Legal

Privacy Policy

Last updated: May 12, 2026

Portiqis (“we”, “us”) respects your privacy. This Privacy Policy explains what personal information we collect when you use the Portiqis website and services (the “Service”), why we collect it, who we share it with, how long we keep it, and the choices you have. It is written to satisfy our obligations under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws. Additional information for users in the EU/UK appears at the end.

1. Information we collect

• Account data: name, email address, password hash, and authentication identifiers (for example, Google OAuth ID if you sign in with Google).
• Assessment answers: the responses you provide to our pre-check and onboarding questionnaires, including information about age, citizenship, education, language ability, work experience, and immigration intent.
• Profile data: contact details, address history, family information, and any other facts you enter to populate forms.
• Supporting documents: files you upload, such as passports, transcripts, language-test results, employer letters, and similar.
• Payment information: billing details and transaction history. Full payment-card numbers are processed by our payment processor and are not stored on our servers.
• Usage and device data: log data, IP address, browser type, device identifiers, pages viewed, and cookies for session management and analytics.

2. Why we collect it

• To create and operate your account.
• To help you organize information and fill out Canadian immigration forms.
• To generate reports, checklists, and PDFs you request through the Service.
• To process payments and issue refunds.
• To provide customer support and respond to your inquiries.
• To secure the Service, detect fraud, and comply with legal obligations.
• With your consent, to send you product updates and educational content (you can unsubscribe at any time).

3. Who has access

We share personal information only as described below. We do not sell your personal information.

• Portiqis personnel: a limited number of trained staff and contractors with a need to know, for purposes such as customer support, troubleshooting, and account recovery.
• Payment processor: our third-party payment processor handles card data under its own PCI-compliant infrastructure and privacy policy.
• AI service providers: when you generate a report, summary, or form draft, we send the necessary assessment-answer fields to an AI provider acting as our service provider. We instruct the provider not to train its models on your data.
• Hosting and infrastructure: cloud hosting, database, file storage, email-delivery, and error-tracking providers acting under contractual confidentiality obligations.
• Legal disclosures: where required by law, court order, or to protect rights, safety, or property.
• Business transfers: in the event of a merger, acquisition, or asset sale, subject to equivalent privacy protections.

4. Where information is stored

Information may be stored on or processed by servers located in Canada, the United States, or other jurisdictions where our providers operate. When information is processed outside Canada it may be accessible to foreign authorities under local law. We rely on contractual safeguards (including standard contractual clauses where applicable) to protect your information during international transfers.

5. How long we keep it

We retain your account and form-fill data for as long as your account is active and for up to 3 years after your last activity, after which we delete or de-identify it, unless a longer period is required by law (for example, financial records). You can request earlier deletion (see your rights below). Backups are overwritten on a regular cycle.

6. Your rights under PIPEDA

If you are in Canada, you have the right to:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct inaccurate or incomplete information.
• Deletion: ask us to delete information we no longer need to provide the Service or that we are not required to retain by law.
• Withdraw consent: withdraw your consent to optional uses (for example, marketing emails) at any time.
• Complain: contact the Office of the Privacy Commissioner of Canada if you are not satisfied with our response.

To exercise these rights, email privacy@portiqis.com. We will respond within 30 days. We may need to verify your identity before acting on a request.

7. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, encryption of sensitive fields at rest, access controls, and logging. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Cookies

We use a small number of strictly-necessary cookies for authentication and session management, and optional cookies for analytics and product improvement. You can manage cookies through your browser; disabling strictly-necessary cookies may break parts of the Service.

9. Children

The Service is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Notice for users in the EU and UK

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or UK GDPR applies to our processing of your personal information.

• Lawful basis: we process your information on the basis of (a) your consent (for optional features, marketing, and document uploads), and (b) the performance of the contract between you and Portiqis (operating your account and delivering the Service). Some limited processing is based on our legitimate interests in securing the Service and complying with legal obligations.
• Your rights: in addition to access, correction, and deletion, you have rights of restriction, objection, and data portability. You may also lodge a complaint with your local supervisory authority.
• Data export: you can request a machine-readable export of the personal information you have provided to us by emailing privacy@portiqis.com.
• International transfers: where personal information leaves the EEA/UK we rely on standard contractual clauses or other valid transfer mechanisms.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated policy with a new “Last updated” date and, where the change is material, notify you through the Service or by email.

12. Contact

For any privacy question, contact our privacy team at privacy@portiqis.com. See also our Terms of Service.