Income Canvas
Edge 2026
Data Governance & Compliance

Privacy Policy & Telemetry Governance

This document sets forth the comprehensive data protection, edge isolation, and telemetry protocols enforced across Income Canvas in accordance with global statutory standards.

Last Updated: October 2026 · Conforming to ISO/IEC 27001, CCPA & GDPR

1. Data Minimization & Serverless Edge Isolation

Income Canvas is architected upon Cloudflare Python Workers executing in ephemeral WebAssembly V8 isolates. Unlike conventional cloud monolithic infrastructure, our reader edge nodes do not maintain persistent local storage, database user credentials, or unencrypted session profiles.

All mathematical calculations, debt amortization models, actuarial estimators, and comparison matrices execute synchronously in-memory within edge isolates. Input parameters provided to financial calculators are processed transiently and discarded immediately upon response termination.

2. Information Collection Boundaries

We strictly limit data collection to the minimum technical telemetry necessary to guarantee edge delivery, DDoS mitigation, and regulatory auditability:

  • Network Telemetry: Standard HTTP request headers, IP address (hashed at the edge for rate limiting), user-agent string, and referrer headers collected via Cloudflare edge routing.
  • Newsletter & Research Subscriptions: Voluntary submission of corporate email addresses for research brief dispatches, stored with cryptographic salt-hashing.
  • Client-Side Preferences: Ephemeral UI theming and accessibility preferences stored strictly in local browser storage without server synchronization.

3. Third-Party Data Transmission & Affiliates

We do not sell, rent, monetize, or broker personal data to commercial data aggregators. Outbound hyperlinks to commercial financial institutions, underwriting syndicates, and software vendors may contain sanitized referral tokens for attribution purposes. Visiting external properties is governed exclusively by their respective privacy terms.

4. Rights Under CCPA, CPRA & GDPR

Residents of California, the European Economic Area (EEA), the United Kingdom, and reciprocal jurisdictions maintain non-waivable rights regarding their digital footprint:

  • Right of Access & Portability: The right to request certified disclosure of any stored personal records.
  • Right of Erasure (Forgotten): Immediate cryptographic purging of newsletter email subscriptions upon unsubscribing.
  • Right to Non-Discrimination: Equal access to all publicly published financial models and actuarial intelligence regardless of data privacy election.

5. Data Protection Officer & Inquiries

Formal statutory compliance requests, deletion notifications, or security audit inquiries should be transmitted to our compliance desk at compliance@adstim.net or directed via our institutional contact portal.