Privacy & data protection

1. On-device processing & automatic SIN/BN masking

When you paste text or snap a photo of a letter, our browser tool automatically masks 9-digit Social Insurance Numbers (SIN) and Business Number (BN) roots (plain, spaced, or dashed, including program suffixes such as RP0001) with [masked] before display, matching, or any further step.

Photo text recognition (OCR) runs entirely inside your web browser using self-hosted files. Your photo is never uploaded to a server.

2. Purpose & explicit consent (PIPEDA & Québec Law 25)

• Your letter stays on your device: Your letter text is processed in memory in your browser and is never transmitted to our servers or analytics. If you ask an advisor to contact you, the request carries only your contact details and the letter type, deadline and amount shown above the form.
• Advisor callback requests: When you submit the advisor form, we collect your first and last name, contact details (email or phone), province, notice category, and urgency band solely for the purpose of connecting you with an advisor.
• Marketing communications (CASL): Marketing or reminder emails require a separate, unchecked opt-in consent and can be unsubscribed from at any time.

3. Data retention & deletion requests

Lead requests are retained only as long as needed to fulfill your advisor callback and meet regulatory record-keeping obligations. To request access to, correction of, or deletion of your contact information under PIPEDA or Québec Law 25, contact our Privacy Officer at privacy@noticecheck.ca.

4. Analytics

We record only anonymous interaction counts (such as notice category and urgency band) with zero personal identifiers and zero letter text.