Privacy Policy

1. Information you enter

The form flow can include sensitive personal information such as your name, date of birth, address, contact details, status in Canada, health-plan numbers, Social Insurance Numbers, income and tax information, family information, and signature images. The browser stores your answers locally so the form can be completed and the PDF can be generated on your device.

After payment, we may keep the completed PDF and the email address you entered in protected storage for up to 45 days so we can investigate document-generation or delivery problems and contact you about an operational issue with your order.

If you explicitly choose to order a printed copy, the recipient name, postal address, and generated PDF are sent to our print-and-mail provider, PostGrid, so the letter can be printed and delivered. Check the address carefully before confirming the order.

Do not enter information that is not required for the form. Review your browser and device security, and delete saved site data when you no longer need the draft.

2. Information we receive and why

• Payment verification: when you return from checkout, we receive the payment identifier needed to ask our payment provider whether the payment succeeded. We do not receive or store your full card number through the CHS form flow.
• Document support: when you access a completed paid form, we keep the exact PDF in private storage and the email address you entered in encrypted storage for up to 45 days. This lets us retrieve the delivered document, investigate failures, and contact you if an operational problem affects the order.
• Optional address search: when you use address autocomplete, the search text is sent through our server to the Photon address-search service. The search is optional; you can enter every address manually instead.
• Physical mail delivery: when you request a printed copy, we send the recipient name, postal address, and generated PDF to PostGrid for printing and postal delivery. We keep the exact PDF in private storage and an encrypted retry record for up to 45 days so a failed mailing can be retried without asking you to re-enter your information. PostGrid may process or retain order data under its own terms and policies.
• Service operation: we use technical information needed to serve pages, prevent abuse, troubleshoot errors, and respond to support requests.
• Analytics: we send limited product events such as page, step, jurisdiction, form code, validation-error counts, and completion status to PostHog. PostHog also receives standard technical and campaign context such as the page URL, referrer, browser/device details, and advertising click identifiers when present. PostHog is configured without cookies, IP capture, person profiles, autocapture, session recording, or browser Do Not Track suppression. We do not send your form answers, contact details, dates of birth, addresses, health-plan numbers, Social Insurance Numbers, income or tax information, signatures, payment identifiers, or payment information in those events.

3. Service providers and disclosures

CHS is responsible for the personal information handled through this service as described in this Policy.

We use service providers that help operate the site, process payments, provide analytics, and host or deliver technical infrastructure. They may process information on our behalf under their own terms and privacy policies. We may disclose information when required by law, to protect the site or users, or as part of a lawful business transaction.

We do not sell your form answers or signature images. We do not submit your application to a government office.

4. Retention and security

Draft form data is stored in your browser rather than in a CHS application database. Some draft flows use session storage with a 24-hour expiry. After payment, the exact completed PDF may be stored in private Vercel Blob storage and the customer email may be encrypted in Neon for up to 45 days to support document QA and operational follow-up. If you request physical mail delivery, the encrypted retry record also contains the recipient details; PostGrid may retain order data under its own policies. Payment and support records may be retained as reasonably necessary for payment reconciliation, customer service, legal obligations, fraud prevention, and dispute handling. We use reasonable administrative, technical, and physical safeguards, but no internet transmission or storage system is completely secure.

5. Your choices and requests

You can clear local browser storage and choose not to provide information that is not needed for the service. If your request concerns a purchase, use the support option attached to that purchase in Whop to ask about access to, correction of, or deletion of personal information we hold, subject to legal and operational limits. We may need to verify your identity before responding.

Do not send a completed health form, Social Insurance Number, health number, tax document, or signature through ordinary support messages.

6. Children and updates

The service is intended for people who can lawfully enter into a service transaction. If a parent, guardian, or authorized representative completes a form for another person, that person is responsible for having the required authority and consent.

We may update this Policy when our practices or applicable law changes. The effective date above identifies the current version.