Policy

Privacy

Pre-launch draft. Last updated October 8, 2026. The public site has no application form and does not accept project or payment information. A final Canadian privacy notice, named privacy contact, retention schedule, and processor list will be published before intake begins.

Website measurement

The web server creates security and access logs needed to deliver the site, diagnose failures, limit abuse, and produce aggregated page-view counts. Those logs may contain an IP address, request time, requested path, response status, referrer, and browser user agent. They are access-restricted, are not used to identify visitors for marketing, and should be retained only for a short operational period.

Google Analytics 4 is optional and loads only after a visitor chooses Allow analytics. Advertising storage, advertising user data, advertising personalization, Google Signals, and ad-personalization signals are disabled. The public site must not send names, email addresses, course details, project content, or other sensitive information to analytics. A visitor can reject analytics or reopen Analytics preferences in the footer to change the choice.

Planned data

The secure intake may collect contact details, institution and program, course rules, project description, deadlines, consent records, conversation history, order and payment status, project artifacts, and integrity evidence. Payment card and banking details will remain with the payment provider.

Purposes

Data will be used to answer requests, determine permitted scope, provide and improve the service, maintain security and audit records, process payments, meet legal obligations, and honour access, correction, deletion, and opt-out requests.

Minimization and AI

Only necessary information should be collected. AI services receive minimized or pseudonymized context where practical. Raw contact details should not be sent to AI models. Personal data is not used to train a production model by default.

Storage, access, and retention

Production data is planned for protected Canadian-region infrastructure with encryption, role-based access, audit logs, backups, and type-specific retention. Google Drive is an operational archive, not the live customer database. Final retention periods and cross-border processing details require legal review.

Your choices

The production service will provide a way to withdraw optional consent, opt out of commercial messages, request human assistance, and request access, correction, or deletion where applicable. Do not submit sensitive information through this pre-launch page.