Privacy Notice

1. Operator, scope and contact

IEP (International Education Platform) Canada Inc., Alberta, Canada, operates the IEP education-planning and Advisor booking platform. This notice explains how we handle personal information for those services. Contact our privacy owner at info@iep7.com to ask about access, correction, deletion, account closure, privacy choices or a complaint. Different mandatory rights may apply depending on where you live.

2. Age and education-stage information

IEP supports High School students including Grades 10–12, Bachelor and Master applicants, and parents or guardians supporting younger students. Applicant/Beneficiary Birth Year describes the student the Plan is for, who may be different from the visitor, account holder, payer or person giving consent. We use it for applicant planning, school-stage context and age-appropriate educational personalization. We do not use it to determine the account holder's age, consent capacity, eligibility or parent or guardian status, or to change authentication, Terms acceptance or access requirements. Relevant parent or guardian context is separate. Provide only information needed for the planning task; do not enter unnecessary child identity documents or sensitive details. Terms acceptance, where separately required, is independent of age.

3. Information we handle

Account information includes email, name and profile information you supply, sign-in records, sessions and required acceptance evidence. Google sign-in, when chosen, supplies the account identity/profile needed to sign in; we do not obtain general access to your personal mailbox merely because you sign in with Google.

Planning information includes the education background, beneficiary birth year and other inputs, destinations, preferences, assessments, saved Plans, calculation results and related snapshots you provide or generate. Booking information includes the Advisor, time, timezone, meeting status, contact details you choose to provide, meeting link and relevant preparation information. Payment records include amounts, currency, voucher use, transaction/refund status and provider references. Stripe collects card details on its payment page; IEP uses payment references and status rather than storing your full card number in its application database.

We also keep essential service communications and delivery evidence, policy-version and choice evidence, and security/operational records needed to operate and protect the service. Full Plan delivery sends an IEP service copy to an IEP mailbox. Optional activity/referral analytics are described separately below.

When you use Homepage Chat, we process your message, recent conversation, current confirmed Step 1 answers and planning context you supply to answer your question and suggest planning answers for your review. This can include the student's education interests, birth year or nationality if supplied. The service also uses limited page, language, referral and signed-in/returning-visitor classifications. It does not receive private saved Plan contents through those classifications. A guest message can still contain personal information. Please avoid unnecessary identifying or sensitive details about yourself or another person.

Suggested Step 1 answers become confirmed only when you review and confirm them. Your message is processed before that confirmation. Chat alone does not create a Plan, submit an application or change a saved Plan.

4. Why we use information and who receives it

We use relevant information to authenticate accounts, prepare and save Plans, arrange and deliver meetings, process and reconcile payments, respond to support/privacy requests, prevent abuse, preserve necessary records and improve service reliability. Advisors receive the information needed for the requested meeting through authorized service workflows. Authorized IEP personnel and technical operators may access information for these purposes, subject to their responsibilities.

Hosting/database services, Stripe, Google Calendar/Meet and email providers process relevant information to deliver their functions. Payments are subject to Stripe's privacy information. Meeting invitations and emails may create copies held by recipients and their providers. Information may be processed outside your country, including by international providers; we do not promise that every copy remains in Canada. Applicable foreign laws may govern provider access. Contact us for information about the providers relevant to your request.

Homepage Chat uses Microsoft Azure AI. Its current deployment processes prompts and replies within the United States. Microsoft publishes its AI data-handling information and Online Services Subprocessor List; contact info@iep7.com for the provider information relevant to your request. Its published commitments prohibit training foundation models or improving Microsoft or third-party products with this content without the customer's permission or instruction.

Microsoft may perform automated safety checks and retain flagged content for authorized human abuse review. Provider caching is separate from the temporary IEP conversation; the current model's cached input computations may remain for at least 30 minutes and longer. IEP does not promise a maximum provider cache period or zero provider retention. Clearing Chat does not erase provider copies.

5. Personal Plans and publication

Your saved Full Plan is accessible to anyone with its permanent link, without sign-in or a viewing code. Share this link only with people you choose; it does not grant access to your account or bookings. Search-indexed Public Plan publication is a separate function and is disabled by default for this launch. A separately published snapshot, if one exists, must be reviewed separately when handling a removal request: deleting a source Plan does not automatically remove every published copy. Do not send a private report or meeting link to someone who should not have it.

6. Essential technology and optional analytics

Essential cookies and records support sign-in, security, account continuity, scheduling, payment and policy evidence. Optional page-view analytics and referral attribution remain off unless you allow them through Privacy choices. The optional-choice cookie can last up to 180 days. You can withdraw that choice in the footer. When withdrawal is confirmed, future optional collection stops and IEP clears its specified optional cookies and local tracking state. If confirmation fails, Privacy choices explains the failure and asks you to retry. Withdrawal does not itself erase historical analytics or necessary financial attribution. Ask info@iep7.com for deletion of existing data, subject to the retention and preservation rules below. Blocking essential cookies may prevent sign-in or booking.

Homepage Chat is optional; you can complete Step 1 without it. Chat uses an essential random browser identifier and security/usage records to protect the service. Using Chat or confirming an answer does not grant optional analytics, referral tracking or marketing-message permission.

