Privacy

Where your work lives

Without an account, everything you do here stays in your browser's local storage: roadmap progress, practice attempts and scores, study progress, STAR stories, reminders, and Personal History Statement answers. Clearing your browser data clears them, and we cannot restore them.

Signed in, that same work follows your account: it syncs to our database in Canada, scoped to you alone by the database rules, so it survives a cleared browser and moves with you between devices. Your device remains the working copy; the account copy updates as you work.

What we store when you have an account

Creating an account is what moves anything to our servers. Every record below is tied to your account, is stored in our database in Canada, and the database rules scope it to you.

Your account. Your email address and a hashed password, handled by our authentication provider. We do not hold your password itself.

Your profile. When you sign in, the onboarding answers you gave on this device are mirrored to your account so they survive a lost browser: your persona, your province, your target cities, the credentials you listed, and your career stage. Local storage stays the working copy.

Purchases and access. What you bought, when it expires, and the Stripe subscription behind it: its id, status, price, and renewal date. This is what opens the paid sections. Your card details go to Stripe and do not reach our servers.

Practice pacing. A daily counter of how many questions you were served and how many mock interviews you started, one row per day. It is a count. It does not record which questions you saw or how you answered them.

Interview Lab. If you tell us your interview date, we store it, along with the date your practice ramp opened, so the ramp cannot be reset by editing the date.

Certification vault. If you upload a certificate, we store the file itself, together with the credential name, the issuer, the issue and expiry dates, the original file name, its type, and its size. Files sit in private storage under your own account's folder, and the access rules only match your own. You can remove any scan yourself, which deletes the file and its record together.

Your working data. Your practice history and scores, study and roadmap progress, STAR stories, reminders, and Personal History Statement drafts sync to your account as you work, each stored as a record only your own account can read. Deleting something on your device deletes it from the account copy on the next sync.

Access-code passes. If you redeem a pass code, we record which code you used and when, so one account cannot claim it twice.

Email. Every account starts opted in to the monthly free-set email and can leave through the one-click unsubscribe in any of them, which sets an opt-out flag on your profile. We also keep a ledger of which monthly batches went out, which holds counts and no personal information.

We hold all of it until you ask us to delete it. Nothing on this list expires on its own.

Department enquiries

If you send us a Semparo Hall enquiry, we store what you type into that form: your department, your name and role, your email address, and any optional detail you add about your province, roster size, what your hall uses today, and what you want from us. We also record the browser your enquiry arrived from. We store it so your enquiry cannot be lost if an email fails to send.

We use it to answer you and to have that conversation. We do not sell it, we do not share it with another department, and we do not add you to a marketing list from it. Ask us and we will delete it.

The Personal History Statement

The PHS workbook is live. What you type into it is saved in your browser and, when you are signed in, synced to your account's private working data in Canada, readable by your account alone and never by any department. It is not used for analytics and it is not sent to any AI model.

You control it completely. Download your full draft at any time, as a readable document or as a file encrypted with a passphrase only you hold. Delete everything in one click, which permanently removes both the copy on this device and the backup in your account, with no recovery. If you might need it later, download a copy before you delete.

AI mock interviews

The mock interview in the Interview Lab is generated by Anthropic, an AI provider outside Canada. When you sit a mock, what you say during that sitting and the titles of your saved experiences are sent to them so the panel can answer you and write your debrief. We do not store the transcript, on our servers or in your account. Anthropic handles what it receives under its own terms.

Analytics

We do not load third-party analytics, advertising, or tracking scripts on this site.

Who else handles your data

Parts of Semparo run on services we do not own. Supabase holds the database, sign-in, and your uploaded files, and that data is stored in Canada, in Supabase's Canada Central region. Stripe handles payments, Resend sends our email, and Anthropic runs the AI mock interview. Those three process what they receive outside Canada, which means it is subject to the laws of the country holding it. Vercel hosts the site.

Getting your data deleted

You can delete your PHS drafts and your certification scans yourself, from the pages they live on. For everything else, including closing your account, email us and we will remove it by hand. There is no self-serve account deletion yet.

Contact

Privacy questions, or a request to see or delete what we hold about you: team@semparo.ca.