Privacy, with clarity.

This notice explains how Niva CRM handles information collected through the Nivacrm educational checklist and inquiry forms. It describes the current local version of the site, which has not been deployed to a public web host.

Who is responsible for your information

Niva CRM operates Nivacrm and is responsible for the information described in this notice.

Business contact address:
1307 Point St.
Baltimore, MD 21231
United States

Email: support@nivacrm.com. You can use this address for privacy questions and requests.

What we collect

• Checklist requests: your name, email address, optional phone number and country of residence.
• General inquiries: your name, email address and phone number if you choose to provide it, plus answers to any additional questions displayed on the inquiry form. On conditional forms, only applicable answers are retained; answers to hidden questions are discarded. Multi-step forms send answers only on final submission, not when you select Continue or Back. We retain the form name and a copy of each question with its answer.
• Request records: the consent text you agreed to, the time of consent and submission, and information needed to recognise an identical submission retry.
• Internal request management: request status, relevant internal notes, short internal tags, manual or rule-based inquiry qualification results, their mode, latest decision time and explanation, and a current inquiry priority score with its rule explanation when scoring is enabled, plus assignment to an authorised site administrator, and the administrator and time of the last change.
• Optional activity history: when enabled and separately accepted, the first observed visit, page views, selected button clicks, form starts and successful form submissions, with received times, page addresses, campaign tags and random visitor/session identifiers. If you submit a form while tracking is allowed, available history is linked to that saved inquiry. No keystrokes or typed field contents are recorded in activity history.
• Campaign information: the landing-page address, referring-page address when available, and campaign tags supplied by your browser. We remove unrelated URL query parameters and fragments from stored page addresses.

Phone numbers are optional. Checklist requests do not collect financial-account information or identity documents. You can read the checklist without submitting any details.

Why we use it

We use internal status, assignment, tags, manual qualification and relevant notes to organise requests and inquiries. When enabled, transparent point rules use relevant submitted choices and separately consented activity to prioritise follow-ups. When separately enabled by the operator, configurable rules use scores and required conditions to route inquiries to Qualified, Needs follow-up or Needs review. Missing required information routes to review; Not a fit is assigned manually. Administrator overrides remain protected. These scores and routing results do not determine financial eligibility or investment suitability. These tools do not subscribe you to marketing, contact you automatically or share information with brokers.

We use checklist-request information, with your consent, to fulfil and record the request and review which campaigns generated requests. The checklist opens on the site after submission; requesting it does not promise email delivery.

We use general inquiry details, with the consent you provide on that form, to respond to your inquiry. For abuse prevention, we rely on our legitimate interest in protecting the site against spam and repeated automated requests.

Name, email and country are required only if you choose to submit a checklist request. Providing these details is not a statutory requirement or a condition of reading the resource.

Marketing, brokers and automated decisions

Inquiry scoring and human review

Scoring and automatic inquiry qualification are currently disabled on this local site. If enabled, administrator-configured rules can award points for relevant submitted choices, request type, internal tags and separately consented activity. For example, asking to speak with us may receive a higher priority than requesting general research information. Each matched rule contributes points once; missing activity does not subtract points.

Automatic qualification compares the score and any required conditions with administrator-set thresholds. Qualified means ready for an inquiry conversation; Needs follow-up means further contact may be appropriate; Needs review means an administrator should check the information. These labels concern internal inquiry handling only. Missing required information goes to review, and the system does not automatically assign Not a fit. An administrator can review or override a result, and protected manual overrides are not replaced by automatic processing.

You can ask us to explain or review an inquiry score or qualification result, or correct the information used, by contacting support@nivacrm.com. Current scores may change when rules change or retained activity expires. A saved qualification result may reflect an earlier evaluation until it is refreshed.

Marketing and brokerage limits

A checklist request does not subscribe you to promotional emails or authorise sharing your information with brokers. Niva CRM currently has no brokerage partners for this offer and does not sell or send checklist requests to brokers.

