Privacy Policy

• Full name and display name.
• Email address and, where provided, telephone number.
• Account credentials, including encrypted password and authentication tokens.
• Profile information and account preferences.
• Business name or entity name, where applicable.
• Government-issued identification, where required for identity verification purposes.

• Property addresses, descriptions, and listing details.
• Booking records including dates, guest names, reservation codes, and booking amounts.
• Platform listing URLs and associated account identifiers.
• Revenue data, occupancy records, and financial summaries associated with your properties.
• Case and dispute documentation, including evidence files, case narratives, and platform communications.
• Discretionary Support Program submissions and related supporting documentation.

• Subscription plan and billing history.
• Payment card type, last four digits, and expiry date (we do not store full card numbers — payment processing is handled by Stripe).
• Billing address and billing contact details.
• Transaction history and invoices.

We automatically collect certain technical and usage information when you access or use the Service:

• Internet Protocol (IP) address and approximate geographic location derived therefrom.
• Browser type, version, and language settings.
• Operating system and device type.
• Pages visited, features accessed, and time spent on each page.
• Links clicked and navigation patterns within the platform.
• Session identifiers and session duration.
• Referring URL and exit pages.
• Error logs, crash reports, and diagnostic data.
• Performance metrics and platform analytics.

• Messages and correspondence submitted through the platform's support system.
• Email communications with our support and operations teams.
• Feedback, surveys, and review submissions.
• Records of support tickets and their resolution.

• Résumé, curriculum vitae, and cover letter content.
• Employment history, education, and professional qualifications.
• References and reference contact information.
• Information provided during interviews or assessments.

When you connect your booking platform accounts (such as Airbnb, VRBO, or Booking.com) or property management systems to the Pruvra platform through authorized integrations, we may receive data from those platforms. This may include booking data, listing details, review information, and account status, subject to the permissions you grant and the data-sharing practices of those platforms.

• Creating, maintaining, and authenticating your account.
• Providing access to the features and functionality of the Service.
• Processing and tracking bookings, cases, and Discretionary Support requests.
• Facilitating property listing verification and management.
• Enabling integration with third-party platforms and services you authorize.

• Processing subscription payments and managing billing cycles.
• Generating and delivering invoices and receipts.
• Managing subscription changes, upgrades, and cancellations.
• Handling payment disputes and refunds where applicable.

• Verifying identity and authenticating account access.
• Detecting, investigating, and preventing fraudulent activity, including fraudulent DS Program submissions.
• Monitoring for unauthorized access, suspicious activity, and security threats.
• Enforcing our Terms and Conditions and acceptable use policies.
• Investigating and responding to security incidents.

• Responding to your inquiries, support requests, and complaints.
• Sending service-related notices, updates, and administrative communications.
• Notifying you of changes to the Service, terms, or policies.
• Communicating regarding your DS Program submissions.

• Analyzing usage patterns to understand how the Service is being used.
• Identifying bugs, performance issues, and areas for improvement.
• Developing and testing new features and functionalities.
• Conducting research and analysis to improve the platform.

• Complying with applicable laws, regulations, and legal obligations.
• Responding to lawful requests from government authorities or law enforcement.
• Establishing, exercising, or defending legal claims.
• Maintaining records required by applicable law.

With your express consent where required by law, we may send you information about new features, products, promotions, or services that may be of interest to you. You may withdraw your consent to marketing communications at any time as described in Section 12.

We engage trusted third-party service providers to perform functions necessary to operate and improve the Service. These providers are granted access only to the information necessary to perform their specific functions and are contractually bound to maintain the confidentiality and security of your information.

We may disclose your information where required by applicable law, court order, regulatory authority, or government demand. We will take reasonable steps to notify you of such disclosure unless prohibited by law or where doing so would be contrary to the public interest.

We may disclose your information where we believe, in good faith, that disclosure is necessary to: (a) protect the rights, property, or safety of Pruvra, its users, or the public; (b) investigate or prevent fraud or other illegal activity; or (c) enforce our Terms and Conditions.

In the event of a merger, acquisition, reorganization, sale of all or substantially all of Pruvra's assets, or similar corporate transaction, your personal information may be transferred to the acquiring or successor entity. We will provide notice of such a transfer and of any materially different privacy practices that may result.

We may share aggregated or anonymized information that cannot reasonably be used to identify you for industry analysis, research, marketing, or other business purposes.

Stripe, Inc. — Processes subscription payments and billing. Stripe maintains its own security and privacy practices. We recommend reviewing Stripe's privacy policy at stripe.com/privacy.

We use enterprise-grade cloud infrastructure providers to host the Pruvra platform. These providers store your data in secure data centres and are bound by strict confidentiality and security obligations.

We use email delivery service providers (including Resend) to send transactional and operational emails. These providers process email addresses and message metadata as necessary to deliver communications.

We use authentication service providers to manage secure sign-in, session management, and multi-factor authentication. These providers may process authentication credentials and session data.

We may use analytics tools to collect and analyze usage data, monitor platform performance, and identify technical issues. Analytics providers may process device identifiers, IP addresses, and usage data.

We may use customer support software to manage and respond to support tickets and communications. Support providers may process your contact information and the content of your support communications.

