Privacy Policy

This Privacy Policy explains how Canlip ("Canlip," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our website and web application (together, the "Service"). We know that immigration-related information is sensitive, and we've tried to collect and keep only what the Service actually needs to work for you.

1. Information we collect

We collect the following categories of information:

• Account information: your name, email address, and password (stored as a secure one-way hash, never in plain text). If you enable two-factor authentication, we store the information needed to verify it.
• Immigration profile information: what you tell us during our guided intake and afterward — your current immigration status and its expiry, date of arrival in Canada, your goal, province, nationality/country of citizenship, occupation (NOC code), language test results, marital status, education, employment details, family in Canada, and, where applicable, your date of birth.
• Document tracking information: the document type and expiry date of documents you choose to track for renewal reminders. We do not currently store uploaded copies of your documents.
• Physical presence information: your permanent residence landing date and trips outside Canada you log, used to calculate your progress toward citizenship residency requirements.
• Payment information: if you subscribe to a paid plan, our payment processor Stripe collects and stores your payment details directly — we receive only your subscription status and billing history, never your full card number.
• Communications: messages you send to a consultant through the Service, life events you report, and messages you send us directly (for example, through our contact form).
• Usage and device information: basic technical information (IP address, browser type, pages visited) and, if you enable them, push-notification tokens.

2. How we use your information

We use your information to:

• Operate the Service — track your pathway and milestones, send you renewal and presence-update reminders, and send well-wishes on important dates.
• Generate AI-assisted pathway suggestions tailored to your circumstances (see Section 3).
• Route your questions to a registered immigration consultant, when you use that feature.
• Send you notifications you've opted into, through in-app, email, and (if enabled) push channels — every notification email includes a working unsubscribe link.
• Process payments and manage your subscription, through Stripe.
• Maintain security — detect and prevent fraud, unauthorized access, and abuse, and keep an audit trail of security-relevant account activity.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use it to train third-party advertising profiles.

3. AI processing of your information

To generate pathway suggestions, relevant fields from your intake and current circumstances are sent to a third-party AI provider (Anthropic, whose Claude models power this feature) along with a web search capability used to research current program information. We send only the information relevant to producing an eligibility assessment — not, for example, your raw account credentials. AI-generated results are always labeled as such within the Service and come with a disclaimer that they may contain mistakes.

4. How we share your information

We share information with the following categories of third parties, only as needed to operate the Service:

• Stripe — to process payments and manage subscriptions.
• Resend — to deliver transactional and notification emails.
• Google Cloud Platform — to host the Service and store data, in a Canadian data center.
• Anthropic — to generate AI-assisted pathway research, as described in Section 3.
• A registered immigration consultant — only if you choose to use the consultant messaging feature, and only the information relevant to your question.

We may also disclose information where required by law, to protect the rights, safety, or property of Canlip or others, or in connection with a merger, acquisition, or sale of assets — in which case we'd take reasonable steps to ensure your information continues to be protected.

5. Admin broadcasts and your activity

An administrator may occasionally broadcast curated immigration news relevant to your pathway and circumstances. Per our internal accountability standards, the content of what's broadcast, and the fact that a given subscriber received it, is retained even if you later delete your account — in that case, the record is de-identified rather than deleted outright, so we can still account for what was sent and when without retaining your personal details. Certain other account activity (pathway changes, document uploads, broadcast views) is likewise logged, both so you have your own record and so we can investigate a dispute if one ever arises.

6. Data storage, security, and retention

Your data is stored on Google Cloud infrastructure located in Canada, encrypted in transit and at rest. We use industry-standard security practices, including modern password hashing, optional two-factor authentication, rate limiting on sensitive actions, and least-privilege access controls for our own systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We retain your information for as long as your account is active, and for a limited period afterward as described in Section 7, or longer where we have a legal obligation to do so (for example, security or audit records).

7. Your rights and choices

• Access and correction — you can view and update most of your information directly from your account settings.
• Deletion — you can delete your account at any time, either immediately or on a 7-day grace period you can cancel. Immediate deletion permanently removes your personal data, subject to the de-identified retention described in Section 5.
• Notification preferences — you can turn off email notifications, and push notifications if enabled, at any time.
• Access requests — you can contact us to request a copy of the personal information we hold about you, or ask us to correct or delete it, subject to the limits described in this policy.

8. Children's privacy

The Service is not directed at children, and we do not knowingly collect personal information from anyone under 18. If we learn we've collected information from a child under 18, we'll delete it.

9. Cookies

We use essential cookies to keep you signed in securely (httpOnly, secure session cookies) and to protect against cross-site request forgery. We do not use third-party advertising or tracking cookies.

10. International data transfers

While the Service is hosted in Canada, some of our service providers (including our AI and payment processors) may process data on servers located outside Canada. Where this happens, we take steps to ensure those providers offer an appropriate level of protection for your information.

11. PIPEDA and your privacy rights

As a Canadian service handling personal information, we aim to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. If you have concerns about how we've handled your information that we haven't resolved, you have the right to complain to the Office of the Privacy Commissioner of Canada.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you through the Service or by email before they take effect.

13. Contact us

Questions about this Privacy Policy, or a request relating to your personal information? Reach us through our Contact us page, or email us directly at info@damtimore.com.