Privacy Policy
Canada-first privacy with PIPEDA-aligned practices.
Last Updated: July 22, 2026
1. Our Commitment to Canadians
NivoaFlow is designed with Canada-first privacy principles. We align our practices with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation, including Alberta's PIPA and British Columbia's PIPA.
We believe that financial privacy is a fundamental right. Unlike many global platforms, NivoaFlow is built specifically to address the privacy needs of Canadian households, ensuring your financial footprint is managed with transparency and accountability.
2. Accountability & Meaningful Consent
Accountability: NivoaFlow's designated privacy lead is responsible for oversight of our data protection practices and regulatory alignment. We are responsible for personal information under our control.
Consent: We utilize an "Opt-In" model. We will not collect, use, or disclose your personal information without your knowledge and consent, except where required or permitted by law. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice.
3. Limiting Collection & Use
We only collect information strictly necessary for the purposes identified at the time of collection. These purposes include:
Identity & Account Data
- Name and Email Address (for account verification and privacy-aligned account administration).
- IP Address and Session Metadata (for security auditing and geo-fencing).
Financial Ledger Data
- Transaction History (dates, merchants, amounts) imported via CSV or connected bank accounts.
- Account Names and Categories defined by you.
- Forecasting assumptions and budget targets.
- Bank account identifiers and balances (when you connect accounts via Plaid).
Note: We never store your bank login credentials (PINs, passwords, or security questions). Bank connectivity is provided securely via Plaid.
Profile & Preferences
- Date of birth (optional, for age-based financial planning).
- Tax province (for Canadian tax calculations).
- Device identifiers (for session security).
- Subscription status (managed via Stripe—no payment card details stored).
4. Bank Connectivity via Plaid
NivoaFlow offers optional bank account connectivity through Plaid Inc., a trusted financial data aggregator. When you choose to connect your bank accounts:
How It Works
- You authenticate directly with your bank through Plaid's secure interface.
- NivoaFlow receives a secure token—never your login credentials.
- We access only the data needed: account balances, transaction history, and account identifiers.
Your Control
- Connect: Bank connections are optional and initiated by you.
- Disconnect: You may disconnect any bank account at any time from your account settings.
- Revoke: You can also revoke access directly through Plaid Portal.
- Reauthorization: Connection persistence varies by institution. We will notify you when a reconnection is needed.
Plaid is a subprocessor acting on our behalf. For details on how Plaid handles your data, see the Plaid End User Privacy Policy.
5. Subscription Payment Processing
NivoaFlow uses Stripe, Inc. for web subscription payments and Apple App Store or Google Play billing, supported by RevenueCat, Inc., for mobile subscriptions.
What Stripe Receives
- Your email address (for payment receipts and billing correspondence).
- Payment details (card number, expiry, CVC) are entered directly into Stripe's secure payment form and are handled entirely by Stripe.
What NivoaFlow Stores
- Subscription status (active, cancelled, past due).
- Billing cycle dates.
- We do not store your card number, expiry, or CVC.
Stripe is a PCI DSS Level 1 certified payment processor. For details on how Stripe handles your data, see the Stripe Privacy Policy.
Mobile Subscriptions
- Apple or Google processes the store payment; NivoaFlow does not receive your full payment-card details.
- RevenueCat validates the store purchase and manages subscription entitlements on our behalf.
- RevenueCat receives an app user ID, store purchase identifiers, subscription status, and basic device/store metadata.
- RevenueCat does not receive your bank transactions, linked-account balances, receipt images, or Plaid credentials from NivoaFlow.
For details on RevenueCat's processing, see the RevenueCat Privacy Policy.
6. Customer Support Chat
Our support chat on nivoaflow.com and in the app is provided by Tidio, which includes an automated assistant that answers common questions before a person replies.
What Tidio Receives
- The messages you send in the chat window.
- A visitor identifier, your IP address, and basic browser and device information.
- Any name or email address you choose to provide so we can follow up.
What Tidio Does Not Receive
- Your account balances, transactions, or any connected bank data.
