Privacy policy
How immi protects your data
Last updated: May 29, 2026
1. Scope
This policy covers all data collected through your use of immi: candidate profile, simulation scenarios, login history. It applies to Canadian residents (PIPEDA) and European users (GDPR).
2. Data collected
Data you provide: first name, last name, email, date of birth, nationality, marital status, education history, work experience, official languages, spouse information. Technical data: IP address, browser type, pages visited (aggregated analytics).
3. Purposes
Candidate data is used exclusively to calculate your CRS score and your eligibility for Express Entry programs. Technical data is used to diagnose bugs and improve the service. No data is sold or shared for advertising.
4. Storage and security
Data is stored on servers hosted in the European Union (Neon Postgres). Passwords are hashed with bcrypt. Site connections are protected by TLS 1.3. No immi employee reviews your candidate data without a documented technical incident.
5. Retention
Your data is kept as long as your account is active. You can request complete deletion at any time (see “Your rights”). Accounts inactive for more than 24 months are automatically deleted, after email notice.
6. Third-party sharing
No candidate data is shared with third parties. immi uses technical subcontractors: Neon (database), Vercel (hosting), Resend (transactional emails). All operate under contracts guaranteeing confidentiality and GDPR compliance.
7. Your rights
At any time you may: access your data, correct it, request deletion, export your profile, restrict processing, or withdraw consent. Contact us through Guilia International to exercise these rights — response within 30 days.
8. Cookies
immi only uses essential cookies (session, language preference). No advertising cookies or third-party trackers are set. You can block them in your browser but the site will no longer function.
9. Minors
The service is restricted to people 18 years and older, consistent with the minimum age to submit an Express Entry profile.
10. Changes
Any material change to this policy will be notified by email to registered users at least 30 days before taking effect.
11. Contact
For any question about your data, contact the data protection officer through Guilia International's contact information.