Privacy Policy — i2Canada app

i2Canada Immigration Services Inc., Canada

Effective 10 September 2026 · نسخه‌ی فارسی ↓

This policy explains what the i2Canada mobile app and client portal (portal.i2canada.com) collect, why, who sees it, how long it is kept, and how you delete it. It is written to be read, not skimmed. If anything here is unclear, write to ceo@i2canada.com.

1. What the app does

The app has two sides. Public users create an account to read immigration news, use calculators and tools, and ask for an assessment. Clients of i2Canada sign in with the account the office gave them to fill their intake form, upload documents for their immigration application, and follow their case.

2. What we collect

• Account details: name, e-mail address, password (stored only as a one-way hash), preferred language, the programmes and provinces you say you are interested in.
• Assessment answers you choose to submit (age, education, language results, work history, family, funds) so an officer can assess your options. If you ask to be contacted, this and your contact details are recorded in our customer system (Zoho CRM).
• For clients: your intake form answers, the documents you upload (passports, certificates, letters and the like), the checklist of your case, messages and updates from your officer, and the Word/PDF documents the portal produces from your form.
• Job letters you submit to the NOC tool, which are read by an AI model (Google Gemini) to suggest an occupation code. The letter is processed for that purpose only.
• Security records: the date, time, IP address and device type of sign-ins, and (for clients) a list of the devices signed in, so you can see them and so we can detect misuse.
• A push-notification token for your phone (Firebase Cloud Messaging), so we can tell you when your officer replies or a document is reviewed. The token identifies the phone, not you.
• Support messages you send from the app's "report a problem" screen, and the replies.
• Referral code and points, if you take part in the referral programme.

We do not collect your location, your contacts, advertising identifiers, or analytics about how you use the app. There are no ads and no third-party trackers.

3. Why we use it

To provide the service you asked for: showing you your case, reviewing and filing your documents, preparing your immigration forms, answering your questions, and keeping your account safe. Nothing is sold or used for advertising.

4. Who processes it on our behalf

• Hetzner (Germany / United States) hosts the portal and its database.
• Google: Google Drive holds client documents in the firm's own drive; Firebase delivers push notifications; the Gemini AI model reads job letters for the NOC tool and helps inspect uploaded documents for quality.
• Amazon Web Services (SES) sends verification and password e-mails.
• Zoho CRM holds contact requests and assessment leads.
• Telegram: clients who have a case group with the office receive some notifications there as well.
• News images are loaded from the websites that published the news (i2canada.com and the government sites); those servers see your device's IP address when an image loads.

Each of them acts only on our instructions. Some of them are outside Canada; your data may therefore be stored or processed outside Canada, where the laws differ.

5. Who at i2Canada sees it

Only the staff working on your case, under role-based access: your case officer and assistant see your file; other staff do not. Every access to a document is logged.

6. How long we keep it

• Public account: until you delete it (below). Assessment leads in the CRM are kept while we may be of service and deleted on request.
• Client file: a licensed consultant must keep a client file for at least six years after the file is closed (College of Immigration and Citizenship Consultants, Client File Management Regulation 2021-001, s. 7.2). We keep the case file for that period even after your account is deleted, and then destroy it securely.
• Job letters sent to the NOC tool are deleted from our server as soon as the analysis is finished; only the analysis result stays with your account until you delete it.
• Sign-in records (date, IP address, device type): deleted after one year.

7. Deleting your account

Before your first upload, the app asks you to confirm that you understand an AI service (Google Gemini) will read the file; your acceptance of the Terms and of that notice is recorded with the date and the version of the text.

In the app: Account → Delete account. On the web: portal.i2canada.com/account/delete/. Either way you will be asked for your password.

• A public account is erased outright — account, profile, assessment answers, notifications, referral points and push token.
• A client account is deleted too: your sign-in, name, e-mail and password are erased, every phone is signed out, and your notifications, assessment answers, referral code and points are removed — nobody can sign in as you again. Your immigration case file (the case, the documents you sent and the forms you submitted) stays with the office for the retention period above, because the law and our licensing body require it; it is the firm's professional record, not part of your account. If you later want access again, the office creates a new login for the case.

You can also e-mail ceo@i2canada.com from the address on your account and we will do it for you.

8. Your rights

You may ask what we hold about you, ask for corrections, and complain to the Office of the Privacy Commissioner of Canada if you believe we have not handled your information properly. Write to ceo@i2canada.com.

9. Children

The app is not directed at children under 13, and we do not knowingly create accounts for them. Information about a client's children appears only in that client's own immigration file.

10. Changes

If this policy changes, the date at the top changes and the app shows the new version. Material changes are announced in the app.