Privacy Policy

1. What We Collect

• Account information: email address, password (hashed)
• Immigration profile: immigration status, province, PGWP expiry date, target NOC, language scores, work experience, education
• Usage data: features used, job searches performed, interviews practised
• CV content: text you upload or paste for enhancement (stored encrypted)
• Interview transcripts: text transcripts of practice sessions (voice recordings are not stored)
• Selectus Assistant questions: what you type into the assistant, the recent turns of that conversation, and which Selectus screen you opened it on. The assistant does not use your profile, documents or credit balance to answer.
• Answers you rate as unhelpful: when you give an assistant answer a thumbs down, we keep that question and that answer, with personal details removed, any comment you add, and the province or country from your profile. These reports are not linked to your account.

2. How We Use Your Data

• To lay out your plan from the dates and answers you give us
• To suggest clearer wording for your CV, using only the text you provide
• To generate coaching reports after interview practice
• To correct and improve the Selectus Assistant, using the answers you rate as unhelpful; only Selectus administrators can see these reports
• To search job postings for the province and role you choose
• To improve our AI models and service quality (anonymized only)

3. Where Your Data Is Stored

All personal data is stored in Supabase's Canada Central (ca-central-1) region, hosted on AWS in Canada. This ensures your data never leaves Canadian jurisdiction, in compliance with PIPEDA.

4. Data Sharing

We never sell your personal information. We share data only with:

• Anthropic (Claude API): CV text, interview answers, interview transcripts and Selectus Assistant questions are sent to Claude for AI processing. Answers rated unhelpful (personal details removed, not linked to your account, without your location) are also sent to Claude once a day to suggest corrections for the Selectus team to review. Before an assistant question is sent, we remove e-mail addresses, phone numbers and identifier-like numbers (such as a UCI, application, passport or SIN number); names and addresses written in words are not removed, so please leave them out. Anthropic does not train on API data.
• Supabase: Database and authentication provider (Canada Central).
• Stripe: Payment processing only — we do not store your card details.
• Resend: E-mail delivery, including a daily summary of unhelpful-answer reports sent to the Selectus team.
• RCIC consultants: Only if you click "Book consultation" — we share your name and email with the selected RCIC only.

5. Your Rights (PIPEDA)

You have the right to:

• Access your personal information (Settings → Export my data)
• Correct inaccurate information (Settings → Profile)
• Delete your account and all associated data (Settings → Delete account)
• Withdraw consent for optional data processing at any time

6. Data Retention

• Account data: Retained until you delete your account
• Interview transcripts: Retained for 12 months, then deleted
• CV enhancements: Retained for 12 months
• Usage logs: Retained for 24 months for billing purposes
• Selectus Assistant conversations: not stored by Selectus, except answers you rate as unhelpful — that question and answer (personal details removed), your comment if you add one, and your province or country are kept for 12 months, then deleted. Otherwise the conversation exists only in your open browser page and is gone when you reload or close it. If you have accepted analytics, we also record the type of question and which sources were used.

7. Cookies

We use only essential cookies required for authentication (Supabase session cookie). We do not use advertising or tracking cookies. Analytics (PostHog) uses anonymized, privacy-preserving event tracking with no personal identifiers.

8. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to your data is protected by Row-Level Security policies — no Selectus employee can access your personal immigration data without your explicit consent.

9. Contact

Privacy questions or requests? Contact our Privacy Officer at privacy@selectus.io