When you authorize Pruvra to connect with third-party booking platforms and property management systems (such as Airbnb, VRBO, Hospitable, or similar services), those platforms may receive information about your use of Pruvra and share booking and property data with us. Your relationship with those platforms is governed by their own terms and privacy policies.

The Pruvra platform uses cookies and similar tracking technologies to enhance functionality, maintain session state, and gather usage data. These technologies include:

• Session cookies: Temporary cookies that expire when you close your browser, used to maintain your login session and navigation state.
• Persistent cookies: Cookies that remain on your device for a specified period, used to remember your preferences and settings.
• Analytics cookies: Used to collect anonymized data about how users navigate and use the platform.
• Security cookies: Used to detect fraudulent activity, prevent unauthorized access, and maintain platform integrity.
• Performance monitoring cookies: Used to measure platform speed, identify errors, and improve user experience.

Most web browsers allow you to control cookies through browser settings. You can typically configure your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling certain cookies may impact the functionality of the Pruvra platform, particularly features that require authentication.

Some browsers transmit "Do Not Track" (DNT) signals. We currently do not alter our data collection practices in response to DNT signals. We will update this section if and when a universally accepted DNT standard is established and we modify our practices accordingly.

Account information and associated data is retained for the duration of your active account and for a reasonable period following account closure to allow for account recovery and to address any outstanding matters.

Billing records, invoices, and payment history are retained for a minimum of seven (7) years from the date of the transaction, in accordance with applicable Canadian tax and accounting laws.

Where we have reason to believe that personal information may be relevant to actual or potential litigation, regulatory inquiry, or legal obligation, we may retain that information for such extended period as is necessary to address those matters, regardless of any otherwise applicable retention period.

Records related to Discretionary Support Program submissions, including documentation, evidence files, case narratives, eligibility determinations, and correspondence, may be retained for a period of seven (7) years from the date of submission for fraud prevention, legal compliance, eligibility audit, and dispute resolution purposes. Submission of a DS request constitutes your consent to Pruvra retaining and processing all submitted materials for these purposes, regardless of the outcome of the request.

Logs related to security events, unauthorized access attempts, or fraud investigations may be retained for an extended period for security monitoring and legal compliance purposes.

Employment application data for unsuccessful candidates is retained for a period of up to two (2) years from the date of application, after which it is securely deleted, unless a longer retention period is required by applicable employment law.

Upon expiry of the applicable retention period, personal information is securely deleted or anonymized. Please note that information shared with third-party services may be subject to those services' own retention policies.

• Encryption of data in transit using Transport Layer Security (TLS) protocols.
• Encryption of sensitive data at rest using industry-standard encryption algorithms.
• Secure password hashing using modern, industry-accepted algorithms.
• Multi-factor authentication (MFA) options for account access.
• Role-based access controls limiting employee access to personal information on a need-to-know basis.
• Regular security vulnerability assessments and penetration testing.
• Intrusion detection and monitoring systems.
• Automated logging of access to sensitive data.

• Employee confidentiality obligations and privacy training.
• Data access restricted to personnel with a legitimate business need.
• Vendor security assessments for third-party service providers.
• Contractual security and confidentiality requirements imposed on service providers.
• Incident response procedures for addressing data breaches.

In the event of a data breach that poses a real risk of significant harm to affected individuals, Pruvra will notify the Office of the Privacy Commissioner of Canada and affected individuals in accordance with PIPEDA's breach of security safeguards requirements and applicable provincial law.

You have the right to request access to the personal information we hold about you, including information about how it has been or is being used. You can access most account information directly through your account settings. For a formal access request, please contact privacy@pruvra.com. We will respond to access requests within thirty (30) days of receipt.

You have the right to request that we correct any personal information we hold about you that is inaccurate, incomplete, or outdated. You can update most account information directly through your account settings. For information we are unable to correct through the platform, please contact us at privacy@pruvra.com.

You may request the deletion of your personal information by contacting privacy@pruvra.com. We will process deletion requests subject to applicable legal retention requirements and our legitimate business interests, such as maintaining fraud prevention records or fulfilling outstanding legal obligations. We will advise you of any information we are unable to delete and the reason for the exception.

Where our processing of your personal information is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal. Withdrawal may affect your ability to use certain features of the Service.

Where technically feasible and required by applicable law, you may request a copy of your personal information in a structured, commonly used, machine-readable format.

You may opt out of receiving marketing communications from Pruvra at any time by: (a) clicking the "unsubscribe" link included in any marketing email; or (b) contacting us at privacy@pruvra.com. Please note that opting out of marketing communications does not affect our ability to send you service-related or transactional communications.

To exercise any of the above rights, please contact our Privacy Officer at privacy@pruvra.com. We may require you to verify your identity before processing your request. We will respond to all verified requests within thirty (30) calendar days.

Questions, concerns, or requests regarding this Privacy Policy or our privacy practices should be directed to our Privacy Officer:

If you are not satisfied with our response to a privacy concern or believe that we have processed your personal information in violation of applicable law, you have the right to file a complaint with:

• The Office of the Privacy Commissioner of Canada (OPC): www.priv.gc.ca
• The Office of the Information and Privacy Commissioner for British Columbia (OIPC BC): www.oipc.bc.ca

We encourage you to contact us directly before filing a formal complaint so that we have an opportunity to address your concern.