Privacy

This page is written in plain language because most of our visitors are reading in their second or third language. If anything is unclear, email [email protected] and we'll answer in plain words.

In one line: we collect the profile information you give us to run a fit check against Canadian immigration programs, we don't sell it, and you can ask us to delete all of it.

We make money only from the $20 USD report and the $5 USD refresh. We have no referral or affiliate relationships with any RCIC, immigration lawyer, ECA provider, language test centre, or any other party in your immigration journey, so none of them pay us to surface them in your results. We are not affiliated with IRCC or the Government of Canada.

What we collect

You decide what to share. One item below — error telemetry — is recorded automatically if something breaks. Usage analytics runs only if you accept cookies. Everything else is collected only when you type or click it. We never ask for passport numbers, social insurance numbers, or financial account numbers.

• Identity basics — given name, family name, date of birth, country of citizenship, country of current residence, whether you are currently in Canada.
• Family — marital status, spouse details if you share them, number and ages of dependent children, whether they will accompany you.
• Education — your credentials (degree level, field of study, country where you studied, institution if you choose to enter it), and whether you have a Canadian Educational Credential Assessment (ECA).
• Work history — job titles, NOC codes, country of work, hours per week, start and end dates, and whether the work was inside Canada and authorized.
• Language results — which test (IELTS, CELPIP, TEF, TCF), test date, and the four section scores. We do not store scanned test certificates.
• Settlement intent and funds — the province you plan to settle in and your declared settlement-funds amount.
• Job offer / nomination — if you have a Canadian job offer or provincial nomination and choose to describe it.
• Account info (only if you sign in) — your email address. We use Google sign-in or a one-time email link; we never see or store a password.
• Email and phone (required for every free report) — we ask for these two on the profile form. Email lets you come back later to view your saved report, and the email + phone pair is how we enforce a limit of one free report per person every 30 days. The phone number is stored in international format (e.g. +15551234567) so we can add an SMS verification step later without changing the form. We do not send marketing texts. We will only send a verification SMS once that feature is wired up.
• Chat messages (paid report only) — anything you type in the 7-day AI chat about your case. We store these so the chat can reference earlier turns.
• Payment metadata (paid report only) — the amount, the date, and a Stripe transaction id. We never see your card number, CVC, or billing address. Stripe handles that on its own page.
• Feedback you choose to give — the thumbs vote and the optional one-line comment under your free report. You can leave both blank.
• Error telemetry (auto)— if something on the site fails (a button doesn't work, a page errors out, an API call returns the wrong thing), we record a short report so we can fix it. The report contains: the page you were on, the error message, your browser user-agent, and a random session id stored in your browser's localStorage to correlate multiple errors from one visit. Email addresses and phone numbers that accidentally appear in error messages are automatically redacted to [email-redacted] /[phone-redacted] before the report is written. Signed-in users have their account id attached; anonymous visitors are only identified by the random session id, which never leaves your browser unless an error fires. You can clear localStorage to reset it any time.
• Usage analytics (only if you accept cookies) — if you accept cookies, we use Google Analytics to understand how the site is used: how many people visit, which pages they read, what device and browser they use, and an approximate location worked out from their IP address. Google sets a cookie to tell a returning visit from a new one. We also send Google three usage milestones: a free check was finished, a checkout started, and a purchase happened (with the price, $20 or $5). These carry no order number and no profile details — we first strip out any page address that holds your order number, and Google never receives the information you type into the form. If you decline, none of this loads. You can change your choice anytime — the Cookie settings control sits at the bottom of every page. See the Google Analytics entry under “Who else handles your data” below.
• Which ad brought you here (our records only) — if you arrive by clicking one of our paid ads, the ad link carries a short campaign label (for example “facebook”). We keep that label with your free check and any order, in our own records, so we can tell whether our ads are working. It is a label about our ad, not about you — it holds no personal details, we never share it, and it is deleted on the same schedule as the record it sits on (free-check records are deleted after 35 days). We only remember the label in your browser between visits if you accept cookies; otherwise it lasts for your current visit only, and it expires about 30 days after your visit either way.

How AI is used

The fit check itself is deterministic — published program rules in, eligible / partial / unclear / ineligible out. No AI involved at that step.

