clovitrade
This Privacy Policy is issued by clovitrade. It explains how we collect, use, share, and protect your personal information. Contact us at legal@clovitrade.com. We may update this Policy and will notify you of material changes; substantial changes may require renewed consent. Retention periods for each data category are detailed in our Data Handling and Deletion Schedule.
We collect the following categories of personal data depending on your interactions with our services. Retention periods for each category are set out in our Data Handling and Deletion Schedule.
| Category | Examples | Purpose | Lawful Basis |
|---|---|---|---|
| Contact & Identity Information | Name, business, email, phone, address | Account creation, communication, support | Contract, Legitimate Interests, Consent |
| Account & Profile Data | Username, hashed password, company, user ID | Account management, security, personalization | Contract, Legitimate Interests |
| Billing & Payment Data | Billing address, payment method (last 4), transactions, tax/VAT ID | Payments, invoicing, compliance | Contract, Legal Obligation |
| Usage & Activity Data | Logins, IP, device/browser info, features used | Analytics, security, troubleshooting | Legitimate Interests, Consent (analytics) |
| Uploaded Content | Files, documents, recordings, business data, AI outputs | Service delivery, storage, AI features | Contract, Legitimate Interests, Consent |
| Cookies, Tracking & Analytics | Cookies, device IDs, geolocation, analytics | Site functionality, analytics, personalization | Consent (non-essential), Legitimate Interests |
| Support & Communications | Support tickets, chat transcripts, email correspondence | Support delivery, dispute resolution, service quality | Contract, Legitimate Interests |
| Marketing & Preferences | Email opt-in/out, campaign interactions, subscription preferences | Marketing (with consent), preference management | Consent, Legitimate Interests |
| AI-Generated Outputs | Generated text, audio narrations, images, video, reports | Service delivery, output history | Contract, Legitimate Interests |
| Third-Party Integration Data | Data exchanged with connected services (CRMs, APIs, webhooks) | Workflow automation, integrations | Contract, Legitimate Interests, Consent |
| Legal & Compliance Data | Consent records, data subject requests, audit logs, deletion records | Compliance, legal defense, regulatory audits | Legal Obligation, Legitimate Interests |
We process your data only for the purposes described and in accordance with applicable law.
Your data may be transferred to and processed in countries outside your country of residence. For EU/EEA/UK users, transfers outside the EEA rely on Standard Contractual Clauses (SCCs) or an adequacy decision. For details on individual provider transfer mechanisms, see our Data Handling and Deletion Schedule.
We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These include encryption at rest and in transit, access controls, regular security reviews, and contractual security requirements for all sub-processors. For deletion methods and audit procedures, see our Data Handling and Deletion Schedule.
We retain personal data only as long as necessary for the purposes described or as required by law. Full retention periods for each data category are detailed in our Data Handling and Deletion Schedule. Upon expiry of the retention period or upon a verified deletion request, data is securely deleted or irreversibly anonymized using industry-standard methods (multi-pass overwriting, cryptographic erasure, or secure erase commands). Deletion and anonymization actions are logged and periodically audited. For data processed by third-party providers, we coordinate deletion and obtain confirmation from those providers. Contact legal@clovitrade.com to submit a deletion request.
We share personal data only with the trusted service providers listed below, under contractual and security safeguards (DPAs, SCCs where required). We do not sell personal data.
| Category | Provider(s) | Data Shared | Security Measures |
|---|---|---|---|
| Cloud Hosting / CDN | AWS S3 / CloudFront, Cloudflare | Stored user data, delivery | Encryption, DPA |
| AI / Generation | Anthropic, OpenAI, Google Gemini | Prompted content (as needed) | No-train terms, DPA |
| Text-to-Speech | ElevenLabs | Narration text / voice config | Voice/likeness terms, DPA |
| Payments | Stripe | Billing info, transactions | PCI DSS, DPA |
| Email / Messaging | EmailIt | Email, name, message content | Encryption, DPA |
| Media / Video | Gumlet | Uploaded media | DPA |
Our services are not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact legal@clovitrade.com for immediate deletion.
We use essential, functional and (with consent) analytics cookies. See our Cookie Policy for full details. Non-essential cookies require your consent and can be managed via our consent banner or your browser.
Depending on your jurisdiction you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority. To exercise any right, contact legal@clovitrade.com. We will verify your identity and respond within the legally required timeframe (30 days for GDPR; 45 days for CCPA).
For privacy inquiries, data subject requests, or to reach our Data Protection contact: legal@clovitrade.com.