PR Roadmap · Legal
Privacy Policy
What we collect, why we need it, and the choices you have when using PR Roadmap.
Last updated:
Your profile and research stay in your account. Live AI involves sharing relevant information with the provider you approve. Payments use Stripe. Optional cookies and AI sharing are separate from accepting the Terms of Service.
1. Who we are and what this covers
This policy describes how PR Roadmap handles personal information when you visit the website, create an account, organize your own immigration research or use paid features. It applies to our service, not to government websites or other external services you visit.
PR Roadmap is an independently operated information and organization service.
For privacy requests, questions about these terms, billing issues or complaints, contact support@canadaprroadmap.com or use our contact page. Include your account email and the nature of your request; do not send identity documents or payment card details.
2. Information we collect
- Account and sign-in: your name, email, verification status and sign-in records. If you use Google, we receive account identifiers and basic profile information, which may include a profile image. Authentication records can include IP addresses, browser information and session expiry. Passwords, if used, are stored as hashes.
- Information you enter: profile facts such as age, citizenship, family details, education, employment, language results and funds; program folders, notes, user-reported milestones and dates; questions, conversations and assistant action confirmations.
- Preferences and agreements: cookie preferences, AI provider sharing choices, and the date and document versions of your acceptance of the terms and acknowledgement of this policy.
- Billing and operations: Stripe customer, checkout and subscription identifiers, plan, payment status and billing-period metadata; account access status and administrative audit records. Infrastructure providers may process request and security logs.
Provide only information needed for the feature you use. Do not enter passport numbers, government account credentials, social insurance numbers, payment card details, medical records or copies of identity documents in profiles or chat. Share another person’s information only if you have authority to do so.
3. How we use information
We use information to authenticate you, save and display your records, compare recorded facts with implemented portions of published criteria, answer source-based information questions, process subscriptions, prevent misuse, investigate technical problems and meet legal obligations.
Personalized displays and automated comparisons are information tools. We do not submit applications, make immigration decisions or determine legal eligibility. See the service limits in our Terms.
We do not sell your personal information or use your profile and conversations for advertising. Optional analytics and marketing trackers are not currently connected.
4. AI processing and your choice
Live AI responses are optional. Before sending content to an AI provider, the assistant asks you to allow that provider to process relevant profile facts and conversation context. The configured provider is shown in the assistant and may be OpenAI or Google Gemini. A change to a provider you have not approved requires a separate sharing choice.
Requests can include your question, relevant structured profile facts, recent messages, a summary of older conversation, relevant saved workspace or tracking context, and published source material. Responses and summaries can be saved in your account. Locally recognized tracking notes do not require an AI request.
Provider retention, human review and model-improvement practices depend on the provider, service tier and applicable contract. We do not promise zero retention or that every provider excludes training. In particular, Google’s unpaid Gemini services may use submitted content to improve products and may involve human review. Do not send personal or confidential information through an unpaid Gemini configuration.
See Gemini API terms and OpenAI’s privacy information. You can stop future AI processing by not sending further AI questions. Contact us to request withdrawal of a saved sharing choice or deletion of stored conversations; withdrawal does not undo processing already performed.
5. Payments and other service providers
When payments are enabled, Stripe hosts checkout and billing management and processes payment details. We store billing metadata, not full card numbers or card security codes. Stripe may handle information for its own fraud-prevention and legal purposes under its Privacy Policy. Test environments use sandbox payments.
Hosting, database, authentication, payment and AI providers process information as needed to deliver their parts of the service. Google sign-in is optional. Authorized personnel may access information where necessary for support, security, maintenance or legal obligations; server encryption does not make your records inaccessible to the operator.
We may disclose information when required by law, to respond to lawful requests, protect people and the service, or handle a business transfer with appropriate privacy safeguards. We do not give government immigration authorities access to your account as part of using the service.
6. Processing outside your country
Our infrastructure and external providers may process or store information outside your province or country, including outside Canada. Information may be subject to the laws and lawful access powers of those jurisdictions. We do not promise Canadian-only data residency. Contact us for information about the providers and locations used for your account.
8. Security
Saved profiles, conversations and program folders use server-side encryption at rest and account-based access controls. This is not end-to-end encryption: the server must process content to provide the service. Account and billing metadata are stored separately from encrypted personal records. No storage or transmission method can guarantee absolute security.
Keep your email and Google accounts secure, sign out on shared devices and report suspected unauthorized access. We will handle security incidents and provide notices where applicable law requires them.
9. Retention and deletion
Account and workspace records currently have no automatic expiry while the account remains open. We retain them to provide the service, unless you delete supported items or request deletion. Conversations and their messages can be deleted in the workspace; account deletion and broader data requests currently require contacting the operator.
After a verified request, we delete or de-identify information that is no longer required. Some billing, agreement, fraud-prevention or legal records may need to be retained for applicable obligations or disputes. We will explain any applicable exception. Copies in backups or provider systems may remain until their retention cycles expire; deletion is not necessarily immediate everywhere.
Canceling a subscription does not delete your account. Deleting a conversation does not cancel billing or erase a request already processed by an external provider.
10. Access, correction and complaints
You can review and edit supported profile fields in your account. You may also contact us to request access, a copy, correction or deletion of your personal information, withdraw consent where applicable, or raise a privacy complaint. We may need proportionate identity verification and will respond within the time required by applicable law.
Withdrawing information needed for authentication or another requested feature may prevent us from providing that feature. Optional cookies and AI processing are separate choices. You may contact the Office of the Privacy Commissioner of Canada or the privacy regulator responsible for your jurisdiction.
11. Age and policy changes
The service is intended for people aged 18 or older. Do not create an account if you are under 18. If you believe a child has provided information, contact us.
We update this policy when practices change and show the revised date here. Material changes will be brought to your attention, and we will request consent when required for a new use of information. Acknowledging this policy does not waive your privacy rights.