Privacy Policy

1. Introduction

My Canada Plan (“we,” “us,” or “our”) operates an online immigration assessment tool at mycanadaplan.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services. We are committed to complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation.

By using our services, you consent to the collection and use of your information as described in this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

When you complete our immigration assessment quiz, we collect the following categories of personal information:

• Personal identifiers — name, date of birth, gender, country of citizenship
• Education history — highest level of education, institution location, credentials
• Work experience — occupation, years of experience, employment status
• Language proficiency — English and/or French test scores and CLB levels
• Financial information — approximate savings range, net worth range, and budget preferences
• Family and relationship details — marital status, dependents, family connections in Canada
• Background information — criminal record status, immigration refusal history, medical concerns, and military service history
• Contact information — email address (when you choose to provide it)
• Payment information — processed securely by Stripe; we do not store your credit card number or payment details on our servers

3. How We Collect Information

We collect personal information directly from you when you complete our immigration assessment quiz or interact with our website. All information is provided voluntarily. We do not collect information from third-party sources or use automated means to gather personal data about you.

4. How We Use Your Information

We use your personal information for the following purposes:

• To generate your personalized immigration assessment report, including CRS score estimates, eligible pathways, and recommended next steps
• To process payments for premium report access through Stripe
• To send your report summary and relevant updates to the email address you provide, if applicable
• To improve and refine our assessment tool and services
• To respond to your inquiries and provide customer support
• To comply with legal obligations and protect our rights

We will not use your personal information for purposes beyond what is described here without obtaining your consent.

5. Data Storage and Security

We take reasonable measures to protect your personal information:

• Local browser storage: Your quiz progress and answers are stored locally in your web browser (localStorage) so you can resume your assessment. This data remains on your device and is not transmitted to our servers unless you choose to submit your assessment.
• Encryption in transit: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
• Payment security: Payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified payment processor. We never have access to your full credit card number.
• Server-side storage: When you submit your assessment, your data is stored in a secure database hosted by Supabase with access controls and encryption at rest.

While we implement industry-standard safeguards, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Third-Party Services

We use the following third-party services to operate our platform:

• Stripe — Payment processing. Stripe collects and processes your payment information under its own privacy policy at stripe.com/privacy.
• Vercel — Website hosting and content delivery. Vercel may process request logs (IP addresses, request timestamps) as described in their privacy policy at vercel.com/legal/privacy-policy.
• Supabase — Database hosting for server-side data storage, governed by their privacy policy at supabase.com/privacy.
• Google Fonts — Font delivery. Loading fonts may transmit your IP address to Google servers, as described in Google's privacy policy.

We do not use analytics tracking tools, advertising pixels, or social media tracking scripts on our website.

7. Cookies and Local Storage

Our website uses minimal cookies and browser storage:

• Session cookie — A secure, HTTP-only cookie is used to maintain your quiz session. This cookie expires after 7 days and contains only a session identifier.
• Local storage — We use your browser's localStorage to save your quiz progress so you can return and resume your assessment. You can clear this data at any time through your browser settings.

We do not use advertising cookies, third-party tracking cookies, or analytics cookies.

8. Data Retention

Quiz data stored in your browser persists until you clear your browser's localStorage or the data is overwritten by a new session. Server-side data is retained for as long as necessary to fulfill the purposes described in this policy, or as required by law. You may request deletion of your personal information at any time by contacting us.

9. Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights:

• Right to access — You may request access to the personal information we hold about you.
• Right to correction — You may request that we correct any inaccurate or incomplete personal information.
• Right to withdraw consent — You may withdraw your consent for us to collect, use, or disclose your personal information at any time, subject to legal or contractual restrictions. We will inform you of any implications of withdrawing consent.
• Right to complain — If you believe we have not handled your personal information appropriately, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, please contact us at support@mycanadaplan.com. We will respond to your request within 30 days.

10. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16 without appropriate consent, we will take steps to delete that information promptly.

11. International Data Transfers

Your personal information may be processed and stored in countries outside of Canada, including the United States, where our third-party service providers (Stripe, Vercel, Supabase) maintain servers. When your data is transferred internationally, it may be subject to the laws of those jurisdictions, which may differ from Canadian privacy law. We take reasonable steps to ensure that your information is treated securely and in accordance with this privacy policy regardless of where it is processed.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, services, or legal requirements. When we make changes, we will update the “Effective date” at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us: