Data Governance
CivilProposal is operated by Lifesaver Technology Services Inc., a British Columbia, Canada company. This page summarizes where your data is processed before you sign up or subscribe.
Infrastructure Regions
- Application database: Supabase Postgres (Montreal / Canada Central). Proposal, client, and firm content is stored here.
- Authentication: Supabase Auth (Montreal / Canada Central). Handles sign-in sessions and account identity.
- AI generation: OpenAI API (United States). Identifying details are tokenized before transmission; see our Privacy Policy.
- Payments: Stripe (United States). Card data is collected by Stripe, not stored on our servers.
- File storage (optional): S3-compatible blob storage (e.g. Cloudflare R2) when
BLOB_STORAGE_*is configured. Region follows your bucket configuration.
Core app hosting and authentication are in Canada. Cross-border processing still occurs through U.S.-based subprocessors such as OpenAI, Stripe, PostHog, and Google Analytics, and is disclosed in our privacy materials and contracts.
Enterprise Canadian Residency
Enterprise customers can discuss Canadian data residency options: dedicated database and blob regions aligned to contract requirements. Contact [email protected] or see pricing.
Trust & Review Workflow
- Deterministic scoping: preliminary site summaries from open data and rules, not generative AI.
- Proposal drafts: narrative sections may use automated generation and require professional review before client submission.
- Export responsibility: client PDF/Word exports include disclaimers; attestation and firm profile checks gate downloads.
- See also Disclaimer, FAQ, and sample output.
Your Controls
Access, correction, and deletion requests are handled under PIPEDA. See Privacy Policy for subprocessors, retention, and contact details.