, and nothing about your return, your price or your support changes. Withdrawing cannot undo something that was already done with your information before you withdrew. We keep the record of what you agreed to and when, unchanged, because that record is the evidence that a disclosure we made was one you had authorised.
Required wording — PIPEDA Sch. 1, Principle 4.3.8 (withdrawal of consent at any time)

In practice: go to your account settings and turn either choice off. Withdrawing one leaves the other exactly as it was — they are stored as separate records for that reason. Every marketing email also carries its own unsubscribe link, which works whether or not you go anywhere near your settings.

Your copy

When you sign, Hypertax gives you the completed consent to print or save at that moment, and keeps it available in your account afterwards. Nothing in a consent is edited after you sign it. If the wording needs to change, that is a new version and a new signature.

If you think something has gone wrong

If you think your information has been collected, used or disclosed improperly, tell us first, using the privacy contact in our privacy policy; we will answer you in writing. You do not have to come to us first, and you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376. If you live in Quebec, you may instead complain to the Commission d'accès à l'information du Québec at cai.gouv.qc.ca or 1-888-528-7741.
Required wording — PIPEDA Sch. 1, Principle 4.10 and ss. 11–12 (challenging compliance, complaint to the Privacy Commissioner); Quebec Act respecting access to documents — Commission d'accès à l'information

How you sign

You sign by typing your own name into the signature box and confirming. Hypertax does not fill your name in for you and there is no button that signs on your behalf, because a consent given by one click on a page nobody read is not a consent anybody could call enlightened. The date is recorded when you confirm.

Read this document.
Tick only the choices you want. Ticking none is fine.
Type your name.
Confirm. Your copy is available to download straight away.