CVAM · Your information

Privacy notice

Last updated October 20, 2026

CVAM helps property owners and their authorized teams coordinate building operations. Depending on your role, CVAM may handle information about you and other people connected to a company, property, service request or listing. Only add information you are authorized to provide.

Who is responsible for your information?

CVAMCorp operates CVAM. For privacy questions, access or correction requests, account closure requests, or a concern about how information is handled, contact us at [email protected] or write to CVAMCorp, PO Box 992, Lanigan, SK, S0K 2M0.

Information CVAM handles

• Account and security: name, email address, account role, company access, sign-in and session records, email-verification status, security settings and notification preferences.
• Property operations: company and property details, units, authorized team relationships, maintenance reports, work orders, messages, contractor coordination, photos, and documents you choose to add, including private tenancy-agreement PDFs linked to selected units.
• Listings: the property or unit details an owner chooses to publish. Published listing information is visible to the public until the owner changes or removes it.
• Billing and representative records: invoices, subscription status, payment events, referral attribution, accepted agreements and commission or payout status. Stripe collects payment-card, identity and bank details through its own hosted services; CVAM does not ask you to send bank details in a CVAM message.
• Support and technical information: messages or requests you submit, browser/device details and security events used to operate, troubleshoot and protect CVAM.

When you create an account, CVAM records the version of the Terms of Use and Privacy Notice you accepted and the time of acceptance. CVAM does not collect an IP address or device fingerprint for this consent record.

Why it is used

CVAM uses information to create and secure accounts; provide role- and company-scoped access; coordinate maintenance, properties and listings; process subscriptions and eligible representative commissions; send requested service messages; respond to support and privacy requests; prevent abuse; and maintain reliable records for legal, accounting and dispute needs.

Who can see it

Access is limited by account role, company membership and assigned work. Owners choose which listing details and property-information sections to share. Public listing fields become public when an owner publishes a listing. Tenancy agreements are private files: only company owners and current tenants assigned to selected units may download them after person-identity verification is available. Every current tenant of a selected unit can access the same complete file. Owners can unlink a unit or delete the file; deleting it removes live tenant access. Deleted files may remain in protected backups until those copies expire; CVAM does not currently publish one fixed backup-expiry period. CVAM does not malware-scan agreements. A representative referral link records company-level attribution after an owner creates or chooses a company; it does not grant that representative access to the company’s private property records. Information is also processed by service providers that help CVAM host the service, route site traffic, deliver email, process payments or protect accounts.

Where information is processed

CVAM’s production application and database are hosted in AWS Canada Central. CVAM also uses providers such as Cloudflare for domain and network services and Stripe for payments and representative payouts. The optional Architect AI review sends a bounded set of aggregate platform counts to OpenAI for suggestions that require human review; the request is designed to exclude names, email addresses, account IDs, property addresses and individual payment records. AI contractor discovery and quote gathering are not currently available. Service providers may process information in other countries, where local laws may apply.

Optional owner AI reviews

Where enabled, a current company owner can authorize an individual AI review. CVAM sends OpenAI work counts, timing, priority, and whether assignments or commitments are recorded for up to 20 work orders needing attention. The request excludes names, email addresses, property addresses, free-form messages and repair descriptions, amounts, and internal record identifiers. Source links stay inside CVAM. The owner must confirm this sharing for each request. Choosing not to request a review leaves ordinary company tools available.

CVAM records the requesting account, company, consent version and time, provider usage, and saved review. Current company owners with company access can read saved reviews; cited source records are checked again before the review is displayed. Reviews can be incomplete or wrong and require human judgement. They do not contact people, change records, authorize spending or provide emergency response. These records follow the retention and account-deletion limitations below. This feature is not available until CVAM enables it.

Identity checks, payments and email

CVAM account email verification is separate from a person identity check. CVAM’s selected external person-verification flow and document fallback are not connected yet; CVAM does not currently offer an in-app identity-document check. Do not email identity documents, passwords, verification codes or bank details. Stripe collects identity and bank information directly when a representative completes payout setup. CVAM may send account-security, invitation and service emails when delivery is available. Optional introductions are sent only through an enabled feature with the required user direction.

Cookies and security

CVAM uses browser session mechanisms needed to sign in and protect account access. CVAM applies safeguards such as encrypted connections, account-security controls and role- and company-scoped permissions. No online service can guarantee that every security incident will be prevented.

Retention and account deletion

CVAM keeps information while it is needed to provide and secure the service, maintain authorized property and company history, meet legal obligations, or resolve payment and service disputes. CVAM does not publish a fixed deletion period for every record category. When account closure is reviewed, ongoing company or property responsibilities must be transferred first. CVAM’s direction is to erase personal account information and keep only records that must be retained by law.

The current account-closure feature records a request for manual review; it does not immediately close an account or erase records. See how to request account deletion for the available steps and current limitations.

Access, corrections and questions

You may ask CVAM what personal information it holds about you, request a correction, raise a privacy concern or start an account-closure review. Sign in and use Account settings where available, or contact us by email or mail using the details above. CVAM may need to verify that a request is yours before responding. Please do not include passwords, verification codes, bank information or identity documents in email.

Changes

CVAM will update this notice when its information practices change. The date at the top shows when this version was last revised.