- Your password or authentication tokens.
Please do not share passwords or full account numbers in chat. We will never ask for them. For details on how Tidio handles this data, see the Tidio Privacy Policy.
7. Waitlist & Marketing Communications
If you sign up for our early access waitlist, we collect the following information:
Waitlist Data
- Email Address: To contact you about launch updates and new features.
- Consent Preference: Whether you opted in to receive marketing communications.
- Consent Metadata: Timestamp and method of consent (for CASL compliance).
- Anonymized IP Hash: A one-way hash of your IP address for consent audit trail (cannot be reversed to identify you).
- Referral Source: How you found us (e.g., landing page, blog) and any UTM campaign parameters.
CASL-aligned consent: We collect express consent via an unchecked checkbox before sending commercial electronic messages. You must actively opt in to receive marketing emails.
Data Retention: We retain waitlist data until you request deletion or unsubscribe. Unsubscribe requests are processed within 10 business days.
No Third-Party Sharing: Your waitlist email is never sold, rented, or shared with third parties for their marketing purposes.
Unsubscribe: To unsubscribe from marketing communications, reply to any email with "unsubscribe" or contact support@nivoaflow.com.
8. Data Residency & International Transfers
We use cloud service providers that process and store data in Canada, the United States, and other jurisdictions as needed to deliver the service. Where data is processed outside your jurisdiction, we apply contractual and technical safeguards appropriate to the sensitivity of the data.
For a complete list of our service providers, see our Subprocessors page.
9. Safeguards & Data Sovereignty
We protect personal information with security safeguards appropriate to the sensitivity of the information:
- Row-Level Security (RLS): Your data is isolated at the database layer, preventing your records from being accessible to other users.
- Encryption: Data is encrypted both in transit and at rest using industry-standard encryption.
- Access Controls: NivoaFlow limits access to your financial data to authorized personnel through technical and policy controls. Production data access is restricted and logged.
- Data Portability: We support data portability. You may request a copy of your data by contacting privacy@nivoaflow.com, and we will provide it in a standard machine-readable format.
10. Data Retention
We retain personal information only as long as necessary for the purposes identified or as required by law:
| Data Type | Retention Period |
|---|---|
| Account & Financial Data | Until you delete your account |
| Bank Connection Tokens (Plaid) | Until you disconnect or reauthorization is required |
| Security & Audit Logs | As required for security and compliance purposes |
| Waitlist Data | Until you unsubscribe or request deletion |
| Support Correspondence | As required for dispute resolution and compliance |
When you request account deletion, your data is hidden immediately. You choose a grace period during which you can cancel the request. After the grace period expires, all personal data is permanently removed and third-party access tokens are revoked.
11. Breach Notification
To support our PIPEDA-aligned privacy program and applicable provincial obligations, we maintain breach response procedures:
Assessment: If we become aware of a security incident involving personal information, we will promptly assess the scope and severity of the breach.
Notification: Where a breach creates a real risk of significant harm, we will notify affected individuals as soon as feasible, and report to the Office of the Privacy Commissioner of Canada as required by law.
Content: Notifications will include the nature of the breach, the types of information involved, steps we are taking, and actions you can take to protect yourself.
Record-Keeping: We maintain records of all breaches as required under PIPEDA, regardless of whether notification was required.
12. Cookies & Analytics
We use cookies and similar technologies to support the operation of our platform:
Essential Cookies
Required for the platform to function. These cannot be disabled.
- Session cookies: Maintain your login state
- Security cookies: CSRF protection, rate limiting
- Preference cookies: Theme (dark/light mode), currency settings
Analytics Cookies (Optional)
Only activated when you choose “Analytics Only” or “Accept All” on the consent banner.
