Privacy Policy for Codvo.ai

Codvo.ai (“Codvo,” “Company,” “we,” “our,” or “us”) is committed to protecting the privacy, confidentiality, integrity, and security of personal information entrusted to us by our customers, enterprise users, website visitors, business partners, vendors, contractors, and authorized representatives.

This Privacy Policy describes how Codvo.ai collects, processes, stores, uses, transfers, discloses, and safeguards personal information in connection with:

• The Codvo.ai websites, digital properties, and online platforms;
• AI-enabled enterprise products, applications, APIs, and services;
• Cloud, analytics, workflow automation, software engineering, and digital transformation services;
• Customer onboarding, account administration, support, recruitment, marketing, and business operations;
• Enterprise integrations, collaboration systems, and related infrastructure.

This Privacy Policy is intended to align with internationally recognized privacy and data governance principles, including the DPDP Act (India), EU GDPR, UK GDPR and UK DPA 2018, CCPA as amended by CPRA, and other applicable privacy and data protection laws.

This Privacy Policy applies to:

• Visitors to the Codvo.ai website;
• Enterprise customers and authorized users;
• Prospective customers and business contacts;
• Vendors, consultants, contractors, and service providers;
• Job applicants and candidates;
• Individuals interacting with AI-enabled systems, automation tools, and digital services operated by Codvo.ai.

Where Codvo.ai processes personal data on behalf of enterprise customers pursuant to an MSA, Subscription Agreement, SOW, DPA, or other written agreement, that agreement governs in the event of conflict with this Privacy Policy.

3.1 Personal and Business Information

• Full name; business email; phone number;
• Company or organization details; job title and professional information;
• Billing and account administration information;
• Communication preferences; user profile and account information.

3.2 Technical, Device, and Usage Information

• IP address, browser type and version, device identifiers, operating system;
• Network and connectivity information, session timestamps, authentication records;
• Usage analytics and telemetry, error logs, security and access logs.

3.3 Customer and Enterprise Data

Enterprise customers and authorized users may upload, submit, process, or store documents, operational records, workflow information, AI prompts and instructions, structured and unstructured data, API-generated data, and collaboration content. Customer-owned data remains subject to applicable contractual confidentiality and data protection obligations. Codvo.ai does not claim ownership over customer-owned enterprise data.

3.4 AI and Automation Data

• Prompts and instructions; AI-generated outputs;
• Workflow metadata; contextual and retrieval information;
• AI interaction history and operational analytics for AI-enabled workflows.

3.5 Third-Party Integrations and Authentication

Codvo.ai may support integrations with Google Workspace, Microsoft 365, Slack, CRM systems, cloud infrastructure providers, and enterprise identity providers. Processing is limited to permissions authorized by the applicable user or enterprise customer.

3.6 Recruitment and Employment Information

For applicants: resume/CV, educational and professional history, certifications, interview feedback, work authorization, and background verification information.

Depending on enabled services, permissions may include camera, microphone, file and storage, notifications, device and network information, and approximate location where operationally necessary. Codvo.ai requests only those permissions reasonably necessary for service functionality, security, diagnostics, fraud prevention, and authorized operational purposes.

Codvo.ai may support Single Sign-On (SSO), OAuth, OpenID Connect, SAML-based enterprise authentication, and federated identity management. Users may revoke permissions through device settings, account settings, or enterprise administrative controls.

5.1 Service Delivery and Platform Operations

• Providing and administering services; user authentication and access management;
• Workflow automation and AI functionality; enterprise collaboration and integrations;
• Customer onboarding and support.

5.2 Security and Risk Management

• Threat detection and incident response; fraud prevention and abuse monitoring;
• Security monitoring and logging; protection against unauthorized access or misuse.

5.3 Product Improvement and Analytics

• Platform performance and functionality; diagnostics and troubleshooting;
• Usage analytics and operational insights; enhancing AI-enabled workflows.

