Privacy Policy

Oh My Registry is do-it-yourself corporate-records software with AI assistance, operated by Oh My HQ Ltd. for accounting firms and the companies they serve. Each firm using the platform is responsible for its own clients; this policy explains what the platform itself collects and how it is protected.

Account information (name, email, sign-in identity), the corporate records each firm chooses to keep (corporations, registers, resolutions, filings, documents), contact records the firm maintains about the people involved (including, where a firm records them, dates of birth, government ID documents and Social Insurance Numbers), e-signature evidence (signature, time, IP address, device), and operational logs.

Social Insurance Numbers are encrypted at the application layer and every read is logged. Identity documents are restricted to senior firm staff and every view is logged. Files are never publicly accessible: every download passes a permission check. Every change is recorded in a tamper-evident, hash-chained audit log.

Each firm's data is isolated: no firm can ever see another firm's records. Client-portal users see only their own corporation(s). Platform staff can access a firm's data only through an audited, read-only support session with a recorded reason. We do not sell personal information, and we do not use your firm's records to train AI models.

The database and stored documents are hosted in Montréal, in Google Cloud's northamerica-northeast1 region. Document storage is private — public access is blocked at the storage level and every file is served through the app with permission checks. The database is backed up automatically every day, the last 14 daily backups are kept, and it can be restored to any point in the last 7 days.

When a firm uses the AI note-ingest feature, the pasted text is processed by an AI model to suggest records. Suggestions are never applied without two human steps (approve, then apply), and applied records are permanently marked as AI-sourced.

We use only the session storage needed to keep you signed in — no advertising trackers.

You may request access to or correction of your personal information. If a firm manages your records, contact that firm first — it controls them. For platform questions, requests, or complaints (including under PIPEDA and Québec's Law 25), contact Oh My HQ Ltd. at support@ohmyregistry.com.