- Google Analytics 4: Collects page views, campaign attribution, events, and performance measurements on our public marketing site
- Microsoft Clarity: When configured, provides consent-gated, masked interaction and usability diagnostics on our public marketing site
- Opt-in only: No analytics data is collected unless you provide consent
- Separated choice: Analytics consent does not enable advertising tags
- Limited scope: These public-site tools do not receive the financial records stored in your NivoaFlow account
Advertising Measurement (Optional)
Only activated when you choose “Accept All.” Depending on which campaigns we run, configured tags may include Meta, TikTok, Reddit, and LinkedIn.
- These tags measure visits and campaign actions on our public site after consent
- Campaign parameters and advertising click identifiers may be retained for attribution
- The advertising platforms process tag data under their own privacy terms
- Advertising tags are not loaded on authenticated financial dashboard pages by this implementation
What We Don’t Do
- We do not sell cookie or financial data to data brokers
- We do not make optional analytics or advertising consent a condition of service
- We do not send account balances, transactions, budgets, or goals to advertising platforms
Managing Cookies: Use “Cookie settings” in the site footer to change your choice, or use your browser settings. Changing a choice stops future optional collection; you may also need to clear existing platform cookies through your browser.
13. AI & Automated Decision-Making
NivoaFlow uses machine learning and automated systems to enhance your experience. We are transparent about how these systems work:
How We Use AI
- Transaction categorization: Automatically categorize transactions based on merchant names and patterns
- Recurring detection: Identify recurring bills and subscriptions from your transaction history
- Cash flow forecasting: Project future balances based on historical spending patterns
- Insights generation: Surface spending trends and budget recommendations
Your Rights & Controls
- Override: You can always manually correct any automated categorization
- Transparency: AI-generated insights are clearly labeled
- No profiling for third parties: We do not use AI to profile you for advertisers or lenders
- No training on your data: Your financial data is not used to train AI models
- Human review: Significant automated decisions can be reviewed upon request
AI Disclaimer
AI-generated insights, forecasts, and recommendations are for informational purposes only. They should not be relied upon as financial advice. Always verify important financial information and consult qualified professionals for significant decisions.
14. Children's Privacy
NivoaFlow is designed for adults. Our services are intended for individuals who are at least 18 years of age (or the age of majority in their province).
Inadvertent Collection: We do not knowingly collect personal information directly from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact privacy@nivoaflow.com.
15. Provincial Privacy Laws
In addition to our PIPEDA-aligned practices, we design our privacy program with applicable provincial privacy legislation in mind:
Alberta (PIPA)
Alberta residents are protected under the Personal Information Protection Act (PIPA). You have the right to access your personal information, request corrections, and file complaints with the Office of the Information and Privacy Commissioner of Alberta.
British Columbia (PIPA)
BC residents are protected under the Personal Information Protection Act (PIPA). You have the right to access your personal information, request corrections, and file complaints with the Office of the Information and Privacy Commissioner for BC.
Quebec (Law 25 / Bill 64)
Quebec residents are protected under updated privacy legislation (Law 25). You have enhanced rights including data portability, the right to be forgotten, and the right to object to automated decision-making. Complaints may be filed with the Commission d'accès à l'information du Québec.
The specific rights available to you may vary depending on your province of residence. Contact us if you have questions about your provincial privacy rights.
16. Individual Access & Openness
Upon request, we will inform you of the existence, use, and disclosure of your personal information and provide you with access to that information. NivoaFlow users have the right to:
- Challenge the accuracy and completeness of the information and have it amended as appropriate.
- Request deletion of all account data, which we will process promptly according to our data retention policy.
- Inquire about the specific sub-processors used for their account data.
17. Handling Inquiries & Complaints
If you have a question or complaint regarding our privacy practices or PIPEDA-aligned privacy program, please contact our privacy lead at privacy@nivoaflow.com.
If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada:
Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec, K1A 1H3
Toll-free: 1-800-282-1376 | www.priv.gc.ca
Questions About Privacy?
As a Canadian-focused platform, we pride ourselves on transparency. If you need a more technical deep-dive into our RLS isolation or cross-border safeguards, we are happy to assist.
General Inquiries
support@nivoaflow.comPrivacy Officer
privacy@nivoaflow.comSecurity Issues
security@nivoaflow.com