Privacy Policy
Last updated: 2026-04-29
Placeholder. Replace with a real Privacy Policy before launch.
What we collect
- Account: your email address.
- Application data: everything you enter into the questionnaire — names, dates, places, addresses for you and your direct ancestors in your Canadian-citizenship chain.
- Documents: birth certificates, marriage certificates, passports, naturalization records you upload.
- Payment: handled by Stripe. We don't store card numbers.
- Usage: page views and product events via PostHog. No third-party advertising trackers.
Where it lives
Application data and uploaded documents are encrypted at rest in Supabase (US-East). Each user can only read their own data via row-level security policies enforced at the database layer.
Who we share it with
- Anthropic — to extract document data and generate cover letters / narratives. They do not train on customer prompts.
- Stripe — for payment.
- Resend — to send transactional emails.
- PostHog — for product analytics. No PII sent.
We don't share your data with advertisers or data brokers. Ever.
How long we keep it
Application data: as long as your account exists, plus 90 days after deletion request. Documents: deleted on request. Quiz responses: kept indefinitely (anonymized after 180 days unless tied to an account).
Your rights
Email hello@arryv.ai to delete your account and data, export your data, or correct anything we have wrong.