Privacy Policy

• Effective date: September 15, 2025
• Data controller: PR Planner
• Contact: privacy@prplanner.ca
• Intended users: Adults interested in immigration planning and CRS scoring.

We collect the following categories of personal information for the purposes described in this Policy and retain them as outlined in Retention: identifiers (name, email, account identifiers), internet or network activity (usage, device, IP, pages viewed), approximate geolocation (derived from IP), and inferences (interest segments for advertising where permitted). We do not knowingly collect sensitive personal information.

We sell or share personal information for cross-context behavioral advertising as defined under California law (see Sale and Sharing section). You can opt out at any time via the controls below.

We collect information to operate the Service, provide features, improve performance, and for security and compliance.

• Account and Authentication Data: If you sign in, we collect identifiers from your auth provider (e.g., Google, Facebook), such as UID, display name, email, and photo (if available). Currently implemented providers include Google and Facebook. Additional providers (e.g., GitHub, LinkedIn, Instagram, TikTok) may be offered in the future; when enabled, we will only access data that you authorize through that provider.
• CRS Calculator Inputs: Information you enter into the calculator (e.g., age, education, language levels, work history) to compute your score. If you are signed in and choose to save, these inputs and the computed score may be stored with your account.
• Contact and Lead Data: If you submit forms (e.g., for updates or offers), we collect your name, email, mailing address, and any content you provide.
• Usage and Device Data: Log data such as IP address, device and browser information, pages viewed, referring URLs, and timestamps. We use first-party analytics (Vercel Analytics, Speed Insights) and may use Google Analytics.
• Cookies and Similar Technologies: We and our partners use cookies and similar tech for essential functionality, analytics, and advertising (including personalized ads when applicable). You can manage cookies via your browser settings and ad preferences (see Opt-Out and Controls below).
• Notifications: If you opt in to browser push notifications, we may collect a device/browser token to deliver messages. You can change permission in your browser settings at any time.

• Directly from you (form inputs, account actions, communications).
• Automatically from your device and browser (cookies, logs, analytics).
• From authentication providers when you authorize sign-in (e.g., Google, Facebook).
• From service providers that support our operations (e.g., hosting, analytics).
• Publicly available sources as permitted by law.

• Provide, maintain, and improve the Service and features.
• Personalize content (e.g., showing your CRS score and saved scenarios).
• Communicate with you (service messages, marketing with consent where required) and respond to inquiries.
• Measure performance and analyze usage to improve usability and reliability.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations and enforce our terms.
• Advertising and remarketing (including personalized ads where permitted and with appropriate consent in applicable regions).

We may use Google Ads/AdSense and Google Analytics, alongside Vercel Analytics and Speed Insights. These providers use cookies and similar technologies to measure engagement and, where applicable, to deliver ads based on your interests. Learn more about how Google uses data from partners at policies.google.com/technologies/partner-sites. You can manage Google ad settings at adssettings.google.com. Industry opt-outs are also available at the Network Advertising Initiative (optout.networkadvertising.org) and the Digital Advertising Alliance (optout.aboutads.info), and for the EU at the EDAA (youronlinechoices.eu).

• Vercel Analytics: Privacy-focused analytics used to understand usage without tracking individuals across sites.
• Google Analytics: If enabled, uses cookies to collect usage data; you can opt out with the Google Analytics Opt-out Browser Add-on.
• Google Ads/AdSense: If enabled, cookies may be used to serve personalized ads. Where required, we seek consent before using personalized ads in the EEA/UK.

We may sell or share personal information (as those terms are defined by applicable U.S. state laws) to support advertising, lead generation, and business development. Categories involved may include identifiers (e.g., email in a hashed format), internet or network activity, and inferences. We do not knowingly sell or share the personal information of children under 16.

You can opt out of sale and sharing by contacting privacy@prplanner.ca. Where legally required, we also honor opt-out preference signals such as Global Privacy Control.

If you choose social sign-in, the provider authenticates you and may share basic profile details (e.g., name, email, photo) with us per your authorization. We do not receive your passwords. Please review the provider’s privacy policy for details on their processing.

• Google: policies.google.com/privacy
• Facebook: facebook.com/privacy/policy

• Service Providers: We use processors for hosting, analytics, customer communications, and authentication. Examples include Vercel (hosting and analytics). We require them to process data under appropriate safeguards and contracts.
• Legal and Safety: We may disclose information to comply with law, respond to lawful requests, or protect rights and safety.
• Business Transfers: In a merger, acquisition, or sale of assets, data may be transferred to the new owner under this Policy.

We may process data in countries other than your own (e.g., data may be stored or accessed in the United States, Canada, or the EU). Where required, we rely on appropriate safeguards for international transfers.

We retain personal data only as long as necessary for the purposes described above, including to comply with legal obligations, resolve disputes, and enforce agreements. We will delete or de-identify data when it is no longer needed.

• Access, Correction, Deletion: You may request a copy of your data, correct inaccurate data, or ask us to delete it (subject to legal allowances).
• Objection and Restriction: You may object to or request restriction of certain processing.
• Consent Withdrawal: Where processing is based on consent (e.g., marketing, personalized ads, notifications), you may withdraw at any time.
• Do Not Track: We do not respond to DNT signals. You can use browser controls and ad preferences described above.

EU/UK (GDPR) – Legal Bases and Rights

• Legal bases: performance of a contract (to provide the Service), legitimate interests (to improve and secure the Service, prevent fraud, and promote our offerings), consent (marketing, cookies, personalized ads where required), and legal obligations.
• Rights: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time without affecting prior processing.

U.S. State Privacy Rights (e.g., CA/VA/CO/CT/UT)

• Right to know/access, delete, and correct.
• Right to opt out of sale, sharing, and targeted advertising.
• Right to appeal certain denials (where applicable).
• Limit use/disclosure of sensitive personal information (if collected).

To exercise rights or submit an appeal, contact privacy@prplanner.ca. If you are in the EEA/UK, you may also have the right to lodge a complaint with your supervisory authority.

Where required by law, we honor browser-based opt-out preference signals (such as Global Privacy Control) that indicate your choice to opt out of sale/sharing and targeted advertising. If we detect a valid signal, we will apply it to your browser session; you can also email us to persist your choice across sessions and devices.

Our calculator computes scores based on inputs you provide. We do not engage in solely automated decision-making that produces legal or similarly significant effects about you.

The Service is not intended for children under 13 (or the age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal data, please contact us so we can take appropriate action.

We implement administrative, technical, and physical safeguards appropriate to the risk. However, no method of transmission or storage is 100% secure.

We may update this Policy from time to time. We will post any changes on this page and update the effective date. Your continued use of the Service after changes become effective signifies your acceptance of the updated Policy.

Questions or requests regarding this Policy can be sent to privacy@prplanner.ca