1. Overview
Claivi Technologies Inc. ("Claivi", "we", "our") believes in minimal, transparent cookie usage. This policy explains what cookies and similar technologies we use, why we use them, and how you can control them.
We do not use cookies for advertising, cross-site tracking, social media pixels, retargeting, session replay, or behavioral profiling. We do not sell or share cookie data with third parties.
For information about how we handle personal data generally, see our Privacy Policy.
2. Strictly necessary cookies
These cookies are essential for the Claivi platform to function. They cannot be disabled. They are set in response to actions you take, such as signing in or setting privacy preferences.
- Session authentication: Required to keep you signed in to your workspace. Without this cookie, you would need to re-authenticate on every page load.
- CSRF protection: Prevents cross-site request forgery attacks on state-changing operations.
These cookies do not require prior consent under PIPEDA, GDPR, or CCPA, as they are strictly necessary for service delivery. However, we disclose them here for full transparency.
3. Preference cookies
Preference cookies remember your choices to improve your experience. These are not strictly necessary but enhance usability.
- Language preference (NEXT_LOCALE): Remembers your chosen display language. Expires after 1 year.
- UI theme (claivi:theme): Remembers whether you prefer dark or light mode. Stored in localStorage (not a cookie).
- Layout preference (claivi:sidebar-collapsed): Remembers whether your dashboard sidebar is expanded or collapsed. Stored in localStorage (not a cookie).
Under PIPEDA and Quebec Law 25, we require your consent before setting preference cookies. Under GDPR, these are classified as "preference" cookies requiring opt-in consent, unless they are strictly necessary. Our cookie consent banner allows you to accept or decline preference cookies.
4. Analytics cookies
Claivi currently does not use analytics cookies. We do not use Google Analytics, Mixpanel, Amplitude, Hotjar, FullStory, or any other third-party analytics tool that sets cookies or processes personal data.
Our product analytics are based on aggregated, anonymized server-side counters that do not use cookies and do not identify individual users. If we ever introduce analytics cookies in the future, we will: (a) notify you by email at least 30 days in advance; (b) update this policy; (c) require your explicit opt-in consent before setting any analytics cookie.
5. Third-party cookies
Claivi does not set third-party cookies. The following third-party services may set their own cookies when you interact with them through Claivi:
| Service | Interaction | Their cookies |
|---|---|---|
| Stripe | Payment form embedded in dashboard billing page | Stripe may set cookies for fraud detection and session management. Subject to Stripe Privacy Policy. |
| Meta (Instagram) | OAuth flow when connecting Instagram channel | Meta may set cookies during the OAuth redirect. Subject to Meta Privacy Policy. |
| Google / GitHub | OAuth sign-in | These providers set cookies during authentication. Subject to their respective privacy policies. |
These third-party cookies are set only when you actively choose to interact with these services (e.g., by clicking "Connect Instagram" or "Sign in with Google"). We do not control these cookies and recommend reviewing the relevant third party's privacy and cookie policies.
6. Complete cookie table
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| authjs.session-token | Claivi | Authentication session (NextAuth JWT) | 30 days, refreshed on use | Strictly necessary |
| authjs.csrf-token | Claivi | CSRF protection token | Session | Strictly necessary |
| claivi_session_present | Claivi | Non-HttpOnly indicator for client-side auth detection | 30 days | Strictly necessary |
| NEXT_LOCALE | Claivi | Language preference | 1 year | Preference (requires consent) |
| claivi:theme | Claivi | Dark/light mode preference (localStorage) | Persistent | Preference (not a cookie) |
| claivi:sidebar-collapsed | Claivi | Dashboard sidebar state (localStorage) | Persistent | Preference (not a cookie) |
| __stripe_* | Stripe | Fraud detection, session management during payment | Varies (Stripe-controlled) | Third party (set on interaction) |
7. Consent & withdrawal
We respect your right to control cookies. Here is how consent works on Claivi:
- Cookie consent banner: Upon your first visit to any page that sets non-essential cookies, you will see a cookie consent banner. You may: (a) accept all cookies; (b) customize preferences; (c) reject all non-essential cookies. Your choice is stored for 6 months.
- Granular control: You may change your cookie preferences at any time by clicking the "Cookie Preferences" link in the footer of any page.
- Withdrawal: You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.
- Browser controls: All modern browsers allow you to view, block, or delete cookies through browser settings. Instructions are available at: aboutcookies.org. Note that blocking strictly necessary cookies will prevent you from signing in to the Claivi dashboard.
- Public pages: Marketing pages (including this policy) and legal pages are fully accessible without accepting any cookies. Only strictly necessary session cookies are set when you sign in.
8. CCPA: Your California privacy rights
Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, California residents have additional rights regarding their personal information:
- Right to know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you in the preceding 12 months.
- Right to delete: You have the right to request deletion of personal information we have collected about you, subject to certain exceptions.
- Right to opt out of sale/sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising. Therefore, there is no sale or sharing to opt out of.
- Right to non-discrimination: We will not discriminate against you for exercising any CCPA rights.
- Sensitive personal information: We do not collect or process sensitive personal information (as defined by CCPA/CPRA) for purposes other than those specified in CCPA § 7027(m) — specifically, to provide the service you requested.
To exercise your CCPA rights, email privacy@claivi.com. We will verify your identity within 10 business days and respond within 45 days (extendable by 45 additional days with notice).
9. Do Not Track
Claivi respects the "Do Not Track" (DNT) signal. If your browser sends a DNT signal, we will not set any preference, analytics, or third-party cookies. The service will continue to function with only strictly necessary cookies.
We do not engage in cross-site tracking, so DNT is compatible with our existing data practices.
10. Changes to this policy
We may update this Cookie Policy as our services evolve. If we add new cookies or change the categories of cookies we use, we will:
- Notify workspace owners by email at least 30 days in advance.
- Update the date and content of this policy.
- Require fresh cookie consent for any new categories of cookies.
We will never add advertising, tracking, or marketing cookies without your explicit prior consent.
11. Contact
Claivi Technologies Inc.
200 Bay Street, Toronto, ON M5J 2J2, Canada
Privacy & cookie inquiries: privacy@claivi.com
To change your cookie preferences, click "Cookie Preferences" in the footer, or clear your browser cookies to reset the consent banner.