Privacy Policy

MedPathways is a licensure-pathway guidance service for internationally trained physicians considering practice in Canada. It is operated by Canada's Sunshine Inc. (Business Number 735974735), a Canadian corporation based in Richmond Hill, Ontario.

This policy covers the MedPathways website at canadamedpathways.ca and the services delivered through it: the free eligibility check, the paid pathway assessment, and consultations booked with our clinical advisor. It is governed by Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

If you read nothing else on this page, these are the four things that matter most, and each is expanded on below.

• We do not keep your documents. If you upload a degree, transcript or certificate, it is read once to pull out a short list of facts, then discarded. We do not store the file, and there is no copy to leak.
• Your data is stored in Canada. The database sits in Canada (Montréal, ca-central-1). The AI processing that generates your assessment happens in the United States, which is explained in section 6.
• We never sell your information, and we only pass it to anyone outside our own providers when you specifically ask us to — which today means one thing: an introduction to an immigration lawyer.
• You do not need an account. There is no password to be stolen and no profile accumulating over time.

What you give us

• Eligibility answers. Your responses to the screening questions: where you trained, your specialty, your certification status, your work authorization in Canada, and where you are hoping to practise.
• Your written description. Anything you type into the intake box about your training and what you are trying to decide.
• Uploaded documents, transiently. Covered separately in section 4, because how we handle these is unusual.
• Email address. Requested at intake and required to deliver a paid assessment or book a consultation. Giving it is optional for the free check.
• Booking details. Your name, time zone and chosen appointment time, if you book a consultation.
• Messages you send us. Support and refund correspondence.

What we generate about you

• Your assessment. The pathways, risks, deadlines and next steps produced for your file, plus which engine version produced them.
• An internal triage note. A short classification of how strong your profile appears and whether a consultation is likely to help you. This affects what we show you and how we follow up. It is not shared outside MedPathways and it is not a credentialing decision — nobody at any College or hospital sees it.

What we collect automatically

• Operational logs. IP address, browser and device details, timestamps and error records, kept for security monitoring and debugging.
• A session identifier. A random token in your browser that links you back to your own assessment after payment. It is not tied to your identity and carries no personal information.

We do not use advertising cookies, third-party tracking pixels, or analytics that build a profile of you across other websites.

Uploading is optional and requires you to tick a consent box first. Until you do, the upload control does not work. You can complete an assessment using the screening questions alone, or by describing your situation in writing.

What we extract, and what we deliberately ignore

We pull only the facts that change licensure advice: your medical degree institution, country and year; your postgraduate programme, country and years completed; your specialty and subspecialty; your certifying body, certification status and year; your language test result; and your current clinical role.

We do not extract passport or identity numbers, dates of birth, home addresses, photographs, or family information, because none of those change the answer. Those details may well appear on a document you upload — they are simply not read out of it, and the document itself is not kept.

Everything extracted is treated as reported, never verified. Source verification of medical credentials runs through the Medical Council of Canada and is an entirely separate process that we play no part in.

• Generate your pathway assessment and show you the free portion of it.
• Deliver the full assessment to you after payment, and let you retrieve it later.
• Schedule, run and follow up on consultations.
• Take payment and issue refunds.
• Contact you about your licensure pathway, including following up if your circumstances change.
• Answer your questions and handle support requests.
• Understand which parts of the funnel work, using aggregate counts rather than individual profiles.
• Detect and prevent fraud, abuse and payment disputes.
• Meet our legal and tax obligations.

We do not use your information to train AI models, and neither does our AI provider — that is a contractual term of our commercial agreement with them, not merely a setting.

Your record is stored in Canada (Montréal, ca-central-1). The AI processing that produces your assessment is performed by Anthropic in the United States. This matters and we would rather state it plainly than bury it: while your information is being processed there, it is subject to United States law, including lawful government access requests, and the protections of PIPEDA do not travel with it.

Our agreement with Anthropic prohibits using your data to train models, requires deletion of inputs and outputs within 30 days, and applies enterprise security controls during processing. We are watching for Canadian-region availability and will move that processing north when it exists.

Everyone who touches your data

That is the complete list. If it changes, this page changes with it.

