Legal

Privacy Policy

Effective date: August 11, 2026

The short version: we collect the account and profile information needed to run your dashboard — email, and the hours/CRS/checklist data you enter. Documents you upload never touch our servers; they go straight from your browser to a Google Drive folder you control. We don't sell or advertise with your data.

1. Overview

This Privacy Policy explains how Canadian PRLedger ("PRLedger", "we", "us") collects, uses, and protects information when you use our website and dashboard (the "Service"). PRLedger is an independent, currently volunteer-run tool for tracking Canadian Experience Class (CEC) hours, CRS scores, and document readiness — it is not affiliated with, and does not act on behalf of, Immigration, Refugees and Citizenship Canada (IRCC) or the Government of Canada. By using the Service, you agree to the practices described here. Questions can be sent to hello@canadianprledger.com.

2. Information we collect

Account information. When you sign up through Firebase Authentication, we receive your email address and, if you sign in with Google, your name and profile photo as provided by Google.

Profile data you enter. The CEC hours you log, your CRS calculator inputs and scores, and your document checklist status and notes. This is stored in a private Firestore document tied to your account — only you can read or write it.

Document files — not collected. See Section 3 below. We never receive the bytes of any file you upload from the checklist page.

Guest / local-only use. If you use the public CRS or hours calculators without signing in, your inputs stay in your browser's local storage and are never sent to us.

Automatically collected information. Our hosting and database infrastructure (Firebase / Google Cloud) logs standard technical data such as IP address and browser type for security and abuse prevention. We do not run analytics or advertising cookies on the Service today.

Future advertising. PRLedger is currently a free, volunteer-run project. If it grows enough to justify the cost of running it, we intend to add small, clearly-marked ad placements rather than charge users or sell your data outright. Ad networks (e.g. Google AdSense) typically set their own cookies to serve and measure ads. We will update this Policy — including which ad providers we use and how to opt out where available — before any ads go live, not after.

3. Your Google Drive connection

PRLedger's document checklist can connect to a folder in your own Google Drive. This connection uses Google's drive.file scope — the most restrictive OAuth scope Google offers — which only lets us see the one folder you create or pick, nothing else already in your Drive.

When you upload a document, it goes directly from your browser to Google's Drive API. It is never routed through, or stored on, our servers. We only save the resulting file name and link in your Firestore profile so the checklist can show you it's there. The temporary access token used for the upload lives in your browser's memory only, is never sent to us, and expires automatically — it is not stored anywhere.

Disconnecting Drive in the app, or unlinking a single file, only removes that reference from your PRLedger profile. It never deletes or modifies anything inside your actual Google Drive. Likewise, deleting your PRLedger account (Section 6) has no effect on files already sitting in your Drive.

4. How we use information

We use the information above to:

operate your account and sync your dashboard across devices;
calculate CEC hour progress, CRS scores, and readiness estimates;
maintain the security and integrity of the Service; and
respond to support requests you send us.

We do not use your Personal Data for advertising, and we do not build advertising profiles from it.

6. Data retention & deletion

We retain your account and profile data for as long as your account exists. To request deletion of your account and associated Firestore data, email hello@canadianprledger.com from the address on your account. We'll confirm once it's done. As noted above, account deletion never touches files already stored in your own Google Drive.

7. Security

Your profile data is protected by Firestore security rules that restrict access to your own signed-in account only, and is encrypted in transit and at rest by Google Cloud's infrastructure. No method of transmission or storage is perfectly secure, so while we work to protect your information, we can't guarantee absolute security.

8. Children's privacy

The Service is intended for people at least 18 years old who are working toward permanent residence in Canada. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will remove it.

9. International users

The Service is built for temporary residents of Canada, and your data is processed using Google Cloud / Firebase infrastructure. By using the Service, you consent to your information being processed in the regions those providers operate.

10. Changes to this policy

We may update this Policy from time to time. Material changes will update the effective date at the top of this page. Continued use of the Service after a change means you accept the updated Policy.

11. Contact

Questions about this Policy or your data can be sent to hello@canadianprledger.com.

This page is provided as general information about our data practices and isn't a substitute for legal advice. If you plan to rely on it for compliance purposes (e.g. before a public launch), have it reviewed by a lawyer familiar with privacy law in your jurisdiction.

Read our Terms of Service →