Privacy-first handling should be visible at the moment it matters
This page uses placeholder legal content based on the PRD's privacy and compliance checkpoints. It should be replaced with reviewed legal language before launch.
Current placeholder policy
Privacy principles for the assessment workflow
- Meaningful consent should explain what is collected, why, how it is used, and how consent can be withdrawn.
- Collection should be limited to what is reasonably necessary for the assessment and agreed follow-up services.
- Safeguards should include encrypted transmission, encrypted storage, role-based access, logging, and multi-factor authentication for staff access.
- Retention and destruction rules should ensure documents are not kept longer than necessary.
- Third-party vendor contracts should address confidentiality, security, and breach obligations.
- Final privacy and legal language should be reviewed by qualified Canadian counsel before launch.
Upload point
Consent links belong at the file-upload step
Placeholder copy: the secure document upload experience should surface privacy policy, consent and authorization language, terms of use, and document retention information at the exact point where personal documents are submitted.
Operational note
Never ask users to email credit reports directly
Placeholder copy: the product should route users into a secure portal and avoid direct email submission for sensitive documents.
Continue to the free assessment
The form collects only name, email, and phone number at this stage.
Start My Free Assessment