Your data and privacy
Your data and privacy
For a fuller picture of authentication, encryption, the extension, and PDF handling, read High security and your account.
App address and custom domain
Our app addresses my-id.ca and hivi-x.ca use Canada's .ca domain. A business's custom domain does not have to use .ca and may be registered or managed through providers outside Canada. Connected custom portals still use our Canadian document storage; a domain ending alone does not establish data residency.
Official documents
The binding descriptions of data practices are on my-id.ca:
How the Chrome extension limits surprise use
my-id.ca autofill keeps autofill off for each website until you enable it for that site. That keeps profile-backed suggestions tied to sites you chose. Field context is sent to my-id.ca to return suggestions you can accept or ignore.
Practical habits
- Review extension permissions when Chrome prompts on install (from the official Chrome Web Store listing only).
- Sign out of the extension on shared computers.
- Update your password and enable two-factor authentication on my-id.ca if your account offers it.
Related guides
- Is it safe to store my SIN in my-id.ca?
- High security and your account
- How the extension talks to my-id.ca
- Sign out and shared devices
Questions
Contact information for the developer appears on the Chrome Web Store listing (support email). Use that channel if you need account-specific help after reading the Privacy Policy.
Frequently asked questions
- Where is my my-id.ca data stored?
- Core records and secure guest uploads are received and stored on our Canadian server, with encrypted backups in Canada. Our mail server is in Québec, but recipient email providers and delivery networks may handle messages elsewhere. Stripe receives limited billing data if you buy a paid plan; optional Google sign-in and Calendar sync can send account or event details, including client details in events, to Google. We cannot guarantee that encrypted Internet traffic never crosses a border. Uploaded documents are not sent through those optional integrations.
- Does my-id.ca send my data to OpenAI, Google, or Anthropic?
- AI processing runs on infrastructure my-id.ca operates. Data submitted to AI features is not sent to external AI providers. Optional Google account and Calendar integrations are described separately in the Privacy Policy.
- How do I delete my account?
- Submit a deletion request in your privacy settings. After approval, deletion is normally scheduled 30 days later. Contact the privacy officer to confirm scope, backup handling and any applicable deadline.