النسخة المعتمدة: الإنجليزية يُقدَّم هذا المستند باللغة الإنجليزية باعتبارها النسخة المعتمدة قانونيًا. الترجمات للأغراض الإرشادية فقط. في حال أي تعارض، يسود النص الإنجليزي.

Privacy Policy

Last Updated: April 3, 2026

Our Commitment to Privacy

At ImmigratEasy, your privacy is paramount. We collect only what's necessary to help you with your Canadian immigration journey, and we never sell your data. This policy explains what we collect, how we use it, and your rights.

What We Collect

Profile Information

  • Name, email, date of birth, nationality
  • Education and work history
  • Language test scores and credentials
  • Documents you upload (only if you choose to)

Technical Data

  • IP address, browser type, device information
  • Usage analytics (pages visited, features used)
  • Cookies and similar tracking technologies

How We Use Your Data

  • CRS Calculations: Process your profile to calculate scores accurately
  • Program Matching: Match you to relevant immigration pathways
  • AI Guidance: Power Immi's personalized recommendations
  • Service Improvement: Analyze usage to improve features
  • Communication: Send important updates and notifications

Data Security

Encryption

All data is encrypted in transit (TLS 1.3). Your saved documents are also encrypted at rest with AES-256 and kept in a private store that is not publicly accessible. Other account data is held in our managed database.

Access Control

Only authorized team members can access your data, and only when necessary to provide support.

Data Retention

We keep your data only as long as you use our service. You can request deletion at any time, and we'll comply within 30 days.

Your Rights

Access

Request a copy of your data

Correction

Update incorrect information

Deletion

Request data removal

Portability

Export your data

Objection

Opt out of certain uses

Restriction

Limit how we process data

To exercise these rights, email us at privacy@immigrateasy.com

AI Processing & Data Residency

How Immi uses AI

Immi, our AI assistant, answers your questions by sending the message you type plus a summary of your in-app state (your CRS score, chosen pathway, pending forms, etc.) to one of two large-language-model providers:

  • Anthropic (Claude), primary provider
  • OpenAI (GPT), fallback when Anthropic is unavailable

Both providers have contractual commitments not to train their public models on API traffic. We do not send them your uploaded documents or your IRCC credentials, those never leave our infrastructure or your browser, respectively.

Where your data is stored

We distinguish between two storage tiers:

  • Stays in your browser (localStorage): your journey progress, the in-progress drafts of your IRCC forms, the document files you choose to analyse locally. This data never leaves your device unless you explicitly save it to your account.
  • Stored on our servers (Supabase, Canada region): your account credentials, your saved profile, your CRS history, and any forms/documents you explicitly save. Supabase is our database provider; our project is provisioned in the Canada (Central) region so Canadian PII stays on Canadian infrastructure. Access is protected by row-level security and scoped to your authenticated user ID.

Chrome extension

If you install the ImmigratEasy Chrome extension to auto-fill IRCC portal forms, the extension reads your saved profile from this app (over an encrypted channel to your own browser session) and fills the IRCC page locally. It does not send your IRCC credentials or the filled-in page contents back to our servers.

Third-Party Services

We use carefully selected third-party services:

  • Hosting: Railway (application servers, United States region). Your stored data and saved documents are held in Canada (see database below).
  • Database: Supabase (Postgres), ca-central-1 (Canada Central, Montreal). Your personal data and documents rest in Canada.
  • AI: Anthropic (Claude) and OpenAI (GPT), see the AI Processing section above
  • Error monitoring: Sentry (PII scrubbed before upload)
  • Analytics: Privacy-focused usage tracking (no PII shared)
  • Payments: Stripe for secure payment processing. No payments are taken during the free beta.

We never sell your data to third parties. Ever.

Questions About Privacy?

If you have questions about this policy or how we handle your data, please contact us:

Email: privacy@immigrateasy.com

Response: We read every message and reply as quickly as we can