We do not sell, rent or trade personal information. There is no circumstance in which we do this. Beyond the providers listed above, your information leaves MedPathways in only these cases:

• An immigration introduction you asked for. If you cannot yet work in Canada, we may offer to introduce you to a licensed Canadian immigration lawyer. This happens only if you tick a separate consent box that names exactly what is shared — your email address and your screening answers. It is never inferred from any other agreement, and declining costs you nothing else on the site.
• Legal requirement. Where we are compelled by law, a court order, or valid legal process.
• Protecting rights and safety. Where disclosure is necessary to investigate fraud, enforce our Terms, or protect someone from harm.
• A business transfer. If Canada's Sunshine Inc. is merged, acquired, or sells assets, records may transfer as part of it. We will notify you before your information becomes subject to a different privacy policy.

If you never pay

Your email address, answers and assessment are erased 180 days after you start. The row itself remains with those fields emptied, so our own counts stay accurate, but nothing identifying survives.

If you pay

Your assessment and answers are kept for 24 months, then erased the same way. Licensure pathways routinely run longer than a year and the point of keeping it is to be able to pick the conversation back up. You can ask us to erase it sooner.

Uploaded documents

Not retained at all. See section 4.

Immigration enquiries

If you asked about an introduction but did not consent to one, the record is deleted outright after 180 days. If you did consent, we keep it while the introduction is live and for the follow-up we promised.

Payment records

What you bought, when, and for how much is kept 6 years, as Canadian tax law requires. Erasing your assessment does not erase this, and we are not permitted to delete it on request.

Backups

Rolling 30-day backups. Erased data disappears from backups as they age out.

Legal holds

Anything subject to a dispute, investigation or preservation order is kept for as long as that requires.

Deletion runs automatically every night. It is not a manual process that depends on someone remembering.

• Encrypted in transit (TLS 1.2 or better) and at rest.
• Row-Level Security enabled on every table with no public policies, so the database rejects anonymous reads by default rather than relying on application code to remember.
• The key that can read your data is held only on the server and is never sent to a browser.
• Card details are entered on Stripe’s own hosted page. They do not pass through our servers, and we could not see your card number if we wanted to.
• Payment and scheduling webhooks are cryptographically signed and verified; an unsigned or mis-signed request is refused.
• Production access is limited to the MedPathways technical team.
• Credentials are rotated on a schedule and immediately if exposure is suspected.

No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada, as PIPEDA requires.

Under PIPEDA you can ask us to do any of the following, and we will respond within 30 days:

• Access — get a copy of everything we hold about you.
• Correct — fix anything inaccurate or incomplete.
• Delete — erase your record ahead of the schedule above. We will tell you what we cannot delete and why, which in practice means payment records only.
• Withdraw consent — including consent to an immigration introduction, at any point before it is made.
• Stop hearing from us — unsubscribe from follow-up at any time. Messages about something you have already paid for are not marketing and will still reach you.
• Complain — if you think we have mishandled your information.

Write to privacy@canadamedpathways.ca. If you are not satisfied with our answer, you can take it to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

If you are in the United Kingdom or the European Economic Area, you also have rights under the UK GDPR or GDPR, including data portability and the right to object to processing. The same address handles those requests.

MedPathways is intended for qualified physicians and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a minor has submitted information to us, write to privacy@canadamedpathways.ca and we will remove it.

We use one essential cookie: a random session token that links your browser back to your own assessment so you can see it after paying. It carries no personal information and cannot identify you to anyone else. We use no advertising cookies and no third-party tracking.

We may update this policy as the service changes. Where a change is material and we have your email address, we will tell you at least 30 days before it takes effect. The effective date at the top of this page always reflects the current version, and earlier versions are available on request.

Privacy Officer

Mansoor Haghighi

Operator

Canada's Sunshine Inc. (BN 735974735)

Address

238 Montiel Road, Richmond Hill, Ontario, L4C 4T5, Canada

Privacy requests

privacy@canadamedpathways.ca

Everything else

care@canadamedpathways.ca

This version

July 29, 2026

Our Terms of Service set out the rules for using MedPathways and should be read alongside this policy.