How we handle the data our website tools collect

Plain language. Updated 2026-05-10.

The short version

When you use one of our website tools — the Severance Calculator, the Eligibility Quiz, or any of the others — we collect what you type into the tool, how it scored, and (if you ask us to email you a copy) your email address. We keep it for 24 hours unless you opt in to receive a follow-up email or a copy of your analysis, in which case we keep it for 90 days. You can ask us to delete it at any time by emailing privacy@mirzalegal.com.

None of this is shared with anyone outside Mirza Law. We don't sell data. We don't run third-party advertising trackers on the tool result pages.

What each tool collects

Every tool — the Severance Calculator, the Eligibility Quiz, and the others — collects the same shape of data: the inputs you provided (the answers you select or numbers you enter), the result we showed you, your IP address, browser type, and the page that referred you, and your email address (and optional first name) if you ask us to email you a copy.

How long we keep it

  • 24 hours by default. Tool inputs and results that you didn't ask us to email or follow up on are deleted within 24 hours.
  • 90 days if you opt in. If you submit your email to receive a copy of your analysis or a follow-up nurture email, we keep your record for 90 days so we can respond to your reply, send the follow-up, and answer any privacy questions you raise.
  • Indefinitely if you become a client. If you go on to retain Mirza Law from the conversation that started with a tool, your tool data becomes part of your client file and is retained per our standard client-file retention policy (see our main Privacy Policy).

Where it's stored

Tool data is stored in a Supabase Postgres database hosted in Canada (Toronto region). Encryption at rest uses AES-256, managed by Supabase. Email delivery uses Resend, which holds the email transiently for delivery.

We don't share data with anyone outside Mirza Law except the third-party service providers strictly necessary to run the tools: Supabase (database hosting), Resend (email delivery), Vercel (web hosting). Those providers cannot use the data for any purpose other than processing it on our behalf.

When we use AI

Some of our tools — the ones that let you describe a situation or ask a question in plain language — use a third-party AI (Anthropic's Claude) to process your input. What you typed is sent to Anthropic over an encrypted connection, processed, and then deleted by Anthropic per their data policies (see Anthropic's privacy policy). The output is shown back to you and stored on our side per the retention rules above. Anthropic does not use this data to train its models.

Your rights under PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act, you have the right to:

  • See what we have. Email privacy@mirzalegal.com with the email address you used and we'll send you everything we have on file.
  • Correct it. Same address — we'll update inaccurate data.
  • Delete it. Same address — we'll delete your tool data within 7 business days of your request and confirm by email.
  • Complain. If you're not satisfied with how we handled your data, you can file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

What this isn't

The tools are informational triage. They don't create a solicitor-client relationship and they don't establish privilege over what you input. If you want a confidential, privileged conversation, book a free 15-minute call and we'll do that on the call.

Questions

Anything that's not covered here, email privacy@mirzalegal.com. Real people answer.