Privacy Policy

Assessment inputs (non-identifying): age, education level, official-language test scores, years of work experience, marital status, occupation category (NOC/TEER), and similar eligibility factors. These are the minimum needed to compute a CRS score.

Optional intake answers (to recommend pathways beyond Express Entry): employment and work-permit status, ties to a province, family situation, study background, immigration priorities, and financial capacity. Financial and asset questions are collected as ranges only — we never ask for, or store, exact amounts.

Account data: your email address, used only to send a one-time sign-in link (magic link). We never store a password.

Technical data: a signed session cookie to keep you logged in. We do not use advertising or cross-site tracking cookies.

We do NOT collect passport numbers, SINs, dates of birth, exact financial figures, or any government identifiers.

To compute your eligibility and CRS score and show you the four-stage assessment.

To recommend and rank the immigration pathways (federal, French, provincial, business, and regional) that fit your profile.

To let you save a profile to your account and, if you choose, invite a spouse or partner to co-manage it.

To operate, secure, and improve the service.

By entering data and using the assessment you consent to the processing described here. You can withdraw consent at any time by deleting your profile or account (see “Your rights”).

Your data is stored in a PostgreSQL database hosted by Supabase in the Canada Central region (ca-central-1) — your information stays in Canada.

Data is encrypted in transit (TLS) and at rest. Sign-in uses one-time links, so there are no passwords to leak.

Application hosting and scheduled jobs run on Vercel. Public draw statistics are sourced from IRCC's open data.

We keep your saved profile only while your account is active. You can clear or overwrite your saved profile at any time from the account page.

You can delete your account and all associated data at any time from the account page ("Delete my account").

Shareable result links point to a stored copy of your (non-identifying) assessment, referenced by a short, random, unguessable code — the profile is no longer placed in the URL. Links created without an account are automatically deleted after 90 days; results saved to your account are kept until you delete them.

We do not sell your personal information. We do not share it for advertising.

We rely on service providers acting on our behalf as processors: Supabase (database, Canada), Vercel (hosting), and an email provider for sign-in links. They may process data only to provide their service.

Optional AI narration: if enabled, we send an AI provider only the already-computed, non-identifying ranking (pathway names and fit) so it can phrase a short summary — never your raw answers, and never for the AI provider to train on. When no AI provider is configured, this narration is generated locally and no data leaves our systems.

Provincial program data shown in the app is gathered by an automated job that reads public government websites; it processes no personal information.

Access: request a copy of the personal information we hold about you.

Correction: ask us to correct inaccurate information (or edit your profile directly).

Withdrawal: withdraw consent and have your data deleted.

Complaint: if you're unsatisfied, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Privacy questions or access/deletion requests: privacy@getnorthway.ca.

We may update this policy. Material changes will be reflected by the “Last updated” date at the top of this page.