Privacy Policy

Cavere is operated by Mazz Industries Inc. (“Cavere,” “we,” “us”), a company incorporated in British Columbia, Canada. This policy explains what information we collect through https://www.cavere.ai (the “Service”), why we collect it, who we share it with, and the rights you have over it. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA).

Cavere is a business-to-business service. Most of the data in the Service relates to companies rather than to individuals, but some of it (such as your account email) is personal information, and this policy applies to it.

1. What We Collect

Account information. Your email address, used to sign in (via emailed sign-in links) and to send you service-related messages.

Company data you enter. Company names, domains, keywords, known-fake domain lists, and authorized-reseller lists that you add to your account in order to run scans.

Scan results. The output of scans run for your companies: domains identified as lookalike candidates and, on eligible plans, Amazon listings and sellers identified from public marketplace data. This is information collected from public sources (DNS, certificate transparency logs, web search, and marketplace data APIs).

Billing identifiers. Stripe customer and subscription identifiers and your plan status. Payments are processed entirely by Stripe on Stripe-hosted pages; we never receive or store your card number.

Cookies. Only strictly necessary cookies used to keep you signed in. We do not use analytics or advertising trackers, and there are no third-party tracking scripts on the Service. If this changes, we will update this policy first.

We do not collect more than we need, and we do not ask for personal information about your customers or employees.

2. Why We Collect It

We use the information above to: provide and operate the Service (run scans, display results, enforce plan limits); authenticate you and secure your account; process billing through Stripe; send transactional emails (sign-in links, billing and service notices); respond to support and privacy requests; and maintain and improve the Service. We do not use your information for advertising, and we do not sell personal information to anyone.

3. Service Providers (Subprocessors)

We use a small number of service providers to run Cavere, each of which receives only what it needs for its role. These include: cloud hosting and database providers (which store account, company, and scan data), a payment processor (payments are handled entirely on the processor’s hosted pages — we never receive or store your card number), a transactional email delivery provider, and a marketplace data provider (which receives the company names and keywords needed to run scans and returns public listing and seller data).

A current list of our service providers is available on request at privacy@cavere.ai. These providers operate infrastructure in the United States and other jurisdictions outside Canada. When your information is stored or processed outside Canada, it is subject to the laws of those jurisdictions, and government authorities there may have lawful access to it. We choose providers with strong security practices and bind them to protect the information they handle for us.

4. Retention

We keep your account information, company data, and scan results for as long as your account exists, so your scan history remains available to you. When you delete your account, your account data — including company data and scan results — is deleted from our systems. Billing records held by Stripe are retained as required for tax and accounting purposes. Backup copies are purged on our providers’ standard backup rotation schedules.

5. Your Rights

Subject to applicable law, you may:

• Access the personal information we hold about you;
• Correct inaccurate information (most account and company data you can edit directly in the Service);
• Delete your account and its data — account deletion is supported end-to-end and removes your data from our database;
• Withdraw consent to optional processing (noting that some information is necessary to provide the Service at all);
• Complain to a regulator: the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

To exercise any of these rights, email privacy@cavere.ai. We will respond within the timelines required by PIPEDA and BC PIPA (generally 30 days).

6. Security

Access to the Service is protected by email-based authentication; data is stored with access controls at the database level; payment card data never touches our systems. No system is perfectly secure, but we take reasonable safeguards appropriate to the sensitivity of the information we hold. If a breach of security safeguards creates a real risk of significant harm, we will notify affected users and the Privacy Commissioner as required by law.

7. Children

The Service is for businesses and is not directed at, or intended for use by, anyone under 18.

8. Changes to This Policy

We may update this policy as the Service evolves. Material changes will be announced by email or in-product notice before they take effect. Each version carries a version number and effective date.

9. Contact

Privacy Officer
Mazz Industries Inc. d/b/a Cavere
Langford, British Columbia, Canada
privacy@cavere.ai

A Data Processing Addendum is available on request for business customers that require one.