nivas privacy policy, in plain English

nivas is a Chrome extension for hunting rentals on Kijiji, and nivas.aiagentslive.com is its website. Both are run by AI Agents Live from Toronto, Ontario, Canada (we, us and our). We decide why and how the personal data described on this page is used, which makes us the controller of that data.

nivas is an independent project. It is not affiliated with, endorsed by or sponsored by Kijiji or Google.

The free extension saves what you choose, such as listings, statuses, notes, photo comments and your saved places, in your browser's local storage on your own computer. It reads the Kijiji pages you open, inside your browser, to fill in what you save.

Until you turn sharing on, the extension does not send any of this to us or to anyone else, and it does not need an account. Uninstalling the extension or clearing its data deletes it. The export and import in the extension are yours to use, and the file goes only where you save it.

An account is needed only for sharing. We keep your email address and the language you use. You sign in with a six-digit code that we email you. The code works once and stops working after 10 minutes. When you ask for a code, we also keep the IP address of that request with it, only to limit abuse such as repeated requests. It is deleted along with old codes.

The extension keeps a sign-in token. We store only a hashed copy of it, so we cannot read it back. Signing out, or being removed from a plan, makes the token stop working.

When you turn sharing on, the extension sends the listings you saved to our server, with each one's status and history, the notes you wrote and the comments you pinned on photos. Photos themselves are not sent, only the links to them. The listing details we keep are the ones nivas shows you, such as the title, price, address, the poster's name and the description.

Everyone on your plan reads everything in it. Each member also reads the others' notes and photo comments, shown with a short name, which is the part of the email address before the @. Members never see each other's full email address. Only you can change your own notes and comments.

• The person who owns the plan can invite people by link or by email, and can remove a member.
• Removing a member, or leaving, stops that person's sync. Whatever the extension already saved in their own browser stays in their browser.

Plans and extra seats are paid through Stripe Checkout. We never see or store your card number. A purchase only starts after Stripe confirms the payment to us.

We keep a record for each payment: what was bought, the amount in Canadian dollars, its status and the Stripe checkout reference. We keep these records as long as accounting and tax rules require.

We send a sign-in code when you ask for one, and an invitation when a plan owner types your address to invite you. We send no newsletters and no marketing from nivas. Emails go out through Brevo.

The nivas website uses a cookie that keeps you signed in on this site, and a cookie that remembers the language you chose. The website sets no analytics cookies and no advertising cookies, and it does not record your visits.

• You can block or delete these cookies in your browser settings. If you block the sign-in cookie, you cannot sign in to the plan page.

We do not sell your personal data. We share it only with the providers listed on this page, who process data for us under their own privacy and security commitments, with the members of your plan as described above, and with authorities when the law requires it.

• Some of these providers store data outside Canada, such as in the United States or the European Union. When we send them personal data, we rely on their own safeguards for transfers.

Your hunt is kept on our server while your plan is active. When a plan ends, because it ran out or its owner left, we keep its data for 90 days so that renewing restores sharing, and then we delete it for good. Your local copy in the browser is never touched.

Sign-in codes are deleted or become useless after 10 minutes. Payment records are kept as long as the law asks us to. If you ask us to delete your account, we delete it and the data tied to it, except what we must keep by law.

Every connection to nivas.aiagentslive.com is encrypted. Sign-in tokens are stored hashed, and only the people who run nivas can reach the server. No system is perfectly safe, so if a problem affects your data we will tell you and the authorities where the law asks us to.

You can ask us for a copy of your personal data, to correct it, or to delete it, and you can object to how we use it. Depending on where you live, such as Canada, the European Union or the United Kingdom, the law gives you these rights. Write to the address at the bottom of this page. We answer within 30 days.

You can also leave a plan or stop sharing from the extension at any time. If you are unhappy with an answer, you can complain to your local privacy authority, such as the Office of the Privacy Commissioner of Canada.

Accounts are for people who are at least 16 years old. We do not knowingly collect data from anyone younger. If you think a child gave us their data, write to us and we will delete it.

We may update this policy from time to time. The date at the top of this page shows when it last changed. When a change is significant, we will tell signed-in people by email before it starts.