Privacy Policy

1. What We Collect

• Account information: email address, password (hashed)
• Immigration profile: immigration status, province, PGWP expiry date, target NOC, language scores, work experience, education
• Usage data: features used, job searches performed, pathway assessments run
• CV content: text you upload or paste for enhancement (stored encrypted)
• Interview transcripts: text transcripts of practice sessions (voice recordings are not stored)

2. How We Use Your Data

• To provide personalized immigration pathway analysis
• To enhance your CV using your target NOC and profile
• To generate coaching reports after interview practice
• To show you jobs aligned with your immigration goals
• To improve our AI models and service quality (anonymized only)

3. Where Your Data Is Stored

All personal data is stored in Supabase's Canada Central (ca-central-1) region, hosted on AWS in Canada. This ensures your data never leaves Canadian jurisdiction, in compliance with PIPEDA.

4. Data Sharing

We never sell your personal information. We share data only with:

• Anthropic (Claude API): CV text and pathway intake answers are sent to Claude for AI processing. Anthropic does not train on API data.
• Supabase: Database and authentication provider (Canada Central).
• Stripe: Payment processing only — we do not store your card details.
• RCIC consultants: Only if you click "Book consultation" — we share your name and email with the selected RCIC only.

5. Your Rights (PIPEDA)

You have the right to:

• Access your personal information (Settings → Export my data)
• Correct inaccurate information (Settings → Profile)
• Delete your account and all associated data (Settings → Delete account)
• Withdraw consent for optional data processing at any time

6. Data Retention

• Account data: Retained until you delete your account
• Interview transcripts: Retained for 12 months, then deleted
• CV enhancements: Retained for 12 months
• Usage logs: Retained for 24 months for billing purposes

7. Cookies

We use only essential cookies required for authentication (Supabase session cookie). We do not use advertising or tracking cookies. Analytics (PostHog) uses anonymized, privacy-preserving event tracking with no personal identifiers.

8. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to your data is protected by Row-Level Security policies — no Selectus employee can access your personal immigration data without your explicit consent.

9. Contact

Privacy questions or requests? Contact our Privacy Officer at privacy@selectus.io