Privacy Policy

1. Information We Collect

When you use PRAVÉ, we collect information you provide directly — such as your email address when you sign up or submit a lead form — and information generated by your use of the simulator, including CRS profile inputs and saved simulation data.

We also collect standard usage data (pages visited, session duration, browser type) via analytics tooling to understand how the product is used.

2. How We Use Your Information

• To provide, maintain, and improve the CRS simulator and simulation service.
• To authenticate your account and associate saved simulations with your profile.
• To process payments securely via Stripe.
• To send transactional emails (account confirmation, receipts) via Resend.
• To analyze aggregate usage patterns and improve the product experience.

3. Data Storage and Security

Your data is stored on servers located in the United States, operated by Supabase (database, hosted on AWS US-East) and OpenAI (AI scenario analysis). Passwords are never stored — authentication is handled via magic links or OAuth. Payment information is processed entirely by Stripe and never stored on our servers. By using PRAVÉ, you consent to this cross-border transfer of data as permitted under PIPEDA.

4. Third-Party Services

We use the following third-party services, each governed by their own privacy policies:

• Supabase — database and authentication
• Stripe — payment processing
• OpenAI — AI scenario analysis. When you generate an AI analysis, your CRS profile data (age, education, work experience, language scores) is sent to OpenAI's servers in the United States to generate your personalized simulation. No personally identifiable information such as your name or email is included in this request.
• Resend — transactional email

5. Data Retention and Deletion

You may request deletion of your account and associated data at any time by contacting us. We will remove your personal data within 30 days of a confirmed deletion request, except where retention is required by law.

6. Your Rights (PIPEDA / CASL)

As a Canadian-based service, we comply with PIPEDA. You have the right to access, correct, or request deletion of your personal information. You may also withdraw consent to marketing communications at any time by contacting us.

7. Contact

For privacy-related questions or requests, contact us at privacy@pravepath.ca.