Privacy policy

What we collect, why, who we share it with, and your rights.

Effective date: October 5, 2026

Who we are

US & Canada Tax School (uscanadataxschool.com) is an online school that teaches tax preparation. We have no physical campus. This policy explains how we handle personal information about students, people who sign up for webinars, job applicants and visitors to our website.

To be completed by the school: Legal name of the operating entity — to be confirmed.

Privacy contact: Salman Idris, CPA, CA, Director, is responsible for how we handle personal information. Write to him at info@uscanadataxschool.com.

Which laws apply

We are based in Canada. We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Our students live in Canada, the United States, India, Pakistan, Sri Lanka and elsewhere. If you live outside Canada, the law where you live may give you extra rights. Send any request to the same contact above and we will handle it.

What we collect

When you buy a course: your name, email address, the course or courses, your country, education level, which description fits you best, why you are taking the course, and a partner referral code if you enter one.

Payment: you enter your card details on Stripe’s payment page. We never see or store your card number. We keep a record of the order: amount, tax, currency, and whether it was paid or refunded.

Your student account: your name, email address, a securely hashed password (we cannot read it), your student number, your course progress, quiz and assessment results, live-session attendance, messages you send to instructors, and any certificates issued to you. If you sign in with Google, we receive your name and email address from Google.

End-of-course survey: your ratings, your answers to the open questions, and, if you choose, a short review and the name you want shown with it.

AI practice-client exercises: in some courses you interview a simulated tax client. The messages you type in that exercise are stored with your attempt so it can be graded.

Contact form: your name, email address, subject and message.

Webinar sign-ups: your name, email address, mobile number, country, the course you are most interested in, a partner referral code if you enter one, and whether you agreed to hear about future webinars and courses.

Job applications: your name, email address, country, the course you completed, your note, and the résumé file you upload.

Graded assessments: these run inside Safe Exam Browser. The site checks that requests come from the approved Safe Exam Browser configuration.

How we use it

To give you access to the courses you bought and track your progress.
To grade your work and issue certificates that anyone can verify on this site.
To email you about your account: your welcome email, password links, and messages about your course.
To send you the link for a webinar you registered for.
To answer your questions and process refunds.
To review job applications.
To improve our courses, using survey ratings and comments.
To record which partner referred you, if you used a partner referral code (see below).
To keep the site secure and to meet our legal and accounting obligations.

We only send you marketing email about future webinars and courses if you ticked the box to agree. You can withdraw that consent at any time.

Reviews shown on our website

At the end of a course we ask you to fill in a short survey. Your ratings and answers are for our staff only. Your review, and the display name you chose, appear on our public website only if both of these are true:

you ticked the box agreeing that we may publish it; and
our staff choose to feature it.

To withdraw your consent, email info@uscanadataxschool.com and we will take the review down.

Partner referrals

Some partners refer students to us using a referral code. When you use a code, we record which partner referred your order or webinar sign-up. The code does not change your price. Partners never collect fees from you, and we never give them your payment details.

To be completed by the school: state exactly what, if anything, a referring partner is told about the students they referred (for example, only a count of orders, or names as well).

Who we share it with

We do not sell personal information. We use these service providers to run the school. They process information on our behalf:

Stripe — card payments and refunds. Stripe handles your card details directly.
Vercel — hosts the website. Vercel Blob stores uploaded files, such as résumés and photos.
Neon — our database.
Resend — sends our emails.
Google — only if you choose to sign in with Google.
Anthropic — powers the AI practice-client exercise. The messages you type in the exercise, together with the case details, are sent to Anthropic to generate the client’s replies and to help grade your attempt. Do not type real personal or tax details about yourself or anyone else in the exercise.
Zoom or Google Meet — live tutor sessions and webinars, when you join one.
YouTube or Vimeo — when you play an embedded video. YouTube videos use YouTube’s privacy-enhanced (no-cookie) mode.
Safe Exam Browser — the locked-down browser you install to take graded assessments.

Each provider handles information under its own privacy policy. We may also disclose information where the law requires it.

Where it is stored

Our providers run data centres that may be outside your country, including outside Canada. Your information may therefore be stored or processed in another country and be subject to that country’s laws.

To be completed by the school: the exact regions of the database, file storage and hosting.

How long we keep it

We keep your student record, orders, results and certificates for as long as your account exists, so that your certificate can still be verified and we can meet our accounting obligations. When an order is completed, we delete the temporary password details held with it. Survey answers are deleted with the enrolment they belong to.

To be completed by the school: specific retention periods for orders, student records, contact messages, webinar sign-ups and job applications (including résumé files).

Cookies

We use two cookies:

one keeps you signed in; and
one remembers the currency you chose for prices.

We do not use advertising, analytics or tracking cookies. Video players from YouTube or Vimeo, and Stripe’s payment page, may set their own cookies when you use them.

How we protect it

See our data security page for the measures we take.

Your rights

You can ask us to:

show you the personal information we hold about you;
correct information that is wrong;
withdraw a consent you gave, such as marketing email or publishing your review; and
delete your information. We may need to keep some records, such as orders and issued certificates, to meet legal, accounting or record-keeping obligations.

Email info@uscanadataxschool.com from the address linked to your account. We may ask you to confirm your identity.

To be completed by the school: how quickly you respond to a request (PIPEDA generally allows 30 days).

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to the privacy authority where you live.

Children

Our courses are for adults. The website is not directed at anyone under 18, and we do not knowingly collect personal information from children.

To be completed by the school: confirm the minimum age to enrol.

Changes to this policy

We may update this policy. When we do, we will post the new version here and change the effective date. If a change is significant, we will tell students by email.

Contact

Questions about privacy: info@uscanadataxschool.com, or use our contact page.