Privacy Policy

This Privacy Policy explains how Iris(“Iris,” “we,” “us”) collects, uses, and protects information when you use our case management platform and related services (the “Service”). By using the Service, you agree to this Policy.

1. Who we are

Iris provides a case management platform that lets immigration consultancies and study-abroad agencies run their client records, case files, documents, scheduling, invoicing, and client messaging in one place. For privacy questions, contact us at hello@withiris.ca.

2. Information we collect

• Account information — your name, phone number, email, practice or agency name, and login details.
• Client data you create — client contacts, case files, documents you upload, invoices, appointments, notes, and similar records you enter or generate.
• Messages & media — the content of WhatsApp/SMS messages, voice notes, and images you send through the Service so the AI can act on them.
• Usage data — log data, device/browser information, and how you interact with the Service.
• Payment information — processed by our payment provider (Stripe). We do not store full card numbers.

3. How we use your information

• To provide, operate, and improve the Service.
• To process your messages and power AI features (entity extraction, replies, automations).
• To process payments, manage subscriptions, and send service-related communications.
• To provide support, ensure security, and comply with legal obligations.

4. AI processing

To power its features, the Service sends relevant message and document content to third-party AI providers (such as Anthropic and OpenAI) for processing. We do not sell your data, and your client data is not used to train public third-party AI models.

5. How we share information

We share information only with service providers that help us run the Service, including:

• Supabase — database & authentication
• Vercel — hosting
• Stripe — payment processing
• Meta / WhatsApp Business & messaging partners — message delivery
• Anthropic & OpenAI — AI processing

We may also disclose information to comply with the law or protect our rights. We do not sell personal information.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time (see “Your rights”).

7. Security

We use industry-standard measures (encryption in transit, access controls, row-level data isolation) to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Residents of the EEA/UK (GDPR) and California (CCPA) have additional rights. To exercise any of these, email hello@withiris.ca.

9. International transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

10. Cookies

We use essential cookies to keep you signed in and to operate the Service. We may use limited analytics to understand usage.

11. Children

The Service is intended for businesses and is not directed to individuals under 18.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new “Last updated” date.

13. Contact

Questions? Email hello@withiris.ca.