Privacy Policy

Introduction

Homeland Canada respects your privacy and has implemented strong protections to safeguard your personal data. This document describes what information is collected and how it is used.

Information We Collect

• Account Data: Username, email address (optional), and encrypted password hash
• Application Submissions: Name, contact information, and messages encrypted with AES-256-GCM before transmission
• Usage Data: Basic server logs for operational purposes

We do not collect or store unnecessary personal data.

How We Protect Your Data

• All application submissions are encrypted client-side with AES-256-GCM before transmission
• Passwords are hashed with bcrypt (cost factor 12)
• Encrypted chat uses end-to-end encryption with per-user key derivation
• Passwords are never stored in plain text
• Session tokens expire automatically for inactive users

Data Retention

We retain application submissions and encrypted chat data for as long as necessary to fulfill operational purposes. Account data remains until you request deletion.

You can request deletion of your account and associated data at any time by contacting us through the encrypted chat system.

Third-Party Sharing

Homeland does not sell or share personal data with third parties. The only external communication occurs when SMTP email delivery is enabled for application notifications.

Your Rights

Under Canadian privacy law, you have the right to:

• Access your personal data
• Request correction or deletion
• Withdraw consent for data processing
• Lodge a complaint with the Privacy Commissioner of Canada

Changes to This Policy

This policy may be updated periodically. Updates will be posted on the Homeland website with notice to registered users where reasonably feasible.

Contact

For privacy questions or data requests, please contact the Homeland administrator through the encrypted chat interface on the website.