Privacy Information

We collect:

• Account data: name, email, role, organisation, locale, language;
• Authentication data: hashed credentials, login timestamps, device/browser metadata;
• Customer business data: the records you create on the platform (clients, products, pipeline, files);
• Usage data: pages visited, features used, error logs;
• Cookie data: see our Cookie Preferences page for details.

We use personal data to:

• Provide, secure and improve the service;
• Authenticate users and protect accounts;
• Provide support and respond to your requests;
• Send service-related notices (you cannot opt out of essential service notices);
• Comply with legal obligations.

Where GDPR applies, we rely on:

• Performance of a contract (operating the service for our customers);
• Legitimate interests (security, service quality, fraud prevention) balanced against your rights;
• Consent for non-essential cookies and direct marketing;
• Legal obligation (tax, accounting, response to lawful requests).

We do not sell your data. We share it only with:

• Sub-processors who help us deliver the service (cloud hosting, email delivery, support tooling) under contractual data-protection terms;
• Authorities when required by law or to protect rights, safety or property;
• A successor entity in the event of merger, acquisition or asset transfer (with notice).

Your data may be processed in Canada and other jurisdictions where our sub-processors operate. Where personal data of EU/UK residents is transferred outside the UK/EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses).

We apply administrative, technical and physical safeguards proportionate to the data we hold, including encryption in transit, role-based access, audit logs, regular backups and monitored infrastructure. No system is perfectly secure; if you suspect a vulnerability or incident, please report it to hello@clavix360.app — see our Responsible Disclosure page.

We retain account and customer business data for as long as your account is active. After cancellation, we keep data for a limited period to allow recovery and to comply with legal/accounting requirements, after which it is deleted or anonymised.

Subject to applicable law (including GDPR for EU/UK users and PIPEDA in Canada), you may:

• Access the personal data we hold about you;
• Request correction or deletion;
• Request restriction or object to certain processing;
• Request data portability (where applicable);
• Withdraw consent where processing is based on consent;
• Lodge a complaint with a supervisory authority.

To exercise your rights, email hello@clavix360.app — see our Your Privacy Choices page for the process.

We use a small number of strictly necessary cookies and offer optional functional / analytics cookies you can toggle on our Cookie Preferences page.

The platform is intended for business use. We do not knowingly collect data from anyone under 16. If you believe we have, please contact us so we can delete it.

We may update this Privacy Information from time to time. Material changes will be notified by email or in-product notice before they take effect.

Privacy questions or requests: hello@clavix360.app. Mailing reference: Clavix360.app — Ottawa, Canada.