THE IMPORTANT DETAILS · SEPTEMBER 23, 2026
Your information. Clear boundaries.
This notice describes the Cavait accounting, tax and advisory platform operated by CavaIt Inc. Tax-document uploads and third-party accounting connections are gated until the necessary security and service checks have been completed.
Account verification and contract records
When you register with email, we use a limited-duration verification token to confirm control of that address. Only a hash of the token is retained with a status and time record. We also retain the version and timestamp of your acceptance of platform terms and acknowledgment of this privacy notice. Your separately agreed professional engagement and payment authorization remain distinct records.
Optional SMS and MMS notifications
When you enter a mobile number, you may separately choose whether to receive Cavait account, support, appointment and requested-service updates by SMS/MMS. The checkbox is optional, initially unchecked, and is not a condition of purchasing services. We record your consent status and, if you opt in, the number, source, timestamp and disclosure version for compliance. Consent does not cover unsolicited promotional messages.
We share limited message-delivery information, such as your phone number and message content, with our messaging provider and applicable mobile carriers to deliver your selected updates. We do not ask you to text SIN/SSN, payment-card details, passwords or private financial documents. Message frequency varies and carrier message or data rates may apply. Reply STOP to unsubscribe or HELP for assistance; you may also contact hello@cavait.com to withdraw SMS consent. For the complete program details, read our SMS/MMS Messaging Terms.
What this site collects
The website and tax intake ask for your name, email, account password, selected services, country, region, general income or business context, filing history, and information needed to estimate the work. Your account, intake choices, case stages, and messages may be stored in Cavait’s database. Passwords are stored as hashes, not as readable passwords.
When you request a call, we collect the contact details, service topic, and scheduling preferences you submit. Cava uses questions to route you to the right service. AI-generated responses may be processed by an external model provider only when that integration is activated.
Sign-in and connected accounts
When Google or Apple sign-in is configured, those providers confirm your account identity and may supply your email and name. Apple may provide a private relay email address. Cavait does not receive your Apple or Google account password. Existing accounts are not automatically joined merely because another sign-in method uses the same email.
When authorized accounting connections are enabled, a business user may explicitly authorize read-only access to QuickBooks or Xero. Access and renewal credentials are stored encrypted; chosen financial reports may be stored encrypted with the relevant tax case for professional review. We do not ask for your bookkeeping software passwords. Disconnecting an accounting source does not automatically erase tax records that must be retained for an active engagement or applicable legal requirements.
Device permissions
Notifications are optional and requested from the browser only after you choose to allow them. A notification preference does not mean push delivery is active. Camera access is requested only if you choose to photograph a tax document, when secure uploads are enabled. Microphone access is requested only when you press Cava’s voice button; your browser or device provider may process speech recognition. Check the resulting text before sending. Never dictate identity numbers or account passwords.
Who can access your information
Authorized Cavait account and support personnel access information only for appropriate business purposes. The qualified professional or firm responsible for proposed or accepted work may receive the relevant information after appropriate sharing permissions and engagement controls. Hosting, identity, email, payment and integration providers may process limited data under their contracts and applicable law. Some providers may process information outside Canada. We do not sell personal information to advertisers.
Why we use it
We use account and enquiry information to understand your request, provide the product workflow, respond, and discuss availability and scope. This is not consent to marketing. Do not send SINs, CRA credentials, tax documents, payment-card details, or bank information through ordinary email or general support forms.
Retention, safeguards and your choices
We limit access to authorized roles and use technical controls to protect accounts, sessions and connected credentials. No online service can guarantee absolute security. We retain account and case information only for justified operational, contractual and legal periods, then delete or deidentify it as appropriate. Retention may continue after account closure when tax, professional or litigation obligations require it. Contact us to request access, correction, export, withdrawal of optional consent or account deletion, subject to applicable limits. If you believe information has been exposed, contact us promptly.
Cookies and your choice
Essential cookies and local storage support secure sign-in, saved progress and your privacy preference. Optional Google Analytics is disabled until you accept it. Private account and intake pages do not load visitor analytics. No advertising pixels are enabled.
Use “Cookie settings” at the bottom of any page to see purposes and durations, reject optional analytics, or change your choice. Your preference expires after 180 days in this browser. Withdrawing consent stops future events and clears accessible Google Analytics cookies on our domain; it does not retroactively remove information already processed.
French enquiries
French enquiries retain their original text and preferred language. An English working translation may be prepared for internal coordination. When configured, an external AI provider may process narrative fields for this purpose; contact details are not deliberately included, and a human must review the draft.
Providers and website operation
Hosting, email, and configured error-monitoring providers may process technical information such as IP address, request time, browser details, and error diagnostics. Transactional email, when enabled, uses the configured mail provider. Providers may process information outside Canada; this site does not promise Canada-only storage. Processing is subject to their applicable arrangements and laws.
We do not place advertising pixels in this tax journey. When operational web analytics are configured, Cavait may measure page visits and generic funnel milestones such as assessment started, estimate viewed, account created, and case started. We do not send tax answers, selected services, quote amounts, identity numbers, document contents, or case details as analytics event parameters. Account and case data can be stored server-side. Do not submit tax records or identity numbers through general chat or meeting request forms.
Access, correction, and withdrawal
Email hello@cavait.com with “Privacy request” to ask about access, correction, deletion, retention, or withdrawal of contact consent. Do not attach sensitive identity documents to your first message. We may need to verify your identity appropriately. Withdrawal may limit our ability to respond or provide an agreed service; legal retention obligations may still apply.
Request account and data deletion
Retention and safeguards
Enquiries and tax cases may remain in the account database while requests are assessed or serviced, subject to any applicable retention duties. Tax document upload is gated until account access and private storage have passed release testing. Ask us about retention and deletion before providing sensitive records. No online system can promise absolute security.
This notice will be reviewed as functionality changes. Questions can be sent to hello@cavait.com.