Privacy Policy

We collect information you provide directly when using our service, including your name, date of birth, email address, mailing address, phone number, employment information, and address history. If you use our AI Scanner, we process the content of your uploaded RCMP criminal record to extract conviction data, court locations, and eligibility analysis. If you use our Statement Builder, we store the answers you provide to guided questions and the AI-generated draft.

We also collect standard technical information such as browser type, IP address, and pages visited to improve our service. We use cookies for authentication and session management through Supabase.

Payment information (credit card numbers, billing details) is collected and processed directly by Stripe. We never see or store your full card number.

We use your personal information to provide the My Pardon service: generating your personalized task list, pre-filling PBC application forms, building your Measurable Benefit statement, and tracking your application progress. Your criminal record data is processed by AI (Anthropic's Claude API) solely to extract structured data for your application — it is sent over encrypted connections and is not stored by the AI provider.

We may use your email to send transactional messages about your application status. We will never sell your information or use it for advertising.

Your data is stored in Supabase (hosted on AWS in Canada/US regions) with row-level security policies ensuring you can only access your own data. Uploaded documents are stored in Supabase Storage with private access controls. All data is encrypted in transit (TLS) and at rest (AES-256).

We implement industry-standard security measures including server-side authentication, HTTPS everywhere, and secure API key management. However, no system is 100% secure, and we cannot guarantee absolute security.

We understand the extreme sensitivity of criminal record information. Your uploaded RCMP records and extracted conviction data are classified as "Protected B" under Canadian government standards. We handle this data with the highest level of care.

When you upload a criminal record, it is sent to Anthropic's Claude API for processing. Anthropic does not train on API data and does not retain it beyond the request lifecycle. The extracted structured data is stored in your Supabase profile and is only accessible to you.

You may delete your criminal record data at any time by contacting us at hello@mypardon.ca. Upon account deletion, all associated data including uploaded documents and extracted records will be permanently removed.

We use the following third-party services to operate My Pardon:

Supabase — database, authentication, and file storage

Stripe — payment processing (PCI DSS compliant)

Anthropic (Claude API) — AI processing for record scanning, statement generation, and chat assistance

Vercel — website hosting and deployment

Each provider has their own privacy policy. We only share the minimum data necessary for each service to function.

We do not sell, rent, or share your personal information with third parties for marketing purposes. We only share data with our infrastructure providers as described above, and we may disclose information if required by Canadian law, court order, or legal process.

Under Canadian privacy law (PIPEDA), you have the right to access your personal information, request corrections to inaccurate data, withdraw consent for data processing, and request deletion of your data. To exercise any of these rights, email us at hello@mypardon.ca. We will respond within 30 days.

If you are located in Ontario, you may also file a complaint with the Information and Privacy Commissioner of Ontario.

We retain your data for as long as your account is active or as needed to provide our service. If you cancel your account, we will delete your data within 30 days, except where we are required by law to retain certain records. Uploaded criminal record documents will be deleted immediately upon request or account cancellation.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of My Pardon after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at hello@mypardon.ca.