Nvestiv Privacy Policy and Data Usage Policy
Effective Date: June 1, 2025
Parties and Scope
This Privacy Policy and Data Usage Policy ("Policy") describes how Nvestiv Capital Corporation ("Nvestiv," "we," "our," or "us"), a corporation organized under the laws of Ontario, Canada, with its principal place of business at 80 Atlantic Ave, 4th Floor, Toronto, Ontario M6K 1X9, collects, uses, discloses, transfers, and protects Personal Data in connection with Customer’s access to and use of our Services (as defined in our General Terms of Service). All capitalized terms not defined herein have the meanings given in the General Terms of Service ("Agreement"). By accessing or using the Services, Customer and its Users consent to the processing practices described in this Policy.
1. Definitions and Interpretation
"Personal Data" means any information relating to an identified or identifiable individual, including but not limited to name, email address, phone number, job title, and any other information that can directly or indirectly identify a natural person.
"Process" (and its derivatives) means any operation performed on Personal Data, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
"Data Controller" means the entity that determines the purposes and means of Processing Personal Data. Nvestiv acts as Data Controller for data collected directly from Users.
"Data Processor" means the entity that Processes Personal Data on behalf of the Data Controller. Sub-processors engaged by Nvestiv shall be considered Data Processors.
"Sub-processor" means any third party engaged by Nvestiv to Process Personal Data on behalf of Customer.
"EU Standard Contractual Clauses" means the module clauses for use where Personal Data is transferred from the EU to third countries, as adopted by the European Commission.
"GDPR" means the General Data Protection Regulation (EU) 2016/679.
"CCPA" means the California Consumer Privacy Act and related regulations.
2. Personal Data We Collect
2.1. Data You Provide. We collect Personal Data that you submit when registering for the Services, such as:
Name, email address, phone number, job title, company name
Billing information (billing address, payment details)
Account credentials and profile information
2.2. Usage and Technical Data. We automatically collect data about your use of the Services and technical details, including:
IP address, browser type, device information, operating system
Usage logs, feature engagement, error reports
2.3. Third-Party Sources. We may receive Personal Data from third-party services you connect (e.g., Single Sign-On providers) or analytics tools (Google Analytics, Microsoft Clarity).
3. Purposes and Legal Basis for Processing
3.1. Performance of Contract. Processing necessary to provide, maintain, and support the Services.
3.2. Legitimate Interests. To:
Improve and personalize our Services
Conduct aggregate analytics and benchmarking
Prevent fraud and ensure security
Communicate updates, promotions, and support
Comply with legal obligations
3.3. Consent. Where required, we will request your consent for marketing communications or non-essential cookies.
4. Data Usage Policy
4.1. Internal Use. Nvestiv may use Customer Data and aggregated usage metrics to analyze trends, improve functionality, troubleshoot issues, and develop new features.
4.2. Anonymization and Aggregation. Any analytics or benchmarking data derived from Customer Data will be anonymized and aggregated so that individual Customers or Users cannot be identified.
4.3. Data Siloing. Customer Data remains segregated and is never shared with other Customers except as expressly authorized by the Customer or required by law.
4.4. Data Retention. We retain Personal Data only as long as necessary to fulfill the purposes outlined, to comply with legal obligations, resolve disputes, and enforce agreements. Specifically:
Account data and billing information: retained for the duration of account and 7 years after termination for legal compliance.
Usage logs and analytics: retained for 2 years.
Support tickets and communications: retained for 5 years.
5. Disclosure of Personal Data
5.1. Service Providers and Sub-processors. We may share Personal Data with trusted Sub-processors who provide hosting, payment processing, analytics, and support services. A current list of Sub-processors is available at .
5.2. Legal Requirements. We may disclose Personal Data to comply with laws, regulations, legal processes, or governmental requests.
5.3. Business Transfers. In the event of a merger, acquisition, or sale of assets, Personal Data may be transferred to successor entities, subject to confidentiality obligations.
6. International Transfers and EU Standard Contractual Clauses
6.1. International Transfers. Personal Data may be transferred to and stored in jurisdictions outside the Customer’s country, including Canada and the United States.
6.2. Safeguards. Where required by applicable law, transfers from the EU or UK are subject to EU Standard Contractual Clauses or equivalent safeguards.
7. Cookies and Tracking Technologies
7.1. Types of Cookies. We use Essential, Analytics, and Marketing cookies. Detailed descriptions and purposes are provided in our Cookie Notice: .
7.2. Opt-Out. You may manage cookie preferences through browser settings or our cookie consent banner.
8. Data Subject Rights
8.1. Access and Portability. You may request access to your Personal Data and receive it in a machine-readable format.
8.2. Rectification and Erasure. You may request correction or deletion of your Personal Data, subject to legal exceptions.
8.3. Restriction and Objection. You may request restriction of Processing or object to Processing based on legitimate interests.
8.4. Consent Withdrawal. Where Processing is based on consent, you may withdraw consent, without affecting processing conducted prior to withdrawal.
8.5. Exercising Rights. To exercise these rights, contact us at with a detailed request.
9. Security Measures
Nvestiv implements administrative, technical, and physical safeguards designed to protect Personal Data, including:
Encryption of data in transit (TLS) and at rest
Access controls and authentication mechanisms
Regular security assessments and vulnerability testing
10. Children’s Privacy
Our Services are not directed to individuals under 18. We do not knowingly collect Personal Data from minors. If we learn that we have collected data from a minor, we will delete it promptly.
11. Contact and Complaints
For questions or to lodge complaints, contact:
Nvestiv Capital Corporation Email: Address: 80 Atlantic Ave, 4th Floor, Toronto, Ontario M6K 1X9
12. Changes to this Policy
We may update this Policy by posting a revised version at , with the Effective Date updated. Significant changes will be communicated via email or in-app notifications.
End of Privacy Policy and Data Usage Policy