Skip to content

Privacy notice

Last updated 19 Aug 2026.

Who we are

Immigration Suite is a Canadian-hosted case-management platform used by immigration law firms to handle client matters. The firm you contacted is the controller of your personal information; we host and process it on their behalf.

Information we collect

  • Contact details you provide: name, email, phone.
  • Answers you give in the public intake form or the structured intake wizard.
  • Documents you upload for evidence.
  • Server-side operational data: timestamps of actions, tenant scoping, audit events.
  • Session cookies to keep you signed in when you use the firm-facing app.

We do not collect analytics or advertising identifiers. No third-party trackers run on this platform.

Why we collect it

  • To let a firm assess your matter and give you plain-language findings.
  • To record who acted on what, when. This is required by law-society rules and by PLAN.md §11 (immutable audit trail).
  • To prevent duplicate submissions from the same public form.

Where it lives

Data lives in Supabase (Postgres) in the ca-central-1 region. Files live in Supabase Storage buckets scoped to the tenant that owns them. Row-Level Security enforces tenant isolation on every table.

Who can see it

  • Members of the firm you contacted, subject to their role.
  • Platform administrators, only for support and only when they act via the audit-logged admin panel.
  • Subprocessors: Supabase (hosting) and Vercel (edge delivery). Both are contractually bound to confidentiality and the same regional residency where applicable.

We do not sell your data. We do not use your data to train AI models.

How long we keep it

The firm you contacted decides retention. If you were not retained, they may keep your intake submission for the period required by their law society. If you were retained, they must keep the matter file for the retention period their jurisdiction requires (in Canada, typically 6 to 10 years).

Your rights

Under PIPEDA and provincial equivalents you can request access to, correction of, or deletion of your personal information. Because the firm is the controller, direct these requests to them. If the firm cannot answer, we support them in fulfilling the request.

Contact

For platform-level questions, contact privacy@immigrationsuite.example. For your file, contact the firm handling your matter.