This policy applies to visitors and registered users of Cuverly services, including anyone who creates an account, purchases services, uploads content, or otherwise interacts with our platform.

Our Usage Policy states that materials are for educational, informational, and personal use and that you are responsible for how you use generated content. That responsibility extends to any personal or third-party data you choose to include in prompts, uploads, or documents. You should not submit sensitive data unless you are comfortable with the processing described here.

We collect information necessary to provide, secure, and improve our services, including:

Account & identity

• Contact details (such as name and email address) when you register or communicate with us
• Credentials and profile information associated with your account

Transactions & billing

• Payment-related information as processed by our payment providers (we do not store full card details on our own servers where a provider handles them)

Service usage & content

• Inputs you provide to generate documents (for example text, fields, and files you submit), outputs produced for you, and settings related to your use of the platform
• Technical and operational logs (such as IP address, device/browser type, timestamps, and diagnostic data) for security and reliability

Support & compliance

• Messages you send to us (including email and in-product support)
• Records we maintain to meet legal, tax, and regulatory obligations where applicable

We aim to collect only what we need for the purposes set out in this policy.

We use personal data to:

• Provide and operate our services (including account management, document generation, delivery, and customer support)
• Process payments and fulfil orders
• Maintain security, prevent fraud and abuse, and enforce our Terms & Conditions and Usage Policy
• Improve our products (for example troubleshooting, quality, and aggregated analytics where we can do so without unnecessary identification)
• Communicate with you about service-related matters, and—where permitted—updates or policies
• Comply with law and respond to lawful requests

Automated processing & AI: Our services use automated systems (including AI) to generate content from your inputs. Processing is performed to deliver the service you request, not for automated decision-making with legal or similarly significant effects in the GDPR sense unless we expressly inform you otherwise.

Where UK / EEA data protection law applies, we rely on one or more of the following:

• Contract: processing needed to provide our services and perform our agreement with you
• Legitimate interests: for example securing our platform, improving reliability, and limited analysis—balanced against your rights
• Consent: where we ask for it (you may withdraw consent where processing is consent-based)
• Legal obligation: where we must retain or disclose information to comply with the law

For sensitive categories of data, we generally do not ask you to provide them. If you voluntarily include special-category information in uploads or prompts, you should ensure you have a lawful basis to do so; we will process it only as needed to provide the service or as required by law.

We do not sell your personal information. We may share data with:

• Service providers who assist us (for example hosting, email delivery, payments, analytics, or AI infrastructure), under confidentiality and processing terms
• Professional advisers where reasonably required
• Authorities when we believe disclosure is required by law or necessary to protect rights, safety, or security

Where providers process data on our behalf, we expect them to use it only for the purposes we specify and to implement appropriate safeguards.

We retain personal data only as long as necessary for the purposes in this policy, including:

• For as long as your account is active and for a reasonable period afterwards (for example to resolve disputes or meet legal retention)
• Billing and tax records for periods required by applicable law
• Backups and logs for shorter security and operational cycles where appropriate

You may request deletion of your personal data subject to legal exceptions. Account or data-deletion flows offered in the product (where available) should be used in addition to contacting us if you need confirmation.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. These include controls appropriate to the nature of our services and the risks involved.

No method of transmission or storage is completely secure; we encourage you to use strong passwords, protect your credentials, and notify us promptly of any suspected compromise.

Depending on your location, you may have rights including:

• Access to your personal data
• Rectification of inaccurate data
• Erasure ("right to be forgotten") where applicable
• Restriction or objection to certain processing
• Data portability where technically feasible
• Withdrawal of consent where we rely on consent

You may exercise these rights by contacting info@cuverly.io. For data-protection matters, please include "Data Protection" in the subject line so we can route your request appropriately.

If you are in the UK / EEA, you may also lodge a complaint with your local supervisory authority.

We may use suppliers or infrastructure in countries outside your own. Where personal data is transferred from the UK / EEA (or similar jurisdictions) to countries not deemed to provide an adequate level of protection, we will use appropriate safeguards (such as standard contractual clauses or other mechanisms recognised by applicable law) where required.

We may use cookies, local storage, and similar technologies that are strictly necessary for the operation of our sites (for example security and session management) and, where applicable, for preferences or analytics.

You can control many cookies through your browser settings. Blocking certain cookies may affect how parts of the service function.

Our services are not directed at children under the age at which parental consent is required in their jurisdiction (often 13, 16, or 18 depending on region). We do not knowingly collect personal information from children. If you believe we have done so, please contact us and we will take appropriate steps.

We may update this Privacy Policy to reflect changes in our practices, services, or legal requirements. We will post the revised policy on this page and update the "Last updated" date. Continued use of the services after changes become effective may constitute acknowledgement of the update where permitted by law.

For any questions about this Privacy Policy or our data practices:

Email: info@cuverly.io

Company: Cuverly Ai Ltd (United Kingdom)

For data protection inquiries, please add "Data Protection" to your subject line so we can address your request promptly.