Privacy policy

This site is operated by Covera Inc. ("Covera", "we", "us"). This policy covers covera.ca. It explains what we collect through this website, why, and what you can ask us to do about it.

Questions or requests: use our contact form.

Our Privacy Officer is accountable for personal information in our care, including anything we hand to a service provider. Reach them through our contact form. We answer privacy requests within 30 days.

Waitlist. Your email address, and which page you signed up from.

Contact form. Your name, email address, an optional company name, and your message.

Partner inquiries. Your name, work email and company; your role and company website if you give them; your partner type and estimated customer reach; where insurance could fit in your customer journey; your preferred integration if you pick one; and any extra context you add.

Technical information. When you submit a form we pair your IP address with the form you used, and also with the email address you entered, to limit how often one sender can submit. Our server holds these values briefly in memory, and we store SHA-256 hashes of them, not the raw address or email. Our hosting and error-reporting providers also generate standard server logs, and our hosting platform collects page-view analytics, described under cookies below.

We do not ask for and do not want sensitive details through these forms: no policy numbers, dates of birth, driver's licence numbers, payment details, or health information. Please do not send them.

We use waitlist emails only to tell you about the launch and related product updates, which is what you consent to when you sign up. Every message we send will include an unsubscribe link.

We use contact and partner inquiries to respond to you, evaluate whether a partnership makes sense, and keep a record of the conversation. We use technical information to keep the forms working and to defend them from abuse, and page-view analytics to see how many people visit and which pages they read.

We do not sell personal information, we do not share it for advertising, and we do not use these submissions to build profiles about you.

We use a small number of providers to run this site. They may only process information to provide their service to us:

• Supabase — the database that stores form submissions and rate-limiting records.
• Cloudflare — hosting, content delivery and bot protection. It sets a strictly necessary cookie (__cf_bm) to tell humans from bots.
• Lovable — the platform we build, host and deploy the site with. It adds page-view analytics to the site, processed for Lovable by Tinybird, and may receive error reports when a page breaks.
• Google Workspace — our email. It holds the messages we send and receive, including replies to inquiries and privacy requests.
• An email provider — used to send launch updates once we begin mailing.

These providers operate globally. Your personal information may be stored or processed outside Canada, including in the United States, where it can be accessed by courts, law enforcement and national security authorities under the laws of that country. Ask us and we will tell you what we know about where a given provider stores data.

Our hosting platform, Lovable, adds a page-analytics script to every page, powered by Tinybird. Each time you view a page it sends the page address, the page that sent you here, your browser's user-agent and language, an approximate location worked out from your device's time zone, and a random session ID. It may also send page-speed measurements. The session ID sits in a first-party cookie called session-id, which expires 30 minutes after your last page view. We do not add analytics of our own.

Cloudflare also sets its strictly necessary __cf_bm bot-protection cookie, described above. We use no advertising cookies and no cross-site tracking.

A tracker or content blocker may block the analytics script. Blocking cookies for this site stops its cookie, but page views are still counted unless the script is blocked too. The site works the same either way. If we ever add advertising or cross-site tracking, we will say so here and ask for your consent first.

Waitlist emails: until you unsubscribe or ask us to delete them, or after 24 months without any contact from you. Contact and partner inquiries: 24 months after the conversation ends, unless we need them for a longer legal or business record. Rate-limiting records: about a day. An automatic clean-up deletes older records whenever a later form is submitted, so a record can last longer if no one submits a form for a while. Page-view analytics: kept by Lovable and Tinybird under their own retention settings. Ask us and we will tell you what we know.

Submissions go over an encrypted connection to a database with row-level access rules, and access is limited to people who need it. No system is perfectly secure, so please keep sensitive details out of the forms.

You can unsubscribe from our emails with the link in any message. You can also ask us to give you a copy of what we hold about you, correct it, delete it, or withdraw a consent you gave. Withdrawing consent may mean we cannot keep you on the waitlist.

Send requests through our contact form. We may need to confirm your identity first, and some information must be kept where the law requires it.

If you are not satisfied with how we handle a request, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca. Quebec residents also have rights under Law 25, including access, correction, de-indexing and portability, and can complain to the Commission d'accès à l'information du Québec.

This site is meant for adults shopping for insurance. We do not knowingly collect personal information from anyone under 16. If you believe a child sent us information, contact us and we will delete it.

We will post any revised version here and update the effective date above. If a change materially affects how we use information you already gave us, we will tell you.