What we collect
We collect your email address when you submit an application for review. We collect file metadata (names, sizes, types) and any notes you provide. We store AI-generated reports in your account. Payments are processed by Stripe we never store card details.
How we use your data
Your documents and notes are used solely to generate your readiness report. We do not sell your personal data. We do not share your documents with third parties except: (a) AI processing via Anthropic under strict data processing terms, and (b) licensed RCIC reviewers when you explicitly consent.
Passwordless authentication
We use email-based authentication magic links and one-time codes. No passwords are stored. Session tokens are stored as secure HttpOnly cookies. Report access links are signed JWTs and are revocable at any time.
Security
All data is encrypted in transit via TLS. Reports are only accessible to the authenticated account owner. Signed time-limited links are used for email access. All report accesses are logged for audit purposes.
Data retention and deletion
You can delete your uploaded files and generated reports at any time from your dashboard. Deletion is permanent and all secure links are immediately revoked.
Your rights
You have the right to access, correct, or delete your personal data. Email privacy@clearpath.ca for requests. Quebec residents have additional rights under Law 25.