Privacy Policy

1. Who we are

Cairn is a service operated by 11173685 Canada Corporation, a federal corporation carrying on business in Ontario as Cairn ("Cairn," "we," "us," "our"). Cairn provides legal information and preparation tools for men in Ontario, Canada. Cairn is not a law firm and does not provide legal advice.

Our Privacy Officer can be reached at the address and email above. All privacy-related requests and complaints should be directed there.

2. Information we collect

We collect only what is necessary to deliver the service.

2.1 Account information

When you create an account, we collect your email address and, optionally, your name. Your email is used to authenticate your account, send transactional messages, and contact you about your subscription.

2.2 Intake data

Our intake process asks questions about your family law situation — your living arrangement, whether children are involved, and your financial circumstances. This information is used solely to organize relevant general information and generate the preparation materials you see. We treat this data as sensitive and apply enhanced security protections to it.

2.3 Usage data

We collect basic usage data including pages visited, features used, and session timestamps. This is used to improve the service and is not linked to your identity for advertising purposes.

2.4 Payment information

Payments are processed by Stripe, Inc. Cairn does not receive, store, or process your credit card number or full payment details. When you subscribe, Stripe collects and stores your payment information under their own privacy policy and security standards (PCI DSS compliant). We receive only a tokenised customer ID and subscription status from Stripe.

2.5 Documents you upload

If you have a Complete subscription, the document vault lets you upload your own files — court papers, receipts, agreements, and similar documents. We store these files so you can access them, and we treat them as sensitive. Only you can open your files: access is locked to your account, and our staff cannot read them. You choose what to upload, and you can delete any file at any time.

2.6 Information we do not collect

We do not collect personal health information as defined under the Ontario Personal Health Information Protection Act (PHIPA). We do not collect information from third parties about you. We do not track you across other websites.

3. How we use your information

We use your personal information only for the purposes for which it was collected:

• To create and manage your account
• To organize relevant general information and generate your preparation materials and suggested steps
• To save your progress across sessions
• To send transactional emails (account confirmation, password reset, plan updates, billing)
• To process and manage your subscription through Stripe
• To improve the accuracy and relevance of our general information and content
• To send marketing communications where you have given express consent under CASL (see Section 7)
• To comply with our legal obligations

We do not use your personal information for advertising, profiling for third-party marketing, or any purpose incompatible with the above.

4. Legal basis and consent

Under PIPEDA, we collect and use your personal information with your knowledge and consent. By creating an account and using the Cairn service, you consent to the collection, use, and disclosure of your personal information as described in this policy.

You may withdraw consent at any time by deleting your account. Withdrawal of consent may prevent us from providing the service to you.

5. Where your data lives

Cairn was built with Canadian data residency as a default, not an option. Your account, intake answers, plan, form data, and any documents you upload to the vault are stored on Supabase infrastructure located in Canada (Montréal region, ca-central-1). Data is encrypted in transit (TLS) and at rest.

Two service providers handle narrow categories of data outside Canada:

• Stripe, Inc. — payment processing. When you subscribe, Stripe collects and stores your payment information in the United States under its own privacy policy at stripe.com/privacy. Cairn receives only a tokenised customer ID and subscription status.
• Resend, Inc. — transactional and marketing email delivery. Message content (which may include your name and email address) is transmitted through Resend's US infrastructure for the time it takes to deliver the message.

Your account data and intake answers are not transferred outside Canada. The transfers described above are limited to the payment and email-delivery functions named. By using Cairn, you consent to these cross-border transfers as described.

6. Disclosure to third parties

We do not sell your personal information. We disclose it only in the following circumstances:

6.1 Legal requirements

We may disclose your information if required to do so by law, by court order, or by a government authority with jurisdiction, or if we believe in good faith that such disclosure is necessary to protect the safety of any person.

6.2 Business transfer

In the event of a merger, acquisition, or sale of all or part of Cairn's assets, personal information may be transferred to the acquiring party, subject to equivalent privacy protections. We will notify you of any such transfer.

7. Marketing communications (CASL)

Canada's Anti-Spam Legislation (CASL) governs commercial electronic messages sent to addresses in Canada. We follow it.

7.1 Express consent

We send marketing emails — newsletters, product updates, occasional offers — only to people who have given express consent, separately from agreeing to these Terms or creating an account. If you have not opted in, you will only ever receive transactional messages (authentication, billing, account changes).

7.2 Sender identification

Every commercial email we send identifies the sender as:

7.3 Unsubscribe

Every marketing email contains a one-click unsubscribe link. Unsubscribe requests take effect immediately and in any case within 10 business days, as CASL requires. Withdrawing marketing consent does not affect transactional messages required to operate your account.

8. Data retention

We retain your personal information for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymise your personal information within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes. Documents you uploaded to the vault are deleted when you delete them or when your account is closed.

Financial transaction records associated with your subscription are retained for seven years as required by Canadian tax law.

9. Security

We use industry-standard security measures to protect your personal information:

• All data is encrypted in transit using TLS (HTTPS)
• All data is encrypted at rest in our Canadian database
• Row-level security ensures that only you can access your own data
• Documents you upload to the vault are locked to your account — our staff cannot read them, and there is no administrative path into your files
• Administrative access is restricted by role and audited
• Payment data is never stored on Cairn's systems — it is handled entirely by Stripe

No system is perfectly secure. If we become aware of a breach that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

10. Cookies and tracking

Cairn uses two categories of cookies and similar technologies:

• Essential cookies — required to keep you logged in and to remember your session. These cannot be disabled without breaking the service.
• Anonymous usage analytics — aggregated, non-identifying data we use to understand which pages and features are working. No advertising network is involved.

We do not use third-party advertising cookies. We do not run cross-site tracking. We do not sell behavioural data. If we add any new analytics provider in the future, this policy will be updated and you will be notified before the change takes effect.

11. Your rights under PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Withdrawal of consent — withdraw consent to our collection or use of your information (subject to legal or contractual restrictions)
• Account deletion — request deletion of your account and associated personal information
• Complaint — file a complaint with the Office of the Privacy Commissioner of Canada if you believe we have handled your information improperly

To exercise any of these rights, email info@cairnguide.ca. We will respond within 30 days. To file a complaint with the Privacy Commissioner: priv.gc.ca.

12. Children

Cairn is not directed at individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at info@cairnguide.ca and we will delete it promptly.

13. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or by a prominent notice in the application at least 30 days before the change takes effect. Your continued use of Cairn after the effective date constitutes your acceptance of the updated policy.

14. Contact

For any privacy questions, requests, or concerns, contact our Privacy Officer:

See also: Terms of Service · Accessibility · Start free — no credit card