Privacy Policy

Who we are

Kontrava Ltd is a company registered in Alberta, Canada, with its office in Calgary. We build and operate software for our own business and for our clients. You can reach us at hello@kontrava.com.

What this policy covers

This policy covers two things. The first is this website. The second is the software we build and run, including the tools we use internally and the applications we deliver to clients. Where a client has signed a separate data processing agreement with us, that agreement governs the client's data and this page describes our general practice.

Data we collect on this website

This website loads no analytics, no chat widget and no tracking script, and it sets no cookies. It is hosted by Netlify, whose servers keep ordinary access logs, including the address a request came from, under Netlify's own retention policy.

If you email us, we keep what you send so we can answer and follow up.

Data in the software we operate

Our software connects to systems that businesses already use, such as accounting platforms, document stores and issue trackers. A connection is only made after the account owner authorizes it, and the owner can revoke it at any time from the provider's own settings.

Our QuickBooks Online integration is private. It is used by Kontrava Ltd on Kontrava Ltd's own accounting records, and it is not offered to anyone else. It reads and writes those records to run our own bookkeeping, reporting and statutory filings. We do not sell that data. We do not use it to train models. We do not disclose it to third parties except to the service providers we need to run the service, and where the law requires it.

Where we connect other systems on behalf of a client, the same rules apply to the client's data, alongside whatever their signed agreement with us says.

Disconnecting and deletion

Revoking a connection from the provider's settings stops all future access immediately. For data we already hold, email hello@kontrava.com and we normally delete it within 30 days. Two things survive that request. Records that accounting and tax law requires us to keep stay until the statutory period expires. Data that a service you are still paying us for depends on stays until that particular service ends, and only that data. We tell you which of your data falls into either case and when it clears, rather than quietly keeping it.

Storage and access

Connections to our systems and to the services we integrate with are encrypted in transit. The managed services we store data in encrypt it at rest. Access is limited to the people at Kontrava who need it for the work, and is removed when they no longer do.

How long we keep it

Left alone, we keep client data for as long as the engagement runs, and for 90 days after it ends so that you can still ask for it back. After that we keep only what accounting and tax law requires us to keep. A deletion request overrides all of this, on the terms set out under Disconnecting and deletion. Correspondence is kept while it is useful to the relationship.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email hello@kontrava.com and we normally answer within 30 days. If a request is complex we may take the extension the law allows, and we tell you before the 30 days are up. If your data reached us through a client of ours, we will point you to that client, who decides what happens to it.

Changes

When this policy changes we update the date at the top of the page. Material changes that affect an existing client are also communicated directly.