Privacy Policy
Last updated: April 2025
1. Information We Collect
When you use PRAVÉ, we collect information you provide directly — such as your email address when you sign up or submit a lead form — and information generated by your use of the simulator, including CRS profile inputs and saved roadmap data.
We also collect standard usage data (pages visited, session duration, browser type) via analytics tooling to understand how the product is used.
2. How We Use Your Information
- To provide, maintain, and improve the CRS simulator and roadmap service.
- To authenticate your account and associate saved roadmaps with your profile.
- To process payments securely via Stripe.
- To send transactional emails (account confirmation, receipts) via Resend.
- To analyze aggregate usage patterns and improve the product experience.
3. Data Storage and Security
Your data is stored in Supabase (PostgreSQL), hosted in secure cloud infrastructure. Passwords are never stored — authentication is handled via magic links or OAuth. Payment information is processed entirely by Stripe and never stored on our servers.
4. Third-Party Services
We use the following third-party services, each governed by their own privacy policies:
- Supabase — database and authentication
- Stripe — payment processing
- OpenAI — AI strategy generation
- Resend — transactional email
5. Data Retention and Deletion
You may request deletion of your account and associated data at any time by contacting us. We will remove your personal data within 30 days of a confirmed deletion request, except where retention is required by law.
6. Your Rights (PIPEDA / CASL)
As a Canadian-based service, we comply with PIPEDA. You have the right to access, correct, or request deletion of your personal information. You may also withdraw consent to marketing communications at any time by contacting us.
7. Contact
For privacy-related questions or requests, contact us at privacy@prave.ca.