What we keep, and why.

Contivo is operated by AshaVid, based in Ontario, Canada. We are responsible for the personal information described here under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Privacy questions and requests go to farjad@ashavid.ca. A person reads that inbox, not a bot.

Only what running the product requires:

• Account: your email address, your name if you give one, and your password. The password is stored only as a one-way hash; we cannot read it.
• Workspace: the website address you give us, what we read from that site's public pages, and what Contivo builds from it: brand memory, competitors, keywords, strategy, drafts and published content.
• Connected accounts: when you connect LinkedIn or X, an access token that lets Contivo post as you. It is stored encrypted.
• Your own site: if you connect it through the Site API, the key that lets Contivo publish there.
• Usage records: which AI actions ran and when, and a log of workspace activity, so we can show you what happened and keep costs in check.
• Error reports: when something breaks, a technical report of the failure. It is configured not to include your personal information.

Billing is not live yet. When it is, payments go through Stripe, and your card number goes to Stripe, never to us.

To run what you asked for: analyse your site and your market, write drafts, check them, and publish what you approve or what Autopilot is set to send.

To keep the service working and secure: fixing errors, stopping abuse, enforcing usage limits.

To write to you about your account: security notices, changes to these terms, billing once it exists. No marketing email unless you ask for it.

We do not sell your data, rent it, use it for advertising, or train models of our own on it.

Contivo runs on other companies' infrastructure. Each receives only what its part of the work needs:

• OpenAI and Google (Gemini): your site's content, your brand memory and your instructions, to analyse, plan and write. What they do with API data is governed by their API terms.
• DataForSEO: keywords and domain names, to fetch search volumes and results pages. No personal information.
• LinkedIn and X: the posts you publish, and only once you have connected the account.
• Vercel, Railway and Neon: hosting and the database, where everything above is stored.
• Sentry: error reports.
• Stripe: payments, once billing is live.

Some of these providers store or process data outside Canada, including in the United States. Data held there can be accessible to that country's authorities under its laws.

Contivo sets three cookies, all needed for the site to work:

• auth-token: keeps you signed in. It lasts seven days and cannot be read by scripts on the page.
• NEXT_LOCALE: remembers the language you chose.
• tz: your time zone, so scheduled posts go out at the hour you meant.

No advertising cookies, no analytics cookies, no third-party trackers. That is why there is no cookie banner.

As long as your account exists. Ask us to delete it and we delete your account, workspaces, content and connected-account tokens within 30 days.

Two exceptions. Payment records we are required by law to keep stay for as long as the law says. And posts already published on LinkedIn, X or your own site stay there: we can remove them from Contivo, but deleting them from those platforms is done on those platforms.

You can ask to see the personal information we hold about you, have it corrected, receive a copy of it, or have it deleted. Write to farjad@ashavid.ca. We answer within 30 days.

You can disconnect LinkedIn or X at any time from the Connections page. Contivo stops posting at once and deletes the token.

If you are not satisfied with how we handle a complaint, you can take it to the Office of the Privacy Commissioner of Canada.

Passwords are hashed, connected-account tokens are encrypted, and everything travels over HTTPS. Access to production data is limited to the people who run the service.

No system is perfectly secure. If a breach puts your information at real risk, we tell you and the Privacy Commissioner, as the law requires.

Contivo is a tool for businesses and is not meant for anyone under 16. We do not knowingly collect information from children.

When this page changes, the date at the top changes with it. If a change affects what we collect or who receives it, we email account holders before it takes effect.