7. Retention

We keep information for its stated purpose and the category schedule below, subject to a documented legal, financial, security or dispute hold limited to necessary records. Periods are IEP operating policies, not a statement that every period is legally required. We review eligible records monthly and aim to complete routine deletion or minimization within 30 days after the applicable retention deadline, unless a shorter legal deadline applies.

Account/profile and owned Plans

While active; review after 24 months without meaningful account, Plan or booking activity, with 30 days' notice before inactivity closure; verified closure/deletion requests can be handled earlier.

Unclaimed anonymous planning data

90 days after last activity where no active booking, payment or preservation obligation depends on it.

Minimum booking, transaction, refund, redeemed-voucher and essential financial delivery evidence

Seven years after the end of the year containing final settlement, refund or dispute resolution, subject to professional validation and any necessary hold.

Optional meeting notes/contact context

24 months after the meeting or cancellation unless needed for a documented dispute or another continuing purpose.

Unused expired vouchers

90 days after expiry if no payment, dispute or investigation depends on them.

Routine correspondence and Plan/support delivery records

24 months after last relevant contact; essential financial delivery evidence follows the longer financial schedule.

Raw optional activity/referral analytics

90 days from each event or visit; separately justified financial attribution follows the financial schedule. Non-identifying aggregate statistics may remain only after their anonymity is checked.

Terms/adult/guardian evidence and the accepted Terms text

Seven years after account closure or final contractual resolution, whichever is later.

Optional-consent evidence

Two years after withdrawal or expiry; this does not authorize retaining the underlying activity for that long.

Ordinary security/operational logs

90 days; relevant incident extracts may be retained under a documented case hold. Expired sign-in verification material is eligible for removal 24 hours after expiry, expired sessions after seven days, and inactive rate-limit records 24 hours after their enforcement window.

Closed privacy/support requests

Two years, unless a related financial/legal matter requires longer preservation.

Temporary diagnostic exports/recovery copies

30 days after their purpose is complete, or earlier where safe; redacted release evidence may be kept separately.

Backups expire through the relevant system's configured rolling retention. Selective immediate erasure from every backup is not available. We record completed erasure requests so that information is removed or minimized again before a restored copy resumes ordinary use. Provider and recipient copies require separate handling; we cannot promise deletion from someone else's inbox.

Homepage conversation state is temporary. It is held in browser memory and temporary application sessions, which expire after 20 minutes without activity or 60 minutes from session creation. A full reload does not restore the conversation. Closing the panel does not clear it. Clear chat removes the current browser conversation, unconfirmed suggestions and temporary Chat notes, and requests server-session removal; a failed connection can prevent that request from completing. It leaves confirmed Step 1 answers and previously generated Plans unchanged. These limits do not promise immediate erasure from every log, backup or provider.

The essential Chat browser cookie contains a random identifier, not the conversation, and has no explicit expiry set by IEP. Browser session-restoration behavior can preserve it. Clear chat does not remove this cookie or the security/usage records.

IEP keeps separate operational receipts, including request identifiers, input hashes, provider and token-usage details, status and timing, plus abuse-limit, spending-budget and emergency-stop records. These receipts do not contain the Homepage message or reply text. Our hosting service also keeps HTTP access logs. The existing schedules above apply to ordinary logs and inactive hourly limit records through manual review; a timed automatic purge of HTTP logs is not configured. Minimum request, spending and stop evidence has no automatic expiry and remains only while needed to reconcile usage or prevent replay, duplicate spending or unintended reactivation. Requests for deletion or minimization are reviewed manually. Information is eligible for removal or minimization only after related usage is resolved and safe removal of the records has been verified. Documented preservation holds and the existing backup/provider limits continue to apply.

8. Access, correction, deletion and closure requests

Write to info@iep7.com. We aim to acknowledge within five business days and complete a request within 30 calendar days of receipt, subject to applicable shorter deadlines or lawful extensions that we explain. We verify identity proportionately through an existing account or email channel; we do not routinely require a government identity document or a child's identity document.

We review the account, Plans, bookings, financial references, analytics, policy evidence, mailbox/provider copies and any publication. Depending on the record, we may delete it, remove unnecessary details, restrict it for a required preservation purpose, or explain why it must remain. An active booking or unresolved payment must be reconciled; it is not erased merely to make account deletion appear complete. We will describe what was removed or retained and relevant backup/provider limits. Some privacy rights and complaint routes depend on applicable law; contact us to raise a concern or obtain further information.

For a Chat-related request, contact info@iep7.com with the feature and approximate date, without unnecessary sensitive information. We will explain what records can be located, removed, minimized or retained. An expired unlinked conversation may no longer be retrievable. Existing identity-verification, response-time and preservation rules remain unchanged.

9. Protection and changes

We use access controls and other technical and organizational safeguards appropriate to the service. No internet service can promise absolute security. Please report suspected exposure or unauthorized use promptly. We identify this notice by version and update it when practices change; material new optional purposes require the relevant new choice rather than reusing an old grant. We keep the policy text needed to interpret retained evidence.