1. Information We Collect

We collect information you provide directly:

Account information (name, email, password, province, date of birth)
Coverage profile (living arrangement, employment type, vehicle ownership, existing insurance coverage)
Assessment data (Protection Score, coverage gaps, exposure estimates)

We automatically collect:

Usage data (pages visited, features used, time on site)
Device information (browser type, operating system)

2. How We Use Your Information

To generate your Protection Score and coverage assessment
To provide personalized gap analysis and exposure estimates
To send you score-related communications (welcome email, follow-up reminders)
To improve the accuracy of our scoring engine and peer benchmarks
To comply with legal obligations

3. Data Storage and Security

Your data is stored on secure servers hosted in Canada (AWS ca-central-1, Montreal). We use industry-standard encryption for data in transit (TLS) and at rest. Passwords are hashed using bcrypt and are never stored in plain text.

4. Data Sharing

We do not sell your personal information. We may share data with:

Service providers who help us operate the platform (hosting, email delivery, payment processing)
Insurance carriers or brokers, only with your explicit consent and only when you choose to obtain a quote or purchase a policy
Law enforcement or regulatory bodies when required by law

5. Anonymized Data

We may use anonymized, aggregated data (which cannot identify you) to improve our scoring models, generate peer benchmarks, and for research purposes. This data cannot be traced back to any individual user.

6. Your Rights

Under Canadian privacy law (PIPEDA), you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and associated data
Withdraw consent for non-essential communications

To exercise any of these rights, contact us at aaron@cavait.com.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising pixels.

8. Data Retention

We retain your data for as long as your account is active. If you request deletion, we will remove your personal information within 30 days. Anonymized assessment data may be retained for benchmarking purposes.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, by email.

10. Contact

For privacy-related inquiries, contact us at aaron@cavait.com.