Privacy Policy

What we collect

Account information is handled through Clerk. We use the primary account email to link purchases and audit history.

When you run the checker, DUTYPROOF processes the claimed NOC, job title, and reference-letter or duties text. With an active audit, we save the audit result to your account history, including the verdict and short evidence excerpts drawn from the submitted text, so you can generate and download the memo again.

A free check without an active audit is different: your letter and job title are not kept. We record only an anonymous tally of the check — the NOC code you entered, the verdict and its duties-proven band, the language, the time, and which link brought you to the checker — never the letter text, the job title, an email address or an IP address.

If you use “Find my NOC”, the description and optional job title you type there are sent to ScoreRoute Canada, DUTYPROOF’s free sister site, which asks Google’s Gemini model (Google Cloud Vertex AI) to rank the suggested codes. We do not save them. Google processes them on its cloud infrastructure, which may be outside Canada. A reference letter pasted into the checker is never sent there: codes suggested from a letter come from DUTYPROOF’s own matcher.

If you join a mailing list, we store the email address and basic signup context you submit.

Why we use it

We use this information to run the NOC comparison, show your history, generate your PDF memo, provide purchased access, prevent abuse, support the service, and understand where the product journey succeeds or fails.

Service providers

DUTYPROOF uses Clerk for authentication, Supabase for account entitlements and audit history, Stripe for payments, Vercel for hosting, product analytics and performance monitoring, Google Cloud (Gemini on Vertex AI, through ScoreRoute Canada) to rank NOC code suggestions, Google Analytics and Google Ads for aggregated usage and conversion measurement, and Microsoft Clarity for session replay and heatmaps. Stripe handles card details; DUTYPROOF does not store full card numbers.

These providers set cookies or similar identifiers in your browser to tell one visit from another. We do not use them to identify you by name.

We do not sell audit contents or use them to build advertising profiles.

Session replay and heatmaps

We use Microsoft Clarity to see how these pages are used: clicks, scrolling, mouse movement, page changes, and a replay of the screen as it changed. Clarity sets its own cookies and assigns a randomly generated visitor number.

The text you paste into the checker is masked before anything is sent. Clarity masks the contents of input boxes and text areas automatically, and we additionally mask the parts of the result that quote your letter back to you — the evidence excerpts, the exclusion warnings and the suggested-code terms. In a replay those appear as blocked-out characters, not as words. Microsoft does not receive them.

Clarity is operated by Microsoft and processes data outside Canada. What Clarity itself retains, and for how long, is governed by Microsoft’s privacy statement.

Retention and your choices

Audit history currently has no automatic expiry. You may request access, correction, or deletion by emailing admin@scoreroutecanada.ca. Deleting saved audit data can remove the ability to regenerate its PDF memo.

Security, children, and changes

We use access controls and server-side ownership checks, but no online service can promise absolute security. Do not submit information that is unnecessary for a NOC reference-letter review.

The service is not directed to children under 16. We may update this notice; the date above identifies the current version.

Contact

Privacy questions and requests: admin@scoreroutecanada.ca.