Privacy Policy

Effective 15 October 2026

ImmigratEasy Inc. ("ImmigratEasy", "we") operates immigrateasy.com. This policy explains what personal information we collect, why, who sees it, and your rights under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. What we collect

Account: your name, email address and password (stored as a hash, never readable by us).

Profile: the answers you give in Start and elsewhere, such as age, education, work history, language scores, family details, and the immigration program you choose. This is the information needed to estimate your CRS score and guide you.

Documents: files you choose to upload to your vault, and the forms the service pre-fills from your answers. Uploaded documents are encrypted at rest.

Learning: your placement results, practice answers, writing submissions and self-ratings in the Learning Hub.

Conversations: your messages to Immi and Immi's replies.

Payment: your purchase record (date, amount, plan). Card details go directly to Stripe and never reach our servers.

Technical: standard server logs (IP address, browser, pages visited) kept for security and to run the service.

Beta feedback and accuracy reports: when you use the Beta feedback tab or the "This looks wrong" button, we receive your message, the page you were on, your screen size, your browser type, your account email if you are signed in, the answer or result you are reporting, and a screenshot of the page if you leave that box ticked. The report is emailed to our support inbox. An AI model reads it to sort it by type and urgency, summarise it and suggest which part of the service it concerns, so we can act on it quickly. We keep these reports for as long as we need them to improve the service, and you can ask us to delete them at support@immigrateasy.com.

2. Why we use it

To provide the service you signed up for: estimates, guidance, document preparation, language practice. To send you transactional email (verification, receipts, refund confirmations). To keep the service secure and fix problems. We do not sell personal information and we do not use it for advertising.

3. Who processes it for us

Supabase (database and file storage, hosted in Canada, ca-central-1). Railway (application hosting). Stripe (payments). Resend (transactional email). PostHog (product analytics, hosted in the European Union, Frankfurt): which pages are opened and which steps are completed, tied to your account only after you sign in; no session recordings and nothing you type. Zoho (our support email inbox, hosted in Canada). Anthropic (the AI model behind Immi and the writing grader): when you message Immi, submit writing for grading or send beta feedback, the relevant parts of your profile and your text are sent to the model to produce a reply; they are used to answer you, not to train the model. Each provider is bound by its own privacy terms and we share only what the function needs.

4. Where your data lives

Your database records and documents are stored in Canada. Some processors operate outside Canada (for example Stripe and the AI provider), so parts of your information may be processed in the United States, where it is subject to the laws of that country. Some of our service providers store or process data outside Canada, including in the United States and the European Union (Germany, for product analytics).

5. How long we keep it

For as long as your account exists. When you delete your account, we delete your profile, documents, learning records, Immi conversations and account record. Payment records are kept for seven years as required by Canadian tax law, with the personal detail reduced to what that record needs. Server logs are kept for up to 90 days.

6. Your rights

You can see and correct your information in the service. You can delete your account from Settings, which removes your data as described above. You can ask us for a copy of your information, ask what we hold, or withdraw consent, by writing to support@immigrateasy.com. We answer within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.

7. Security

Encryption in transit and at rest for uploaded documents, hashed passwords, access limited to what the service needs, and a dev environment that is separate from your data. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

8. Cookies

We use a session cookie to keep you signed in and local browser storage for your preferences. We do not use advertising cookies. Our analytics (PostHog, see section 3) count pages and completed steps without selling or sharing your data.

9. Children

The service is for people 18 and over. We do not knowingly collect information from children.

10. Changes

We may update this policy. The effective date shows the current version; material changes will be announced before they take effect.

11. Contact

Privacy questions: support@immigrateasy.com