Privacy Policy

Last updated: January 4, 2026

Introduction

KOLIVO™ Technologies Inc. ("KOLIVO™", "we", "us", or "our") is committed to protecting the privacy and personal information of individuals who use our platforms and services. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25).

Scope of This Policy

This Privacy Policy applies to all personal information collected, used, or disclosed by KOLIVO™ Technologies Inc. through our websites (kolivo.ca, corporate.kolivo.ca), our platforms (Hub, Nest, Gate, etc.), and our identity service (Halo ID).

Person Responsible for Personal Information Protection

In accordance with Quebec Law 25, KOLIVO™ has designated a person responsible for the protection of personal information. For any questions, concerns, or requests regarding your personal information, please contact:

Privacy Officer

KOLIVO™ Technologies Inc.

privacy@kolivo.ca

Montréal, Québec, Canada

Personal Information We Collect

We collect personal information that you provide directly to us, as well as information collected automatically when you use our services.

Identity Information

  • Full name
  • Email address
  • Phone number
  • Date of birth
  • Profile photograph
  • Halo ID credentials

Account Information

  • Username and password
  • Account preferences
  • Communication preferences
  • Language preferences

Financial Information

  • Payment method details (processed by secure third-party providers)
  • Transaction history
  • Shared expense records

Usage Information

  • Platform activity logs
  • Feature usage patterns
  • Device information
  • IP address
  • Browser type and version

Communication Information

  • Messages sent through our platforms
  • Support requests
  • Feedback and surveys

How We Use Your Personal Information

We use your personal information for the following purposes:

Service Delivery

To provide, maintain, and improve our platforms and services, including user authentication through Halo ID.

Account Management

To create and manage your account, process transactions, and provide customer support.

Communication

To send you service-related communications, updates, and promotional materials (with your consent).

Security

To protect the security and integrity of our platforms, detect and prevent fraud, and enforce our terms of service.

Legal Compliance

To comply with applicable laws, regulations, and legal processes.

Analytics and Improvement

To analyze usage patterns and improve our services, with anonymized or aggregated data where possible.

Consent

We obtain your consent before collecting, using, or disclosing your personal information, except where permitted or required by law. You may withdraw your consent at any time by contacting our Privacy Officer. Withdrawal of consent may affect your ability to use certain features of our services.

In some cases, consent may be implied based on your actions, such as when you provide information to complete a transaction or when you continue to use our services after being notified of changes to this policy.

Disclosure of Personal Information

We may disclose your personal information to:

Service Providers

Third-party companies that provide services on our behalf, such as payment processing, data hosting, and customer support. These providers are contractually bound to protect your information.

Business Partners

Partners who collaborate with us to provide integrated services, subject to your consent where required.

Legal Authorities

Government agencies, law enforcement, or other parties when required by law or to protect our legal rights.

Business Transfers

In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell your personal information to third parties for marketing purposes.

Retention of Personal Information

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When personal information is no longer needed, we securely destroy or anonymize it.

Security Measures

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include 256-bit encryption, multi-factor authentication, regular security audits, access controls, and secure data centers located in Canada.

Your Rights

Under Canadian privacy law and Quebec Law 25, you have the following rights:

Right of Access

You may request access to your personal information held by us.

Right of Rectification

You may request correction of inaccurate or incomplete personal information.

Right of Deletion

You may request deletion of your personal information, subject to legal retention requirements.

Right to Data Portability

You may request a copy of your personal information in a structured, commonly used format.

Right to Withdraw Consent

You may withdraw your consent to the processing of your personal information at any time.

Right to File a Complaint

You may file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, please contact our Privacy Officer at privacy@kolivo.ca. We will respond to your request within 30 days.

Privacy Breach Notification

In accordance with Law 25 and PIPEDA, we will notify you and the relevant authorities of any privacy breach that presents a real risk of significant harm. Notification will be provided as soon as feasible after becoming aware of the breach.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information.

International Transfers

Your personal information is primarily stored and processed in Canada. If we transfer your information outside of Canada, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable privacy laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of our services after such changes constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact our Privacy Officer.