Privacy Policy

Cavere is operated by Mazz Industries Inc. (“Cavere,” “we,” “us”), a company incorporated in British Columbia, Canada. This policy explains what information we collect through https://www.cavere.ai (the “Service”), why we collect it, who we share it with, and the rights you have over it. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA).

Cavere is a business-to-business service. Most of the data in the Service relates to companies rather than to individuals, but some of it (such as your account email) is personal information, and this policy applies to it.

1. What We Collect

Account information. Your email address, used to sign in (via emailed sign-in links) and to send you service-related messages.

Company data you enter. Company names, domains, keywords, known-fake domain lists, and authorized-reseller lists that you add to your account in order to run scans.

Scan results. The output of scans run for your companies: domains identified as lookalike candidates and, on eligible plans, Amazon listings and sellers identified from public marketplace data. This is information collected from public sources (DNS, certificate transparency logs, web search, and marketplace data APIs).

Billing identifiers. Stripe customer and subscription identifiers and your plan status. Payments are processed entirely by Stripe on Stripe-hosted pages; we never receive or store your card number.

Cookies and usage data. We use strictly necessary cookies to keep you signed in. We also use the two third-party tools described below. Each sets its own cookies and receives standard browser data when a page loads: the page address (URL), the referring page, your IP address, device and browser details, and the time of the visit.

Google Analytics. We use Google Analytics to understand how the Service is used, such as which pages are visited. It loads on every page of the Service, whether or not you are signed in.

LinkedIn Insight Tag. We use the LinkedIn Insight Tag to measure how our advertising on LinkedIn performs, including recording when a visitor who came from an ad creates an account. We may also use it to show our ads on LinkedIn to people who have visited the Service while signed out. It loads only when you visit the Service while signed out, and never on signed-in pages such as your dashboard or scan pages. If you are a LinkedIn member, LinkedIn may link this data to your member profile on its side.

We do not send your email address, account information, scan data, or scan results to LinkedIn, and we do not use them for advertising. A company domain you type into the scan form on our public pages can appear in the page address, which these tools receive.

Your choices. These tools load automatically on the pages described above. To opt out of Google Analytics, install the Google Analytics opt-out browser add-on. To opt out of LinkedIn using this data to show you ads, use LinkedIn’s guest ad controls. You can also clear or block cookies in your browser settings, though blocking all cookies will stop sign-in from working.

We do not collect more than we need, and we do not ask for personal information about your customers or employees.

2. Why We Collect It

We use the information above to: provide and operate the Service (run scans, display results, enforce plan limits); authenticate you and secure your account; process billing through Stripe; send transactional emails (sign-in links, billing and service notices); respond to support and privacy requests; maintain and improve the Service, including by measuring how it is used; and measure and deliver our advertising on LinkedIn, as described under “Cookies and usage data” above. We do not use your email address, account information, scan data, or scan results for advertising, and we do not sell personal information to anyone.

3. Service Providers (Subprocessors)

We use a small number of service providers to run Cavere, each of which receives only what it needs for its role. These include: cloud hosting and database providers (which store account, company, and scan data), a payment processor (payments are handled entirely on the processor’s hosted pages — we never receive or store your card number), a transactional email delivery provider, and a marketplace data provider (which receives the company names and keywords needed to run scans and returns public listing and seller data).

We also use Google Analytics (provided by Google) and the LinkedIn Insight Tag (provided by LinkedIn), which receive the cookie and browser data described in section 1.

A current list of our service providers is available on request at privacy@cavere.ai. These providers operate infrastructure in the United States and other jurisdictions outside Canada. When your information is stored or processed outside Canada, it is subject to the laws of those jurisdictions, and government authorities there may have lawful access to it. We choose providers with strong security practices and bind them to protect the information they handle for us.

4. Retention

We keep your account information, company data, and scan results for as long as your account exists, so your scan history remains available to you. When you delete your account, your account data — including company data and scan results — is deleted from our systems. Billing records held by Stripe are retained as required for tax and accounting purposes. Backup copies are purged on our providers’ standard backup rotation schedules.

5. Your Rights

Subject to applicable law, you may:

• Access the personal information we hold about you;
• Correct inaccurate information (most account and company data you can edit directly in the Service);
• Delete your account and its data — account deletion is supported end-to-end and removes your data from our database;
• Withdraw consent to optional processing (noting that some information is necessary to provide the Service at all);
• Complain to a regulator: the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

To exercise any of these rights, email privacy@cavere.ai. We will respond within the timelines required by PIPEDA and BC PIPA (generally 30 days).

6. Security

Access to the Service is protected by email-based authentication; data is stored with access controls at the database level; payment card data never touches our systems. No system is perfectly secure, but we take reasonable safeguards appropriate to the sensitivity of the information we hold. If a breach of security safeguards creates a real risk of significant harm, we will notify affected users and the Privacy Commissioner as required by law.

7. Children

The Service is for businesses and is not directed at, or intended for use by, anyone under 18.

8. Changes to This Policy

We may update this policy as the Service evolves. Material changes will be announced by email or in-product notice before they take effect. Each version carries a version number and effective date.

9. Contact

Privacy Officer
Mazz Industries Inc. d/b/a Cavere
Langford, British Columbia, Canada
privacy@cavere.ai

A Data Processing Addendum is available on request for business customers that require one.