Privacy Policy

We collect the following categories of personal information:

• Identity information: full name, date of birth, nationality, passport number
• Contact information: email address, phone number, mailing address
• Immigration documents: travel history, visa status, work or study permits, prior immigration declarations
• Background information: criminal records (where required by application), medical history (only where the application requires it)
• Financial information: billing-related details — we do not store credit card numbers
• Website usage data: IP address, browser type, pages visited (via analytics cookies)

• Delivering immigration consulting services and preparing applications
• Verifying identity and conducting legally required due diligence
• Communicating with you about your case, appointments and updates
• Invoicing and payment processing
• Complying with Canadian law, including CICC regulatory requirements
• Improving our website and services (aggregated data only)
• Sending immigration-related information — you may unsubscribe at any time

We do not sell your personal information. Your information may be shared with:

• Government authorities: IRCC, CBSA, embassies and other immigration authorities — only as required for your application
• Professional advisors: immigration lawyers, certified translators or medical professionals where your case requires it
• Case management & hosting: your case files and application data are hosted on Supabase, an access-controlled cloud database — no public read access
• Payment processing: Stripe processes payments on our behalf; we never see or store your full card number
• Client relationship & email: Zoho CRM and Zoho Campaigns hold your contact details and case status so we can manage your file and send service-related or opted-in marketing email; ZeptoMail delivers transactional emails (reports, confirmations, review links) on our behalf
• Scheduling: if you book a consultation, Calendly processes your name, email and chosen time slot
• Social messaging: if you message us on Instagram or Facebook Messenger, or subscribe to our Telegram draw-alerts bot, ManyChat or Telegram process that conversation so we can respond
• AI processing partner (Anthropic): certain functions require limited information to be sent securely to Anthropic, which powers AI-assisted document identification and scan-straightening in our tools — only the portion required for that specific function (an excerpt of text or a single page image), never the complete application or file. This information is used solely to provide the requested functionality.
• Analytics & advertising: Google Analytics and the Meta (Facebook/Instagram) Pixel collect anonymised browsing behaviour to measure site usage and ad performance — see our Cookie Policy for details
• Authorised representatives: persons holding a valid written authorisation from you

Your immigration file shouldn't travel unless it needs to. The IRCC Document Packager and the Application Review Report generator are built on a local-first approach: application content is processed in your browser by default, and is transmitted only when a specific feature requires an outside service — and only the minimum needed for that function. This reflects an independent professional duty CICC-regulated consultants have to protect client confidentiality, in addition to our obligations under applicable privacy laws.

• Local processing — application content is processed on your device and never transmitted. Examples: PDF merging and compression in the Packager; the entire TR Application Report.
• Limited external processing — only the minimum content a specific feature needs is transmitted, and it is not kept as a separate application record. Example: AI-assisted document titling and scan-straightening in the Packager.
• Intentional transmission or storage — data is sent, and in some cases retained, because the requested feature cannot work otherwise. Examples: emailing a report, requesting a consultant's review, or a client review link.

Packager: the core packaging process is local — merging, compression, and file generation all happen in the browser. Two limited functions send only the minimum content needed to our AI processing partner: enough of the extracted text and a page image to auto-title a tab or auto-straighten a crooked scan — never the complete document.

Submission letter drafting (staff-assisted): when preparing a client's file, our RCICs and staff can use an internal tool to generate a draft cover letter to IRCC. Unlike the functions above, this sends the complete case file to our AI processing partner — the applicant's name, date of birth, UCI, and every field from the official IRCC forms on file — because an accurate, IRCC-ready letter has to cite the real facts of the case. A human RCIC always reviews, verifies, and approves every draft before it is used; nothing is sent to IRCC unreviewed. Once approved, the finished letter may be pulled into the Packager as one of the documents in the client's package.

TR Application Report: the client's application content is processed locally and is not transmitted to ITC or an AI provider.

EE/PR Application Report: generated locally by default, from data our Chrome extension reads out of your own logged-in IRCC session. If you email yourself a copy or request a consultant's review, that content is transmitted through our systems solely to perform the requested email function — we do not create a separate, persistent application record from that transmission. If you send a report to a client for confirmation, that data is stored on our server, because the review workflow requires a link the client can open and respond to later; that record is retained consistent with the retention practices described above.

Full detail on the Chrome extension these tools use is in our Chrome Extension Privacy Notice.

We retain personal information for as long as necessary for the stated purposes or as required by law. Immigration files are typically retained for 7 years after a file is closed, in accordance with CICC requirements. After that, data is securely deleted or anonymised.

Under PIPEDA and applicable Canadian provincial privacy laws, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Delete your website account and the personal information attached to it
• Withdraw consent for non-essential purposes (such as marketing)
• Ask questions about how your information is used
• Lodge a complaint with the Office of the Privacy Commissioner of Canada

Deleting your account: if you hold a website account, you can delete it yourself at any time from your profile page. Deletion is immediate and permanent: it removes your sign-in, profile, firm branding, saved templates, saved plan, activity history and any saved consultation conversations. If you have a paid membership, it is cancelled at the same time; the remainder of the current billing period is not refunded, and any unspent credits are lost. We keep a minimal record that the deletion happened — the date, and a one-way cryptographic fingerprint of the email address rather than the address itself — so that we can confirm to you later that it was carried out.

What deletion does not remove: some records exist to meet a legal or professional obligation that is independent of your account, and those are retained even after you delete it. In particular, a consultation agreement you signed with one of our licensed consultants is a professional record we are required to keep under the College of Immigration and Citizenship Consultants' rules, together with the file records described under “How Long We Keep Your Information” above. Retained records are kept only for that purpose and are not used to contact you.

To exercise any of these rights, contact us at info@itciland.com.

We apply appropriate technical and organisational measures — including encryption, access controls and secure storage — to protect your personal information against unauthorised access, disclosure or loss.

Our website uses cookies for analytics and to improve your experience. For full details, please read our Cookie Policy.

We may update this policy from time to time. The revised version will be posted on this page with an updated “Last updated” date. Continued use of our services after changes constitutes acceptance of the revised policy.