Where AI is used: writing the plain-language summary on your free report, and (if you buy a report) ranking the top matches, writing the per-program explanations, drafting questions for an RCIC, and powering the 7-day chat. Those calls go through Vercel AI Gateway to Anthropic's Claude. Per Anthropic's API terms, your data is not used to train Anthropic's models.

We strip your given name and family name out of AI responses before they reach the page, so the report never refers to you by name. Anything you type in the chat is sent to the same AI provider on each turn.

Who else handles your data

We don't sell your data. We use a small set of sub-processors to run the service. Each one only sees the slice it needs.

• Supabase — our database and email-link / Google sign-in. Stores your profile and account row. Hosted on AWS in the United States. Encrypted at rest.
• Vercel — runs the website itself and the scheduled jobs. Sees request metadata (IP, browser, URL) like any web host does.
• Google Analytics — measures how the site is used (page views, device and browser type, and an approximate location from your IP). It loads only after you accept cookies, and we remove any page address that holds your order number before anything is sent. It sets a cookie to tell a returning visit from a new one, and does notreceive the profile details you type into the form. You can also opt out for all sites with Google's opt-out browser add-on.
• Anthropic (via Vercel AI Gateway) — generates the written parts of the report and the chat. Sees a redacted version of your profile (your name is stripped) and the messages you type in chat.
• Stripe — processes payments. Sees your email and card on its own checkout page. We see only a transaction id and the amount. Stripe is required by law to keep payment records for tax and fraud purposes.
• Brevo — sends transactional emails (your sign-in link, your receipt). Sees the email address and message body.

How long we keep it

• Free check, no sign-in — your result shows in your browser tab. We also save the answers you entered and the result we showed you, with no name attached (they are linked only to an anonymous code), for up to 90 days. We keep them so a repeat visitor with the exact same answers gets the same instant result, and so we can check quality and help you if you write in. After 90 days they are deleted automatically. Your email and phone are stored separately so we can limit each visitor to one free report every 30 days; we delete those after 35 days.
• Ad performance — when a free check runs, we also record an anonymous row noting whether it finished and, if you arrived from one of our ads, which ad link brought you. It holds no name, email, or phone — only the same anonymous profile hash and the ad label. We use it to judge whether our ads are worth the cost. These rows are deleted after 90 days.
• Signed-in account — we keep your profile and reports until you ask us to delete them or until the account has been inactive for 24 months, whichever comes first.
• Paid report chat — chat messages are kept for 90 days after your 7-day access ends, then deleted, so you can come back briefly and re-open a refund or refresh.
• Payments — Stripe retains the canonical transaction record (amount, date, Stripe id) for 7 years on its side to meet Canadian tax-record requirements. Our own copy of the order is removed when you delete your account; the card itself was never in our system.
• Feedback — the thumbs vote and optional comment are kept indefinitely and only used to improve the product. They are linked to the anonymous profile hash, not to your name or email.

Cross-device behaviour

We try to be honest about this because the words “cloud sync” get oversold elsewhere.

• Without signing in, your free report and profile live in the browser you used. Switching to another browser, phone, or computer will not show your earlier report — you would re-run the check.
• After signing in, your profile and any paid reports are stored on our server and tied to your account, so you can open them on any device by signing in with the same email.

Your rights

You can ask us to show, correct, or delete your data at any time. We act on the request within 7 days.

The fastest path to a clean delete is the button below. It removes your profile, every cached match, every AI-generated report, your chat messages, your saved feedback, your orders, and your login (the actual auth row in Supabase, not just a sign-out). The only thing that stays is the transaction record at Stripe (legally required for tax purposes). Your free-report-attempts row is also kept until its natural 30-day expiry — deleting it would let an abuser bypass the one-free-report-per-month cap by deleting their account each month.

Children

The service is for people 18 or older. We don't knowingly collect data from anyone younger. If a child's profile was submitted by a parent inside their own family details (e.g. a dependent age and relationship), only those fields are stored, and the same deletion above clears them.

Where we are based

Operated from Canada. Servers are in the United States via Supabase and Vercel. By using the service you understand your data crosses the Canada / US border.

Changes to this policy

If we change anything important, we update the date at the top and, if you have an account, we email you before the change takes effect. Past versions are available on request.

Contact

Privacy questions: [email protected]
General questions: [email protected]

You can also read our terms and our FAQ.