This policy applies to visitors and registered users of Cuverly services, including anyone who creates an account, purchases services, uploads content, or otherwise interacts with our platform.

Our Usage Policy states that materials are for educational, informational, and personal use and that you are responsible for how you use generated content. That responsibility extends to any personal or third-party data you choose to include in prompts, uploads, or documents. You should not submit sensitive data unless you are comfortable with the processing described here.

We collect only the information we need, and each category below is tied to a specific purpose. Where a purpose is optional, we ask you separately and you can decline without losing access to the service.

We do not ask you for special-category data (such as health or biometric information). If you include it voluntarily in an upload or prompt, we process it only as needed to deliver the service.

We never require you to consent to marketing in order to buy from us or hold an account.

We use personal data to:

• Provide and operate our services (including account management, document generation, delivery, and customer support)
• Process payments and fulfil orders
• Maintain security, prevent fraud and abuse, and enforce our Terms & Conditions and Usage Policy
• Improve our products (for example troubleshooting, quality, and aggregated analytics where we can do so without unnecessary identification)
• Communicate with you about service-related matters, and—where permitted—updates or policies
• Comply with law and respond to lawful requests

Automated processing & AI: Our services use automated systems (including AI) to generate content from your inputs. Processing is performed to deliver the service you request, not for automated decision-making with legal or similarly significant effects in the GDPR sense unless we expressly inform you otherwise.

Where UK / EEA data protection law applies, we rely on one or more of the following:

• Contract: processing needed to provide our services and perform our agreement with you
• Legitimate interests: for example securing our platform, improving reliability, and limited analysis—balanced against your rights
• Consent: where we ask for it separately — most importantly for marketing and sharing your contact details with selected partners. Consent is always a positive opt-in (an unticked box you choose to tick) and you may withdraw it at any time
• Legal obligation: where we must retain or disclose information to comply with the law

For sensitive categories of data, we generally do not ask you to provide them. If you voluntarily include special-category information in uploads or prompts, you should ensure you have a lawful basis to do so; we will process it only as needed to provide the service or as required by law.

We share data in only three situations, and never for third-party marketing unless you have separately opted in:

• Service providers who operate the service for us (for example hosting, email delivery, payments, analytics, or AI infrastructure), under confidentiality and data-processing terms. They act on our instructions and may not use your data for their own purposes
• Professional advisers where reasonably required
• Authorities when disclosure is required by law or necessary to protect rights, safety, or security

Selected marketing partners are a separate case entirely. We will only pass your contact details to them if you have given specific, opt-in consent — see Marketing & Third-Party Sharing. If you have not opted in, or you have since withdrawn, your details are not included in any partner or marketing export.

We do not sell your personal information.

Marketing consent is separate from your account and from our Terms & Conditions. It is never bundled into them, never assumed, and never pre-ticked.

How we ask

Where we offer it, you will see a blank, unticked box reading:

I agree to my contact details being used and shared with selected partners for marketing and promotional purposes. I understand I can withdraw this consent at any time.

You do not have to tick it. Declining has no effect on your ability to register, purchase, or receive support.

What we record when you decide

So that we can prove what you agreed to, we store a consent record against your account containing:

• Whether you opted in (or declined)
• The date and time of your decision
• The exact wording you were shown, and its version number
• The date and time of withdrawal, if you later opt out

Withdrawing does not erase the record — we mark it withdrawn and keep the history, because that is our evidence of having honoured your choice.

Service messages are not marketing

Regardless of this setting, we will still send you service communications — order confirmations, your documents, security notices, and replies to your support requests. These are necessary to perform our contract with you and are not promotional.

Withdrawing consent

You can withdraw at any time, with no reason given and no effect on your account:

• Use the unsubscribe link in any marketing message
• Change the setting in your account settings where available
• Email info@cuverly.io with "Marketing Consent" in the subject line

Once withdrawn, we stop including you in marketing and exclude you from any partner export. Withdrawal does not undo sharing that already lawfully took place before you withdrew; where practical we will also ask partners to stop.

We retain personal data only as long as necessary for the purposes in this policy, including:

• For as long as your account is active and for a reasonable period afterwards (for example to resolve disputes or meet legal retention)
• Billing and tax records for periods required by applicable law
• Backups and logs for shorter security and operational cycles where appropriate
• Consent records (including withdrawals) for as long as we need to evidence that we handled your choice correctly, typically the life of your account plus a reasonable period afterwards

You may request deletion of your personal data subject to legal exceptions. Account or data-deletion flows offered in the product (where available) should be used in addition to contacting us if you need confirmation.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. These include controls appropriate to the nature of our services and the risks involved.

No method of transmission or storage is completely secure; we encourage you to use strong passwords, protect your credentials, and notify us promptly of any suspected compromise.

Depending on your location, you may have rights including:

• Access to your personal data
• Rectification of inaccurate data
• Erasure ("right to be forgotten") where applicable
• Restriction or objection to certain processing
• Data portability where technically feasible
• Withdrawal of consent where we rely on consent — including marketing consent, which you can withdraw at any time (see Marketing & Third-Party Sharing)

You may exercise these rights by contacting info@cuverly.io. For data-protection matters, please include "Data Protection" in the subject line so we can route your request appropriately.

If you are in the UK / EEA, you may also lodge a complaint with your local supervisory authority.

We may use suppliers or infrastructure in countries outside your own. Where personal data is transferred from the UK / EEA (or similar jurisdictions) to countries not deemed to provide an adequate level of protection, we will use appropriate safeguards (such as standard contractual clauses or other mechanisms recognised by applicable law) where required.

We may use cookies, local storage, and similar technologies that are strictly necessary for the operation of our sites (for example security and session management) and, where applicable, for preferences or analytics.

You can control many cookies through your browser settings. Blocking certain cookies may affect how parts of the service function.

Our services are not directed at children under the age at which parental consent is required in their jurisdiction (often 13, 16, or 18 depending on region). We do not knowingly collect personal information from children. If you believe we have done so, please contact us and we will take appropriate steps.

We may update this Privacy Policy to reflect changes in our practices, services, or legal requirements. We will post the revised policy on this page and update the "Last updated" date. Continued use of the services after changes become effective may constitute acknowledgement of the update where permitted by law.

For any questions about this Privacy Policy or our data practices:

Email: info@cuverly.io

Company: Cuverly Ai Ltd (United Kingdom)

For data protection inquiries, please add "Data Protection" to your subject line so we can address your request promptly.