Privacy Policy

Effective: February 17, 2026

UpRow ("we", "us", "our") is operated by Kelise Williams from Alberta, Canada. We are committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). This policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

We collect the following personal information when you use UpRow:

  • Account information: Name, email address, and password (stored in hashed form — we never store your password in plain text)
  • Immigration data: CRS scores, language test scores, immigration status, and Express Entry profile details
  • Booking information: Consultation and appointment details
  • Chat messages: Conversations with Kim, our AI assistant
  • Language assessments: Speaking and writing evaluation results
  • Usage data: Pages visited and general site interaction (collected via privacy-friendly analytics)

2. How We Use Your Information

We use your personal information to:

  • Provide and operate our services — CRS Calculator, Waiting Pool, Express Entry dashboard, language preparation tools, Kim AI chatbot, and Builders Fund
  • Create and manage your account
  • Process bookings and appointments
  • Send transactional emails (account verification, password resets, booking confirmations)
  • Send SMS notifications when relevant to your account
  • Improve our services and user experience
  • Respond to your inquiries and support requests

We do not sell, rent, or trade your personal information to third parties.

3. Third-Party Services

We use the following third-party services to operate UpRow. Each processes data only as needed to provide their specific function:

  • Stripe — Payment processing. We never store your credit card numbers; all payment data is handled directly by Stripe under their privacy policy.
  • OpenAI — Powers Kim AI chatbot, speaking evaluation, writing evaluation, and text-to-speech features. Chat messages and assessment content are sent to OpenAI for processing.
  • Twilio — SMS delivery for notifications and verification.
  • SendGrid — Email delivery for transactional messages.
  • Cloudflare — Web analytics (privacy-friendly, no personal data tracking), hosting, and infrastructure.

4. Data Storage & Security

Your data is stored using Cloudflare's infrastructure, including:

  • Cloudflare D1 — Relational database for account and application data
  • Cloudflare KV — Key-value store for session and configuration data
  • Cloudflare Pages — Hosting for the UpRow application

We protect your data with:

  • Password hashing (your password is never stored in readable form)
  • HTTPS encryption for all data in transit
  • Access controls limiting who can access personal data
  • Regular review of our security practices

5. Your Rights Under PIPEDA

Under Canada's PIPEDA, you have the right to:

  • Access your personal information — request a copy of the data we hold about you
  • Correct inaccurate information in your account
  • Withdraw consent — you may withdraw your consent for us to collect, use, or disclose your personal information, subject to legal or contractual restrictions
  • Request deletion — ask us to delete your personal data from our systems
  • File a complaint — if you believe your privacy rights have been violated, you may file a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us at kelise@uprow.ca. We will respond within 30 days.

6. Cookies

UpRow uses minimal cookies necessary for the operation of the site:

  • Authentication tokens — stored in your browser's local storage to keep you logged in
  • Essential cookies — required for basic site functionality and security

We use Cloudflare Web Analytics, which is privacy-friendly and does not use cookies or collect personal data. We do not use advertising cookies or trackers.

7. Children's Privacy

UpRow is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at kelise@uprow.ca and we will promptly delete it.

8. Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you by posting the updated policy on this page with a new effective date. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions about this privacy policy or how we handle your personal information:

UpRow

Operated by Kelise Williams

Alberta, Canada

Email: kelise@uprow.ca