We do not use these requests to make automated decisions about brokerage-account eligibility or investment suitability. Automated spam controls may reject suspicious requests or temporarily limit repeated attempts.

Where information is stored and who can access it

Form records are stored in this site’s database on the operator-controlled computer running the local site. Access to the lead administration screens is restricted to authorised site administrators.

Administrator email notifications are currently disabled. If enabled later, they contain a protected review link rather than the submitted personal details. Email providers process messages sent through their services, including messages you choose to send to our support address.

We may disclose information where a valid legal requirement applies. We will update this notice before introducing public hosting, new data recipients, advertising integrations or broker-sharing arrangements that change the practices described here.

How long we keep it

Checklist requests: 90 days from submission. At that age, the complete request record, including contact details, consent, campaign information and internal management notes, is deleted during the next daily cleanup run.

The scheduled cleanup needs an active site and working scheduling. Pausing the site or deactivating the plugin can delay deletion. The operator must monitor cleanup and run overdue deletion when the site resumes.

Optional activity history: still-anonymous history expires 30 days after the visitor identifier is created. Linked activity and its first-touch/submission-touch snapshots expire 90 days after submission, or earlier if the associated lead is erased. Cleanup runs on the daily site schedule. Activity expiry does not erase a general inquiry record.

Qualification decision metadata, including the latest explanation and score at decision, stays with its lead record. It is a derived snapshot, distinct from the activity rows; it may reflect earlier evidence until the next successful evaluation and can remain while automation is disabled. Lead erasure also removes this decision metadata.

General inquiry records are reviewed and removed manually; the checklist’s automatic 90-day expiry does not apply to them. You can request their deletion at the contact address above.

Copies in backups and infrastructure logs are separate from form records and are not removed by the checklist cleanup. Any backup or log retention must be managed separately. Overdue checklist records must be removed if an older database is restored.

Cookies and abuse prevention

Optional activity tracking is off by default and requires a separate opt-in or permission from the configured consent manager. Accepting form consent alone does not turn it on. When allowed, browser local storage keeps the random visitor token and a tracking preference for up to 30 days; session storage holds a random session identifier, renewed after 30 minutes of inactivity. The built-in privacy controls let you stop tracking, clear these identifiers and request deletion of still-anonymous history. Previously linked history remains subject to the retention and privacy-request process above. A saved decline preference may be retained to remember your choice. Global Privacy Control prevents optional collection.

The Nivacrm forms do not set marketing or attribution cookies and do not install Google Ads or Meta tracking pixels. Campaign tags are read from the page address when the form loads. WordPress and site-functionality plugins may use necessary cookies for functions such as administrator sign-in or caching.

Rate limiting uses the direct network address to calculate a protected identifier. For successful form submissions, we also store the validated IP address supplied by our web server with the lead record for abuse prevention and submission review. Authorized administrators can view it and include it in lead CSV downloads. It is included in personal-data exports and is removed when its associated lead is deleted or expires. The rate-limit table stores only the protected identifier. IP addresses can identify a shared connection, VPN or proxy and do not establish a person’s identity or precise location. Expired rate-limit entries are removed through scheduled cleanup. Web-server or email-service logs may operate separately.

Your choices and privacy requests

You can read the checklist without using the form. You can withdraw consent or request access, correction or deletion by emailing support@nivacrm.com. Please identify the email address used for your request and explain what you would like us to do.

We may need proportionate information to confirm that a request relates to you before releasing or changing records. We will respond within the time limits that apply under the relevant law. Withdrawal does not affect processing carried out lawfully before withdrawal.

Depending on the law that applies, you may also have rights to restrict or object to processing, receive a portable copy of your information, or complain to the relevant privacy regulator. Contact us if you need help with a request. You do not have to wait for our response before contacting a regulator.

Questions and changes

For questions, use our contact page or email support@nivacrm.com. We will update the date and this notice when our practices change.