1. Who we are
CanadaBridge AI operates an AI-assisted recruitment platform that connects Canadian employers with skilled candidates from Africa, the Arab world and beyond. This policy explains what personal information we handle, why, and the rights you have over it.
For privacy questions or to exercise any right described here, contact privacy@canadabridge.ai.
2. Information we collect
We collect only what the service needs to function:
- Account data — name, email address, preferred language, authentication provider and role (candidate, employer, agency, consultant, administrator).
- Candidate profile data — target roles, work experience, education, certifications, skills, languages, location preferences, salary expectations and work-authorisation status.
- Immigration-related data you choose to provide — visa status, Express Entry interest and the last four digits of a passport number. We never store full passport or identity-document numbers.
- Employer data — company name, industry, size, offices, recruiter accounts and job postings.
- Documents you upload — resumes, cover letters, certificates and portfolio files.
- Usage and security data — pages visited, feature usage, error reports, and authentication events. IP addresses are hashed with SHA-256 before they are written to any log; we do not retain raw IP addresses.
3. How we use it
We use personal information to:
- Operate your account, profile and applications.
- Match candidates to jobs and generate AI match scores, resumes, cover letters and interview preparation at your request.
- Let employers evaluate applications you have submitted to them.
- Send transactional messages you have asked for or that are required for the service (application updates, interview invitations, security notices).
- Detect abuse, fraudulent postings and unauthorised access.
- Meet legal, tax and accounting obligations.
4. Legal bases
Where the GDPR applies, we rely on: performance of a contract (operating your account and applications), legitimate interests (security, abuse prevention, service improvement), consent (optional AI features and non-essential communications, withdrawable at any time), and legal obligation (accounting and lawful requests).
Where PIPEDA applies, we rely on your meaningful consent, obtained at the point of collection and withdrawable through your account settings.
5. Who sees your information
Candidate profiles are private by default. An employer sees your full profile and documents only for the jobs you apply to, or if you explicitly set your profile visibility to allow employer discovery.
We do not sell personal information, and we do not share it for third-party advertising.
- Employers and their attached recruiters — for applications you submit to them.
- Recruitment agencies and immigration consultants — only where you are formally assigned to them.
- Infrastructure processors — cloud hosting, database, storage and email delivery providers acting on our documented instructions.
- AI processing — prompts you submit to AI tools are processed by our AI gateway provider to return a result. They are not used to train third-party foundation models.
- Authorities — only where we are legally compelled, and only to the extent required.
6. Storage, security and location
All uploaded files live in private storage buckets. There are no public file URLs: every download goes through a short-lived signed link scoped to you.
Access to every database record is enforced at the database level by row-level security, not only in the application. Passwords are handled by our authentication provider and never stored by us in readable form.
Data is hosted on infrastructure that may process information outside your country of residence, including in Canada, the United States and the European Union. Cross-border transfers are covered by contractual safeguards with each processor.
7. Retention
We keep account and profile data for as long as your account is active. When you delete your account, your profile, documents and application content are removed or anonymised.
Records we must retain for legal, tax or fraud-prevention reasons (such as billing records and security logs) are kept for the shorter of the statutory period or seven years, in a form that minimises identifiability.
8. Your rights
You may access, correct, export or delete your personal information, object to or restrict certain processing, and withdraw consent. Most of these actions are available directly in Settings; anything else can be requested at privacy@canadabridge.ai. We respond within 30 days.
If you are in Canada you may complain to the Office of the Privacy Commissioner of Canada. If you are in the EU/EEA you may complain to your local supervisory authority.
9. Children
The service is not directed to anyone under 16. We do not knowingly collect personal information from children, and we delete such data when we become aware of it.
10. Changes
We will post any material change on this page and, where the change is significant, notify account holders by email before it takes effect.