Privacy policy

Last updated: October 21, 2026

Onward fills out US IRS Form 8840 for Canadians, ready for them to print, sign and mail. This policy explains what we collect, why, how we protect it, and how you can delete it.

What we collect

• Your answers to the form questions: trip dates and day counts, name, addresses, ties to Canada, health plan, and US paperwork answers.
• Your Canadian passport number, and a US Social Security or ITIN number only if you have one, because Form 8840 asks for them.
• Your email address, to send sign-in codes, receipts and a reminder when next year's form is due.
• The same details for anyone you add to your order, which you give us with their permission.

We never ask for your Social Insurance Number or banking details. Card payments are handled by Stripe; we never see or store your card number.

How we protect it

Passport numbers, US tax numbers and every filled-out form are encrypted with a key that is unique to you. That key is itself locked by a separate master key that is kept apart from our database and file storage, so a copy of our database or files on its own can't be read.

Only you can unlock your filled-out forms, by downloading them. Right after you pay, you can download them in the same browser for 60 minutes. After that, we ask for a fresh code sent to your email each time, even if you're already signed in.

Nothing else can unlock them, including our own admin and support tools, which show only the last 3 digits of a passport number. Every time a form is unlocked, we record when, why and from which IP address.

How long we keep it

Encrypted and only viewable by you. Kept for 7 years so you always have your copy. Delete it anytime.

After 7 years, your forms and passport numbers are deleted automatically. A check you started but never paid for is deleted a year after you last changed it. We never print your forms or keep paper copies.

Deleting your information

From "My account" you can delete the forms for any filing, or delete your whole account and all its data. We confirm with a code sent to your email, then remove it from our database and file storage.

Our email list

Before Onward opens, you can ask us to email you when it does. For that list we keep only your email address, plus a record of your consent: the wording you agreed to, when, and the IP address you signed up from. We send a confirmation, one email when filing opens and a reminder before the June 15 deadline. Nothing else, and we never share the list.

Every email has a one-click unsubscribe link, or you can write to us. We delete the whole list after the June 15, 2027 deadline.

Who we share it with

• Service providers that run Onward for us: Cloudflare (hosting, database and file storage), Stripe (payments) and Resend (email). Stripe only receives your order number and payment, never your form details.

Some of these providers store or process data outside Canada, including in the United States. We never sell your information or use it for advertising. We never send your form to the IRS or anyone else; you mail it yourself. We never put passport numbers in emails, payment records or logs, and we never email your form.

Your rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you can ask to see the personal information we hold about you, ask us to correct it, or withdraw your consent. Contact our privacy officer at privacy@useonward.ca, or write to Onward Technologies Inc., 321 Water St, Vancouver, BC V6B 1B8, Canada.