Skip to content

This tool provides informational guidance only — not immigration advice. Always consult a licensed RCIC or immigration lawyer.

PRPath.ca

Privacy Policy

Last updated: May 7, 2026

PRPath.ca ("we", "us", "our") is committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). This policy explains what information we collect, how we use it, and your rights regarding your data.

Information We Collect

  • When you create an account: your name, email address, and a hashed password (or OAuth provider identifier if using Google sign-in).
  • When you use the assessment tools: age, nationality, language test scores, education credentials, work history, occupation codes, and admissibility information. For anonymous users this data stays in your browser only. For authenticated users who give explicit consent, it is encrypted and stored in the database.
  • Contact form: when you submit the contact form, we store your email address and message to respond to your inquiry.
  • When you post to the forum, submit a success story, or leave a review: the content you submit, your username, and the date of submission. If you edit a published post while your account is still building trust, your proposed edit is held for staff review before it replaces the published version, and it is deleted once reviewed or cancelled.
  • When you use the CV Generator: employment history, skills, and contact information you provide. This data is processed to generate your document and is not retained on our servers.
  • Technical data collected automatically via Cloudflare: IP address, browser type, device type, and pages visited. This data is used for security, performance, and abuse prevention.

How We Use Your Information

We use your personal information to: generate your immigration pathway assessment; manage your account and authenticate your sessions; improve the accuracy and relevance of the platform; respond to your inquiries; and comply with legal obligations. We do not sell your personal information to third parties.

How We Store Your Information

  • Anonymous users: assessment data is stored only in your browser's sessionStorage and is never transmitted to our servers.
  • Authenticated users who provide explicit consent: assessment data is encrypted and stored in the Neon database hosted in a Canadian region.

Third-Party Processors

We share your information only with the service providers necessary to operate the platform:

  • Cloudflare — CDN and serverless compute. Processes requests globally. Privacy policy: cloudflare.com/privacypolicy.
  • Neon — managed PostgreSQL database. Hosted in a Canadian region. Privacy policy: neon.tech/privacy.
  • IndexNow (Microsoft Bing, Yandex, Naver, Seznam) — when public pages such as approved community posts, consultant profiles, or news articles are published, updated, or removed, we send their page address (URL only — no personal data) to these search engines so their results stay current. These services are located outside Canada.
  • NextAuth.js — open-source authentication library running on our servers. No data is sent to a third party.
  • Google OAuth — optional sign-in provider. If you choose to sign in with Google, Google receives a sign-in request. Privacy policy: policies.google.com/privacy.

Cross-Border Transfer of Information

PRPath.ca runs on Cloudflare Workers, a global network of servers that handles your request from the location closest to you. This means that when you use PRPath.ca, your request may be received and processed by a Cloudflare server located outside of Canada — for example in the United States, the United Kingdom, or another country. The assessment logic and any form data you submit are processed on that server before a response is returned to your browser.

The database we use to store accounts and community content (Neon) is hosted in a Canadian region. Draft assessment data is kept in your browser by default and is not sent to the database unless you choose to save it to an account.

While your information is outside Canada, it may be subject to the laws of the country where it is being processed, including laws that permit access by courts, law enforcement, or national security authorities in that country. PRPath.ca remains accountable for your information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and we require our service providers to protect it to a standard comparable to what Canadian law requires.

If you have questions about how your information is handled, or if you would prefer not to use the service because of cross-border processing, please contact our Privacy Officer at the address listed at the bottom of this page.

Cookies

PRPath.ca uses a session cookie set by NextAuth.js to maintain your login state. This cookie is strictly necessary for authentication and expires when you close your browser or sign out. We do not use analytics cookies, advertising cookies, or third-party tracking cookies.

Your Rights Under PIPEDA

Under PIPEDA you have the right to: access the personal information we hold about you; request corrections to inaccurate information; withdraw consent to collection or use (subject to legal or contractual restrictions); request deletion of your personal information; and file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

Data Retention

Assessment data is retained until you delete it or close your account. Account data (name, email) is retained until you delete your account. Forum posts and success stories are retained until you remove them. Server-side logs are retained for up to 30 days for security purposes.

Data Security

All data is transmitted over HTTPS (TLS 1.2 or higher). Assessment data stored in the database is encrypted at rest. Access to the database is restricted to authenticated application services. We conduct periodic security reviews. In the event of a privacy breach that poses a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

Children

PRPath.ca is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We will notify users of material changes to this policy by posting a notice on the website and, where appropriate, by email. Continued use of the platform after the effective date of a revised policy constitutes acceptance of the changes.

Contact Our Privacy Officer

For privacy inquiries, requests to access or correct your information, or requests to withdraw consent, contact our Privacy Officer at: privacy@prpath.ca. We will respond within 30 days. privacy@prpath.ca