Privacy Policy

1. Who we are and controller status

Canadian International Business Development CORP (trading as "Canadian Driving Test Prep"), a corporation registered in British Columbia, Canada, is the data controller responsible for the personal data described in this Privacy Policy.

• Registered address: 425–6388 No.3 Road, Richmond, BC V6Y 0L4, Canada
• Privacy contact email: info@motiratech.ca
• Postal correspondence: please mark envelopes "Attn: Privacy Officer" and send to the registered address above.

2. Personal data categories we collect

• Account data — name or display name, email address, password (stored hashed), preferred language, selected province, and account identifiers.
• Usage data — questions answered, practice and mock exam results, study progress, settings, timestamps, and subscription entitlement status.
• Device and log data — IP address, browser type, device identifiers, pages viewed, diagnostic logs, and security events.
• Support communications — emails, messages, order references, and other information you send when requesting help.
• Marketing preferences — your email subscription status and consent choices.

Payment card details are collected directly by Stripe and are never stored on our servers. We receive only payment-related references needed to provide access, such as transaction identifiers, subscription status, renewal status, billing period dates, and customer email.

3. Purposes and legal basis

• Provide the Service (create your account, authenticate you, save progress, and deliver practice content) — contract performance.
• Process subscriptions (grant premium access, track renewals, cancellations, refunds, and billing periods) — contract performance and legal obligations.
• Customer support (respond to questions and account requests) — contract performance and legitimate interests.
• Security and fraud prevention (detect abuse, protect accounts, and maintain platform integrity) — legitimate interests and legal obligations.
• Improve the Service (aggregated analytics, troubleshooting, and product improvements) — legitimate interests.
• Marketing emails — consent, which you can withdraw at any time using the unsubscribe link or by contacting us.

4. Data sharing and recipients

• Stripe — our Merchant of Record. Stripe processes product sales, subscriptions, payments, taxes, invoicing, cancellations, and refunds. See Stripe's Privacy Notice.
• Hosting and infrastructure providers — cloud hosting, database, authentication, and email delivery providers acting as processors under contract.
• Analytics and support providers — tools that help us understand aggregate product use, diagnose errors, and respond to support requests.
• Professional advisers — legal, accounting, compliance, and audit advisers where necessary.
• Authorities — where disclosure is required by law, court order, tax obligation, or to protect our rights and users' safety.

We do not sell your personal data.

5. International transfers

Some service providers process data outside Canada. In particular, Google LLC (Google Analytics) processes analytics data in the United States and other Google data-centre regions. We rely on appropriate safeguards such as Google's Standard Contractual Clauses, supplementary measures including IP anonymisation, and adequacy or transfer mechanisms recognised under Canadian PIPEDA, Quebec Law 25, and the EU/UK GDPR. By granting analytics consent you acknowledge that your anonymised analytics data may be transferred to the United States, which has different data-protection laws than your country.

6. Data retention

We apply the following retention periods unless a longer period is required by law (e.g. tax, accounting, security, or dispute-resolution obligations):

• Account & profile data — kept while your account is active. After you delete your account or we receive a verified deletion request, identifying data is deleted or anonymised within 30 days. Accounts inactive for more than 3 years are automatically anonymised.
• Practice / progress data — kept while your account is active; deleted or anonymised together with the account on the same schedule above.
• Support communications (emails, tickets, order references) — retained for up to 360 days after the case is closed, then deleted or anonymised.
• Server & security logs — retained for up to 90 days for diagnostics and abuse prevention, then deleted.
• Billing & tax records — retained by Stripe and by us for up to 7 years as required by Canadian tax law.
• Cookie-consent record — kept in your browser local storage until you clear it or change your choice.
• Aggregated, non-identifying analytics — may be retained indefinitely.

7. Your privacy rights

Depending on your jurisdiction, you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your data;
• restrict or object to certain processing;
• request a portable copy of your data;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with the privacy regulator in your country, including the Office of the Privacy Commissioner of Canada where applicable.

To exercise these rights, contact info@motiratech.ca. We aim to respond within 30 days.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, access controls, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security.

9. Cookies and local storage

We use the following categories of cookies and local storage. You can change your choice at any time on our Cookie Settings page.

9.1 Strictly necessary (always on)

Required for the Service to function. These cannot be disabled.

• sb-*-auth-token — authentication session (provider: our backend; expires when you sign out or the session expires).
• settings:lang — your selected language (local storage; persists until cleared).
• consent:analytics — your cookie-consent choice (local storage; persists until cleared).

9.2 Analytics (opt-in)

We use Google Analytics 4 (provider: Google LLC, USA) to understand aggregate usage and improve the Service. Analytics scripts are only loaded after you grant consent via the cookie banner or Cookie Settings page. We enable IP anonymisation and do not use Google Analytics for advertising or remarketing.

• _ga — distinguishes users; retention: 2 years.
• _ga_G8K6XB13HX — persists session state for GA4; retention: 2 years.

See Google's Privacy Policy and How Google Analytics safeguards data.

9.3 Advertising

We do not set advertising or remarketing cookies.

9.4 Withdrawing consent

Withdrawing consent is as easy as granting it. You can do any of the following at any time:

• Open Cookie Settings, toggle Analytics off, and click Save. Tracking stops immediately and any in-page GA collection is disabled on the next navigation.
• For marketing emails, click Unsubscribe at the bottom of any marketing email, or change your preference in Account Settings.
• Clear cookies and site data in your browser for motiratech.ca to remove any _ga / _ga_* cookies already set.
• Email info@motiratech.ca with the subject line "Withdraw consent" if you cannot use the in-app controls; we will action the request within 30 days.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new "Last updated" date.