Privacy Policy

1. Information we process

• Account information: your email address when you sign in by email, or your Telegram identifier and name when you sign in through Telegram.
• Application information you provide: your name, date of birth, citizenship, document numbers (including passport and identity document details), addresses, contact details, family, employment and travel history, and answers to health and security questions required by the IRCC form.
• Documents you upload: photos, scans and PDF files you select, together with their names, sizes, extracted information and files prepared for your application.
• Sign-in and registration information: Canada Visa Assistant session tokens, a temporary IRCC invitation code and an automatically generated password for the IRCC Portal account you choose to create when this is needed to complete registration.

2. How we use this information

We use this information only to save your application and documents in your account, extract information from files you choose, prepare files for the application, translate free-text answers into English when needed, and fill fields in the official IRCC Portal application. You submit the application yourself. We do not use your information for advertising, credit scoring or purposes unrelated to preparing your forms.

3. Where information is stored

• Your application and profile are stored in our Supabase database; the website is hosted on Vercel.
• Original uploads and prepared files are stored in private Vercel Blob storage. They can be accessed only through your account’s authenticated API.
• The browser extension stores a local copy of your profile and application in chrome.storage.local so it can fill portal forms.

4. How the browser extension handles data

• Sign-in and synchronization: when you sign in to the extension, it sends the credentials you enter to www.canadavisaassistant.com over an encrypted HTTPS connection. The returned session tokens, profile, application answers, completion percentage and document count are stored in chrome.storage.local on your device.
• Supported pages: the extension runs only on www.canadavisaassistant.com and the official IRCC domains listed in its permissions. On IRCC pages, it reads the current page address, field labels and field status locally so it can identify the current step, fill the form and avoid replacing an occupied document slot.
• Clipboard: clipboard access is used only after you select the registration autofill action and only as a fallback for obtaining an IRCC invitation code when the code cannot be detected on the page. Other clipboard contents are not stored or transmitted.
• Transfer to IRCC: after your command, the extension retrieves the latest saved answers and prepared documents from your account, places them in the application you opened in the IRCC Portal and assigns files to the document slots displayed by IRCC. The extension does not press the final Submit button or pay government fees.
• Browsing history: the extension does not collect browsing history, monitor pages outside the supported domains or transmit browsing information for advertising or profiling.

5. Sharing with third parties

We do not sell your information. We share information only with:

• IRCC: the extension enters information into the application that you review and submit yourself;
• AI providers: Anthropic receives free text, photos, scans and text documents that you choose for extraction, translation or rewriting; OpenAI receives audio that you choose to convert into text;
• Google Maps Platform: the address text you search for and details of the address you select, so the service can suggest and separate Canadian or U.S. address fields. By using address search, you also agree to the Google Maps Terms of Service and Google Privacy Policy;
• Google Ads: receives technical website visit information so we can measure advertising performance. Application answers, documents, names, email addresses and phone numbers are not sent to Google Ads;
• Yandex Metrica: receives technical information about visits, clicks, scrolling and interactions with website elements, including de-identified session replays, so we can identify interface problems. Application field contents are not recorded; selected answers, account information, file names and document information are hidden;
• Infrastructure providers: Supabase and Vercel, which host and operate the service;
• Telegram: when you sign in through Telegram or contact us for support or feedback.

6. Retention and deletion

Account and application information is retained while your account is needed, unless you clear it or request deletion. When you select a file for upload, you instruct the service to store and process it to prepare your application under this policy. We do not ask for a separate confirmation before every upload. You can delete an individual file, an entire document entry or all documents in the workspace; related prepared copies are deleted as well. You can clear the application with the “Clear application” action. Local extension data is removed when you sign out of the extension or uninstall it. To delete your account and remaining information, contact us through the Telegram bot.

7. Your control, security and limited use

You can review and edit your application, clear it or request deletion at any time. Access to your information is restricted to your account. A service password for the IRCC Portal is stored for autofill and is visible only to you. Data is transmitted only over HTTPS.

The extension’s use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Information is used and transferred only to provide the extension features you initiate. We do not sell it, use it for personalized or behavioural advertising, or allow humans to read it except when you explicitly request support involving specific data, when required for security, or when required by law.

8. Beta service

The service is in beta and may contain errors. Review all information yourself before you submit an application.

9. Contact

For questions or requests to delete information, contact us in Telegram.