Trust
Read the Privacy PolicyHow we handle what you trust us with.
Every privacy and security claim NuvioLife makes, collected in one place — nothing new, nothing embellished. The full legal detail lives in our Privacy Policy.
Privacy & jurisdiction
Canadian data, under Canadian rules.
NuvioLife is built in Canada and administers personal information under Canadian privacy law.
- PIPEDA
- Personal information is collected, used, and disclosed in line with the Personal Information Protection and Electronic Documents Act, with explicit informed consent documented at signup.
- Provincial privacy
- Practices are aligned with provincial privacy legislation across Canada.
- Quebec Law 25
- For Quebec residents, cross-border transfers are assessed and express consent is obtained where required, with transparency about where data is stored.
- Data residency
- We primarily store and process data in Canada, hosted in Canadian data centres. Where a service provider sits outside your province or outside Canada, transfers are protected by contractual, technical, and organizational safeguards.
Security measures
The measures, stated plainly.
Your data protected at the same level your bank protects your money.
- AES-256
- Data is encrypted with AES-256 at rest and in transit.
- 2FA
- Multi-factor authentication on platform accounts.
- RBAC
- Role-based access control with least-privilege permissions, so each role sees only what it needs.
- Audit trail
- A who, what, and when record on every action.
- SOC-pattern
- Controls.
- SSO
- SSO support is only available on the Business plan.
- Annual review
- Security and compliance practices are reviewed annually.
- 3rd-party audit
- Reviewed by a third party.
CRA & PHSP alignment
Administered the way the Income Tax Act expects.
Health Spending Accounts on NuvioLife are run as Private Health Services Plans under CRA rules.
- Section 118.2
- Wallets reimburse only eligible medical and dental expenses as defined by the Income Tax Act and CRA guidance.
- Written plan
- Plans are administered with a written plan, eligible-expense rules, appropriate tax treatment, and records.
- GST / PST / HST
- Sales tax handling is built in.
- CRA audits
- Disclosure is limited to non-diagnostic elements — name, amount, general category of service, and provider. Never diagnoses, clinical notes, or treatment details.
This website
What this site collects.
The marketing site you are reading collects far less than the platform. Here is all of it.
- Analytics
- Visits are measured with self-hosted Matomo analytics configured to set no cookies, alongside standard analytics and advertising tags described in our Privacy Policy.
- Forms
- Demo and contact forms collect only the details you type, so a person can follow up. Nothing is sent until you press submit.
- Consent & control
- You can manage cookies in your browser settings, update communication preferences at any time, and withdraw consent by emailing info@nuviolife.com.
Questions
Ask a person.
Privacy questions go to our Privacy Officer. Everything else, call us.
Phone
1-800-891-8093The binding detail lives in these documents: