Canoo scans your hard-copy Permanent Resident Card or Citizenship Certificate to ensure only those eligible for the program can join.
Canoo does not keep or upload any images of your documents. The scanning process reads details of your document using Optical Character Recognition
Once you have verified that the information is accurate, your membership record is added to our database stored in servers on Canadian soil, the details from your document encrypted, so that no one can access it, including ourselves.
The decryption key (private key) is kept separately from our server, which means that even in event of a full breach this information cannot be decrypted and read.
The database is managed by an organisation verified by the Canadian Government, subject to the Govt of Canada Controlled Goods program.
While charities and non profits are exempt from the Privacy Act or PIPEDA, we have been voluntarily using PIPEDA as the standard for compliance since legislated. Moreover, our data storage and privacy practices are built to meet the guidelines laid out in the IRCC privacy manual stemming from the federal Privacy Act.
Finally, please note that no personal or individual information provided to us is used in a commercial manner in any way, and is only used for delivery of the program - we do not lease/sell individual information.