Privacy Policy

Last updated: April 15, 2026  ·  GoJumbo Digital Solutions Inc.

1. Who We Are

Rootly is a product of GoJumbo Digital Solutions Inc. ("we", "us", "our"), a company incorporated in Canada. We operate the Rootly platform, accessible at rootly.ca, which provides financial health insights and tools for newcomers to Canada.

For privacy inquiries, contact us at: hello@rootly.ca

2. Our Commitment to PIPEDA

We adhere to the 10 fair information principles under PIPEDA:

• Accountability: We are responsible for personal information in our possession.
• Identifying Purposes: We identify why we collect personal information before or at the time of collection.
• Consent: We obtain meaningful consent before collecting, using, or disclosing personal information.
• Limiting Collection: We collect only what is necessary for the identified purposes.
• Limiting Use, Disclosure & Retention: We use information only for its intended purpose and retain it only as long as necessary.
• Accuracy: We keep personal information accurate, complete, and up to date.
• Safeguards: We protect information with appropriate security measures.
• Openness: Our privacy practices are available upon request.
• Individual Access: You can access your personal information and challenge its accuracy.
• Challenging Compliance: You can challenge our compliance with these principles.

3. Information We Collect

3.1 Information You Provide

• Email address (when you sign up for early access or create an account)
• Name and profile information (when you complete your profile)
• Marketing consent preferences

3.2 Banking Data via Plaid

When you connect your bank account, we use Plaid Inc., a financial data provider. Through Plaid we may collect:

• Account balances and transaction history
• Income patterns and spending behaviour
• Account type and institution information

We access this data only with your explicit consent. We do not store your banking credentials — Plaid handles authentication directly with your financial institution using bank-level encryption.

3.3 Automatically Collected Information

• IP address and browser/device type
• Pages visited and time spent on Rootly
• Referral source

4. How We Use Your Information

• To provide and improve the Rootly platform and financial health score
• To send product updates, tips, and recommendations (with your consent)
• To comply with legal obligations
• To detect and prevent fraud or misuse
• To communicate with you about your account

We do not sell your personal information to third parties.

5. CASL — Canadian Anti-Spam Legislation

We comply with Canada's Anti-Spam Legislation (CASL). We will only send you commercial electronic messages (CEMs) if you have provided express consent. Every marketing email we send includes a clear and easy unsubscribe mechanism. You may withdraw consent at any time by clicking "Unsubscribe" in any email or contacting hello@rootly.ca.

6. Sharing Your Information

We share personal information only in the following circumstances:

• Service Providers: Trusted third parties who assist us in operating Rootly (e.g., Plaid for banking data, SendGrid for email delivery, Google for data storage). These parties are contractually bound to protect your information.
• Legal Requirements: If required by law, court order, or regulatory authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting hello@rootly.ca. We will respond within 30 days.

8. Security

We implement industry-standard security measures including TLS/HTTPS encryption for data in transit, secure cloud infrastructure, and access controls limiting who can view personal information. However, no method of transmission over the internet is 100% secure.

9. Your Rights

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent for certain uses (noting this may affect our ability to provide services)
• Request deletion of your personal information
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us at hello@rootly.ca.

10. Children's Privacy

Rootly is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Continued use of Rootly after changes constitutes acceptance of the updated policy.

12. Contact Us

GoJumbo Digital Solutions Inc.
Privacy Officer
hello@rootly.ca
Toronto, Ontario, Canada