Privacy Policy

1. Introduction

Arrivion ("we," "us," or "our") operates the arrivion.ca platform. Arrivion is an AI technology company — we are not a law firm, immigration consultancy, or licensed immigration representative. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services, in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Information We Collect

2.1 Personal Information

When you use our services, we may collect:

• Full name, date of birth, gender, and nationality
• Passport information (number, issue/expiry dates, bio page image)
• Contact information (email, phone number, address)
• Employment and education history
• Financial documents (bank statements)
• Language test results
• Immigration history and travel records

2.2 Automatically Collected Information

• Browser type, IP address, and device information
• Usage patterns and interaction data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Process and analyze your immigration documents using AI
• Generate risk assessments and application readiness reports
• Auto-fill immigration application forms (IMM 5257, IMM 1294, IMM 1295)
• Calculate and optimize your CRS (Comprehensive Ranking System) score
• Track Express Entry draws and provide analysis
• Facilitate RCIC review when requested (via our partner InstaLand Immigration)
• Provide AI-powered chat support for immigration queries
• Coordinate document translation (ATIO-certified) and notarization services
• Send service updates and notifications

4. AI Processing & Third-Party Services

4.1 AI Service Providers

Arrivion uses third-party artificial intelligence services, which may include xAI / Grok or OpenAI depending on the configured provider, to power our document analysis, form auto-fill, compliance review, and chat advisor features. When you upload documents or interact with our AI features, relevant data is transmitted to these AI service providers for processing.

4.2 What Data Is Sent to AI Services

• Document Analysis (Nova): The content of uploaded documents (passport scans, bank statements, employment letters, etc.) is sent to AI for extraction and analysis.
• Form Population (Atlas): Extracted personal information is sent to AI for intelligent mapping to immigration form fields.
• Compliance Review (Sage): Document data and extracted information are sent to AI for risk assessment and compliance checking.
• Chat Advisor (Aria): Your chat messages and, for logged-in users, application status information are sent to AI to generate responses. Sensitive personal documents are NOT sent through chat.

4.3 AI Data Retention

Our AI service providers process data via API and, per their policies, do not use API-submitted data to train their models. API request data may be retained temporarily (up to 30 days) for security monitoring and abuse prevention, after which it is deleted.

5. Cross-Border Data Transfer

Our AI service providers are based in the United States. By using Arrivion's services, you acknowledge and consent to your personal information being transmitted to and processed in the United States for AI analysis purposes. While the United States does not have the same privacy laws as Canada, we ensure that our service providers maintain commercially reasonable security standards. Under PIPEDA, we are responsible for your personal information while it is being processed by third parties, regardless of location.

6. Data Sharing

We share your personal information only in the following circumstances:

• AI Processing: With third-party AI service providers as described in Section 4, strictly for the purposes of providing our services.
• RCIC Review: When you opt for RCIC review, your application data is shared with our licensed partner, InstaLand Immigration (instaland.ca), for professional review.
• Infrastructure Providers: With cloud hosting and payment processing services, under strict data protection agreements.
• Legal Requirements: When required by law, regulation, or legal process.
• With Your Consent: In any other case, only with your explicit consent.

We never sell your personal information to third parties.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/SSL) and at rest
• Secure document storage with access controls
• Regular security audits and monitoring
• Role-based access for staff and partner consultants

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by contacting us. We will delete your data within 30 days of a verified request, unless retention is required by law.

9. Your Rights Under PIPEDA

Under Canada's PIPEDA, you have the right to:

• Know what personal information we hold about you
• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent for data processing (note: this may limit our ability to provide services)
• Export your data in a portable format
• Lodge a complaint with the Office of the Privacy Commissioner of Canada

10. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings.

11. Children

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform. Your continued use of our services after changes constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy, your data, or wish to exercise your PIPEDA rights, contact us at:

privacy@arrivion.ca