Your privacy, plainly explained

Last updated: July 2026

The short version

One-off documents: nothing is stored. When you fill out a questionnaire and generate a PDF on your own, your information is used to create the document and then immediately discarded: nothing is saved to a database or server. That is every document on Guidepost except one. Sign Together documents are the exception, because two people cannot fill in one document from two devices unless it is held somewhere in between. If you use Sign Together, what you enter is stored while the two of you complete it, and then deleted on a published schedule set out below. We don't create accounts either way, we don't sell data, and we don't use cookies for anything other than basic site analytics.

What information we collect

Questionnaire data: When you fill out a Guidepost questionnaire on your own (for example, to generate a car bill of sale), you enter personal information such as names, addresses, vehicle details, and dates. This information is sent to our server only to generate your PDF document. It is not logged, not stored in a database, and not retained after your document is created. Once your browser downloads the PDF, the server discards all input.

Sign Together documents: Sign Together lets you and your buyer each sign one document online, from your own devices, through a secure private link. Because both halves have to come together, this is the one place where we do hold your information for a while. Here is exactly what happens. What you enter as the seller is stored when you pay, so your buyer can open it. Your buyer's details are collected from your buyer, on their own screen, and never from you. The link works for 14 days. Everything either of you entered is deleted 30 days after the document is finished, or 7 days after the link expires if it is never finished, and cancelling a link deletes your buyer's half straight away. After that we keep one record with no personal information in it at all: a fingerprint of the finished file, the date it was completed, and the province. We keep that for 24 months so either of you can prove a particular file existed on a particular day, and then it is deleted too.

The stored information sits in a database hosted in Canada. Only our servers can read it: there is no account to log in to, and the link itself carries no information about either of you, which is why it is safe to send in a text message. We never ask for a driver's licence number or a Social Insurance Number anywhere in this process, and there is nothing to upload. Your right to ask for a copy of what we hold about you, or to have it corrected or deleted, is set out under Your rights below and applies to this information too.

Guidepost does not collect your Social Insurance Number. Where a SIN is required on a form (for example, the CRA's T2201), your generated document leaves a blank space for you to fill in by hand, so your SIN never passes through, or is stored by, Guidepost.

Analytics: We use Vercel Analytics (aggregate, anonymous page-view data) to understand which guides are most used and how users navigate the site. We also use Microsoft Clarity (session replay and heatmaps) on our production site to understand where users encounter friction. Clarity is configured so that all form fields, including names, addresses, and any other personal information you enter in our questionnaire flows, are masked before being recorded. Clarity never captures the content of your inputs. Neither tool involves tracking individuals across unrelated sites, and neither includes personally identifiable information derived from your questionnaire answers. We do not use Google Analytics.

Contact emails: If you email us directly (e.g., at support@guidepostcanada.ca), we retain that correspondence to respond to your inquiry. We do not add you to any mailing list without your explicit consent.

Buyer share-links: After you complete a car-sale package, you can choose to send your buyer a link to their side of the paperwork. The link is created only when you ask for it, and only you receive it; we never send it to your buyer. The sale details it carries (vehicle year, make, model, VIN, odometer, sale price, sale date, and your province) travel inside the link itself rather than in any database, so nothing extra is stored on our servers. It deliberately carries no names or addresses (yours or your buyer's) and none of your judgment answers, such as disclosed defects or lien status. The link stops working 30 days after you create it.

Waitlists: If you join a waitlist for something we haven't built yet (the Landlord Pass or the Business Compliance Pass), we store your email address (and the province you pick, if you pick one) with our email provider (Resend), and use it only to tell you when that thing opens. Never marketing, and never passed to anyone else. Every email includes an unsubscribe link, or you can email us and we'll delete your address.

Guide-update notifications: If you choose to enter your email address after a free download to be notified when a guide changes, that address (together with the guide and province it relates to) is stored with our email provider (Resend) and used only to send you guide-update notices: never marketing. Every notification includes an unsubscribe link, or you can email us and we'll delete your address.

Cookies

Guidepost uses your browser's localStorage to remember that you have acknowledged our legal disclaimer. This preference does not track you across sites, does not contain personal information, and is stored on your device only. We do not use advertising cookies or third-party tracking pixels.

Third parties

We do not sell, rent, or share your personal information with third parties for marketing purposes. Period.

We use Microsoft Clarity for session replay and heatmap analytics. Clarity operates under its own privacy statement. We have configured Clarity with DOM masking so that all personal information entered in our questionnaire forms is blocked from recordings. Microsoft does not receive your questionnaire answers.

Our site is hosted on infrastructure that may log standard server access records (IP addresses, request timestamps) for security purposes. These logs are retained for a limited period and are not used for marketing or profiling.

PIPEDA compliance

Guidepost operates in Canada and is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA). Because we collect minimal personal information and do not retain questionnaire data, our compliance obligations under PIPEDA are limited. You have the right to request access to any personal information we hold about you, and to request correction or deletion. Given our minimal data collection, in most cases we will have nothing to provide, but please contact us and we will confirm.

Canada's privacy legislation is evolving. Bill C-27 (Consumer Privacy Protection Act) has been introduced to replace PIPEDA. Guidepost will update this policy as new legislation is enacted. Our core commitment (minimal data collection, no retention of personal information) will not change.

Children's privacy

Guidepost is intended for adults (18+). We do not knowingly collect information from minors.

Changes to this policy

If we make material changes to this privacy policy, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

Contact

Questions or concerns about privacy? Email us at privacy@guidepostcanada.ca.