Compliance and trust

This is a compliance-oriented implementation, not a claim of compliance. External legal review is recommended before paid plans, messaging or data transfers are enabled.

CARVED is the operating brand. Questions, privacy requests and complaints go to the Person in charge of the protection of personal information at hello@carvedcanada.ca. The legal operator, registration, mailing address and phone number are not yet confirmed and are shown as pending. Paid plans cannot be activated until they are.

Privacy by design

We do not ask for Social Insurance Numbers, passport, PR card, health card, licence or banking numbers — ages, dates and status categories are enough. Planner values stay in your browser on this device (normal website requests still reach the hosting provider), and you can export or delete them from the privacy centre. Optional purposes are off until you turn them on.

Source integrity

Each estimate shows where its parameters come from, how confident they are and when they were last verified. Illustrative planning rules stay visually distinct from verified parameters, and eligibility items carry a source field waiting for the official reference.

Commercial independence

Calculation code is technically separated from commercial data. No partner or sponsored placements are currently shown. No payment, commission or partnership can change a calculation, an eligibility status or the order of a calculated result.

No advice, no determinations

The product does not determine eligibility and does not provide immigration, citizenship, tax, legal or financial advice. Paid advice or representation connected to an immigration or citizenship application must come from an authorized representative.

Accessibility and contact

We aim for keyboard-operable, labelled, readable and responsive interfaces. No independent audit has been done yet, and customer service contact details are still placeholders.

Current prototype limitations

Eligibility and deadline items are planning aids; dates are illustrative and are not official deadlines.
Some cost and benefit figures are labelled planning estimates rather than verified parameters.
Commercial Plus remains unavailable. Separate Stripe sandbox test billing charges no real money and does not grant commercial access.
Free planner values stay local without automatic account synchronization. Optional Lovable Cloud accounts hold protected saved records; visits still create technical hosting requests. Retention and transfer safeguards remain unconfirmed.
Screens are available in English, French and Arabic; no professional French or Arabic language review has been done.

Launch blockers

12 outstanding

These must be completed before the related feature is enabled. Several need a lawyer, a privacy or security professional, or business-specific information we will not invent.

Legal entity and contact details

business

CARVED and hello@carvedcanada.ca are confirmed. Legal operator, incorporation jurisdiction, mailing address, phone, designated person in charge of privacy and governing-law details remain pending in BUSINESS_IDENTITY.

External legal review of regulated scope

counsel

Recommended before activating paid contracts, commercial messaging, commissioned placements or server-side personal data; not a universal statutory precondition for a free educational site.

Complete French localization for Quebec

business

Before offering services commercially in Quebec, the complete customer-facing product and customer service must be available in French with quality and conditions comparable to English; commercial publications must be available in French, and contracts of adhesion provided or offered in French first as applicable. In-app screens and page metadata are available in English, French and Arabic; no professional Quebec French review has been completed.

Official eligibility-rule verification

product

Replace every illustrative rule with the official program criteria and reference URL, then set confidence to verified with a last-verified date.

Privacy impact and data-transfer review

privacy

Complete a privacy impact assessment and a data-transfer review before enabling any backend, analytics or messaging processor, particularly before communicating personal information outside Quebec.

Processor agreements

privacy

Execute data processing agreements with every processor before it goes live.

CASL consent implementation

counsel

Implement express opt-in records, sender identification, current contact details and prompt one-click unsubscribe before sending any commercial electronic message.

Payment and consumer-contract review

counsel

Recurring billing, all-in pricing presentation, cancellation and refund policy and the distance-contract disclosure flow require counsel review before payments are activated.

Security testing

security

Security review and testing before any personal data is stored server-side.

Accessibility review

product

Independent accessibility review and remediation of the customer-facing product.

Breach and incident response

privacy

Document the incident procedure, roles, assessment of real risk of significant harm, notification and record-keeping duties.

Retention and deletion tests

privacy

Publish a retention schedule and test access, correction, deletion and consent-withdrawal workflows end to end.

Guidance used as a basis

Cited for reference only. No endorsement of this product by any of these bodies is implied or claimed.

Office of the Privacy Commissioner of Canada — PIPEDA and meaningful consent guidance Commission d'accès à l'information du Québec — Law 25 guidance IRCC — using an authorized representative Innovation, Science and Economic Development Canada — CASL consent guidance Competition Bureau Canada — influencer and material-connection disclosure Office de la protection du consommateur du Québec — distance contracts and pricing Office québécois de la langue française — French in commerce and business