Privacy policy
Publisher: Bisai Technologies (Bisai Technologies, LLC), 131 Continental Dr, Suite 305, Newark, DE 19713, United States · Contact: contact@bisaitechnologies.com (subject "Privacy") · Effective: 19 October 2026
This policy covers the Canada Licence Prep website. The mobile app has its own policy at https://bisaitechnologies.com/legal/canada_licence_prep/privacy. We follow PIPEDA and, where they apply, Quebec Law 25, Alberta PIPA and BC PIPA.
What we collect and why
| Data | When | Why | Kept |
|---|---|---|---|
| Email address | You ask for a sign-in link or pay at checkout | To sign you in and match you to your subscription | While you have an account, then 24 months after your last payment for tax records |
Session cookie clp_session (signed, http-only) |
After you sign in | Keeps you signed in for 30 days | 30 days or until you sign out |
| Payment details | At checkout | Processed by Stripe on our behalf; we never see or store your card number | Per Stripe's retention; invoices kept 7 years for tax |
| Subscription status, plan, renewal dates | From Stripe | To decide whether Pro is unlocked | While the subscription exists |
| Practice scores | When you finish a test | Stored only in your browser (localStorage) to show your best score | Until you clear your browser data |
| Server logs (IP address, user agent, URL) | Every request | Security and abuse prevention | 30 days |
| Analytics: pages viewed, actions on the site (test started and finished, score, plan clicked, checkout started), device and browser type, approximate country from the IP address | Every visit | To see how the site is used and improve it; a cookie only with your consent | 12 months |
We don't sell personal information, show ads or use advertising trackers.
Service providers
- Stripe, Inc. (payments, customer portal; United States/Ireland) — https://stripe.com/privacy
- Resend (sends sign-in emails; United States) — https://resend.com/legal/privacy-policy
- PostHog, Inc. (analytics; PostHog US cloud, United States) — https://posthog.com/privacy
- Our hosting provider (serves the website; United States/Canada).
Some data is processed outside Canada, where it may be accessible to authorities under local law.
Your rights
You can ask to access, correct or delete your personal information, or withdraw consent, by emailing contact@bisaitechnologies.com from the address on your account. We answer within 30 days. Cancelling a subscription doesn't delete your account; ask us if you want it deleted. You can complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner.
Analytics
We use PostHog (PostHog US cloud, servers in the United States) to understand which pages and tests are used. Requests go through our own domain (/ingest). We collect pages viewed, a few actions (test started and finished with the score, offer shown and clicked, checkout started, sign-in, subscription confirmed), device and browser type, and an approximate country derived from your IP address. We don't record sessions or collect what you type. If you are signed in, events are linked to a one-way SHA-256 hash of your email address, never the address itself.
Until you accept, analytics runs without cookies or storage on your device: each page load is anonymous and not linked to the previous one. If you click "Accept" in the banner, PostHog sets a cookie and a localStorage entry (ph_…) to recognize your browser between visits, for up to 12 months. You can change your mind at any time with the "Cookies" link at the bottom of every page, or block analytics with a content blocker. Analytics data is stored in the United States, where it may be accessible to authorities under local law.
Cookies
We use one strictly necessary cookie (clp_session), set only after you sign in, and a short-lived technical cookie (ph_evt, a few minutes) that passes an analytics event across a redirect (sign-in or checkout) and holds no personal data. The PostHog analytics cookie is set only after you accept it in the banner. Your choice is saved in your browser (analytics-consent). No advertising cookies.