Privacy Policy I EduviXor

Who We Are

WonderMaple Inc. is a corporation registered in Canada, operating the registered trademark, EduviXor brand and platform. We provide education consultation, academic planning, and career pathway services to students and families worldwide, with operations based in Toronto, Ontario, Canada.

For the purposes of PIPEDA, WonderMaple Inc. is the data controller responsible for the personal information collected through our website and services.

Data Controller: WonderMaple Inc. (EduviXor) · Canada · [email protected]

Information We Collect

We collect personal information only to the extent necessary to deliver our services:

Identity & Contact — Full name, email address, phone number, country of residence (collected via registration and booking forms).
Student Academic Information — School name, grade level, GPA, test scores, transcripts, extracurriculars, personal statements (collected via intake forms and consultation sessions).
Career & Goals Information — Career interests, target universities, program preferences (collected via consultations and questionnaires).
Payment Information — Billing address and payment method type. Full card numbers are never stored by us — processed exclusively via Stripe (PCI-DSS Level 1 certified).
Communications — Emails, session notes, and feedback exchanged during your engagement.
Technical & Usage Data — IP address, browser type, pages visited, and time on site, collected automatically via cookies when you visit our website.

We do not knowingly collect sensitive personal information beyond what is strictly necessary to provide our services.

How We Use Your Information

Delivering our services — creating your Academic Roadmap, Career Insight Report, consultation sessions, and agreed deliverables.
Communication — responding to enquiries, scheduling sessions, and sending service updates.
Payment processing — processing transactions and managing instalment plans securely through Stripe.
Service improvement — analysing aggregated, anonymised usage patterns to improve our platform.
Legal compliance — meeting obligations under applicable Canadian law, including tax and record-keeping requirements.
Marketing (with consent only) — sending newsletters or promotions only if you have opted in. You may unsubscribe at any time.
AI-assisted analysis — using AI tools to assist our consultants in generating personalised reports. See Section 10 for full details.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. Ever.

Legal Basis for Processing (PIPEDA)

Consent — You provide consent when you purchase a service or opt into communications. You may withdraw consent at any time.
Contractual necessity — Processing is necessary to fulfil the service agreement between you and WonderMaple Inc.
Legal obligation — We may process information to comply with applicable Canadian laws and regulations.
Legitimate interest — Limited technical data may be processed to improve security and performance where this does not override your privacy rights.

Information Sharing and Disclosure

We treat your information as confidential and will not disclose it to any third party except in these limited circumstances:

With your explicit consent — for example, sharing your application materials with a partner school when you have specifically requested School Partner Direct Admissions and authorised us in writing to submit on your behalf.
Service providers — we share limited data with trusted vendors (Stripe, cloud storage, scheduling tools, email delivery) who are contractually required to protect your information and may not use it for any other purpose.
Legal requirements — we may disclose information if required by law, court order, or governmental authority in Canada.
Business transfers — in the event of a merger or acquisition, your information may transfer as part of that transaction. We will notify you in advance where required by law.

EduviXor does not share your information with partner schools or institutions for marketing purposes. Any referral or commission arrangement is disclosed to clients and requires your consent.

Data Retention

We retain your personal information only as long as necessary to fulfil the purposes for which it was collected, or as required by law:

Client account & service records — 7 years from end of service engagement (Canadian tax and legal record-keeping).
Reports and deliverables — 3 years from delivery date.
Payment records — 7 years (required by Canada Revenue Agency).
Marketing consent records — until withdrawn, plus 1 year.
Website analytics (anonymised) — 26 months rolling window.

When personal information is no longer required, we securely delete or anonymise it in accordance with our data destruction policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal information:

Encryption in transit — all data transmitted between your browser and our website is encrypted via TLS/SSL (HTTPS).
Payment security — payment card data is processed exclusively by Stripe (PCI-DSS Level 1). We never store full card numbers.
Access controls — client data access is restricted to EduviXor staff who need it to deliver your services, protected by role-based controls.
Secure storage — client files are stored on reputable cloud platforms with industry-standard security certifications.

If you believe your information has been compromised, contact us immediately at [email protected]. In the event of a data breach posing real risk of significant harm, we will notify affected clients and the Office of the Privacy Commissioner of Canada as required under PIPEDA.

Children's Privacy

EduviXor serves students from age 4 through adulthood. Where our services are used for or by children under the age of 18, all personal information must be provided and consented to by a parent or legal guardian. We do not knowingly collect personal information directly from children without verifiable parental consent.

Parents and guardians may review, correct, or request deletion of their child's information at any time by contacting us at [email protected].

‍

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to provide a functional browsing experience:

Essential cookies — required for the website to function (session management, security). These cannot be disabled without affecting site functionality.
Analytics cookies — help us understand how visitors use our site using anonymised data (e.g. Google Analytics).
Preference cookies — remember your language preference and other settings to personalise your experience.
Marketing cookies — used only with your consent to deliver relevant content or measure campaign effectiveness.

You can control cookie settings through your browser at any time. Where required by law, we will ask for your consent before placing non-essential cookies.

AI-Assisted Processing Disclosure

How we use AI: Some EduviXor deliverables — including the Career Insight Report -are generated using AI-assisted tools as part of our hybrid hodel. Your academic and personal information may be processed by these tools to generate analysis and recommendations.

All AI-generated outputs are reviewed, refined, and approved by a qualified EduviXor consultant before delivery. We do not use fully automated decision-making that produces legal or similarly significant effects without human oversight.

The AI tools we use are bound by data processing agreements restricting them from using your data for any purpose other than generating your deliverable. Your data is not used to train third-party AI models without your explicit consent.

Your Privacy Rights

Under PIPEDA and applicable Ontario privacy legislation, you have the following rights:

Right of access — you may request a copy of the personal information we hold about you at any time.
Right to correction — if any information we hold is inaccurate or incomplete, you may request that we correct it.
Right to withdraw consent — you may withdraw consent to non-essential processing at any time, without affecting the lawfulness of prior processing.
Right to deletion — you may request that we delete your personal information, subject to our legal retention obligations.
Right to complain — you may lodge a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 calendar days as required by PIPEDA.

International Data Transfers

EduviXor is based in Canada and primarily processes data within Canada. However, some service providers — including cloud platforms and AI tools — may store or process data in other countries, including the United States. Where data is transferred outside Canada, we ensure appropriate contractual protections consistent with PIPEDA are in place. By using our services, you acknowledge that your information may be processed in countries with different privacy laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page, post a notice on our website, and/or email registered clients. Your continued use of our services after any changes take effect constitutes your acceptance of the revised policy.

Privacy Enquiries & Data Requests

WonderMaple Inc. (operating as EduviXor)

Canada · [email protected] · www.eduvixor.com