AMy Advisor Cockpit
How your clients’ data is protected
Last updated October 20, 2026
The principle
Your clients’ information is processed on your device. Our database has no table for client data — not even an encrypted one. Client details stay in this browser only until you end the meeting or sign out (and never longer than 48 hours). They are never sent to our servers.
What is stored where
| Data | Where | Who can see it |
|---|---|---|
| Client details during a meeting | This browser (IndexedDB) until you end the meeting or sign out, 48 hours at most | Anyone using this browser profile |
| Client and advisor copies (PDF), Client Files | Your device — Client Files optionally encrypted with your password (AES-GCM) | You |
| Your advisor profile details and letterhead (licence number, branch, logo) | Our database ([to be completed]), in your advisor account; this browser keeps a copy until you sign out | You; our administrator, for support |
| Your advisor account (e-mail, name, MGA/company, province, phone) | Our database ([to be completed]); each advisor can read only their own row | You; our administrator, for support |
| Consent records — what you agreed to and when (Terms version, marketing choice) | Our database, in your advisor account; each advisor can read only their own records | You; our administrator, for support |
| Usage counts — how many times a day you did a few things (e.g. downloaded a client copy), never their content | Our database, in your advisor account; each advisor can read only their own counts | You; our administrator |
| Billing | Stripe (we never see card numbers) | You, Stripe, us |
What we cannot see
Client names, numbers, notes and documents — and the passwords you put on Client Files.
Your part (device checklist)
- Use a screen lock and keep your browser up to date.
- Use one browser profile per advisor.
- Don’t run meetings on shared or public computers.
- End the meeting when you’re done.
- Encrypt Client Files with a password.
- Send client PDFs through a secure channel your agency approves — not consumer messaging apps.
- Delete downloads you no longer need.
Proof
Our database tables are: advisor profiles, subscriptions, administrators, consent records, daily usage counts and e-mail delivery records (send log, send state, suppressed addresses and unsubscribe links). None of them holds client information.
Client data stays on your device. We store only your advisor account and billing details.