5.4 Communications

• Customer support; product and operational notifications;
• Administrative notices, security alerts, and marketing communications.

5.5 Legal and Compliance Purposes

• Compliance with applicable laws and regulations;
• Enforcement of contractual rights; governance, audit, and risk management.

Codvo.ai does not sell personal information. Codvo.ai does not use customer-owned enterprise data, uploaded documents, prompts, or workflow information for advertising profiling or cross-context behavioral advertising.

Users may receive service-related communications, security notifications, product updates, administrative notices, and marketing communications where permitted by law.

Users may opt out of marketing at any time via unsubscribe links, updating preferences, or contacting Codvo.ai directly. Operational, transactional, and security-related communications may continue where required for contractual, legal, compliance, or operational purposes.

• Performance of a contract;
• Legitimate business interests;
• Compliance with legal obligations;
• User consent;
• Protection of legal rights, safety, and security interests.

Codvo.ai develops and deploys AI-enabled systems, workflow automation tools, analytics engines, and generative AI technologies. Users acknowledge that:

• AI-generated outputs may contain inaccuracies, omissions, biases, or limitations;
• Human review and independent validation remain necessary;
• AI outputs should not be solely relied upon for legal, financial, medical, regulatory, or mission-critical decisions without appropriate human oversight;
• Certain AI functionality may involve processing through authorized third-party AI infrastructure providers.

Codvo.ai maintains commercially reasonable governance for responsible AI deployment, human oversight, security monitoring, AI governance safeguards, and protection against misuse.

Codvo.ai does not use customer-owned enterprise data to train generalized AI models for third-party benefit unless expressly authorized through a separate written agreement.

9.1 Service Providers and Infrastructure Partners

Authorized vendors and subprocessors supporting cloud hosting, security monitoring, analytics, customer support, communications, AI infrastructure, and operational services. Such providers are contractually obligated to maintain confidentiality and appropriate security safeguards.

9.2 Enterprise Customers and Administrators

Enterprise administrators may access workspace activity, operational records, logs, and organizational account information consistent with organizational controls and contractual arrangements.

9.3 Legal and Regulatory Authorities

To comply with applicable law, respond to lawful governmental requests, protect legal rights and security, investigate fraud, abuse, or security incidents, and enforce contractual obligations.

9.4 Corporate Transactions

In connection with mergers, acquisitions, corporate restructuring, financing, asset sales, or business transfers.

Codvo.ai operates globally and may process or store information outside a user’s country of residence. Where required, Codvo.ai implements Standard Contractual Clauses (SCCs), contractual confidentiality obligations, transfer impact assessments, encryption and access controls, and other legally recognized transfer mechanisms.

Codvo.ai retains personal information only as long as reasonably necessary to provide services, fulfill contractual obligations, maintain audit and security records, resolve disputes, and comply with legal, regulatory, tax, accounting, and operational obligations. Data may thereafter be securely deleted, anonymized, or archived per applicable retention obligations and internal governance policies.

Codvo.ai maintains a comprehensive information security program with industry-standard administrative, technical, organizational, and physical safeguards designed to protect information against unauthorized access, misuse, disclosure, destruction, loss, or alteration.

• Encryption in transit and at rest;
• Role-based access controls; multi-factor authentication;
• Vulnerability management; logging and audit controls;
• Secure software development lifecycle practices;
• Network segmentation and monitoring;
• Incident response and disaster recovery procedures.

No system, network, platform, or method of transmission can be guaranteed to be completely secure.

• Access rights; correction rights; deletion rights;
• Restriction or objection rights; data portability;
• Withdrawal of consent; rights relating to automated decision-making;
• Rights to lodge complaints with competent authorities.

Subject to applicable law and contractual obligations, users may request to access, correct, export, delete, restrict, or object to processing — and withdraw consent where processing is based on consent. Requests may be submitted via account settings, enterprise administrators, or direct communication with Codvo.ai.

Codvo.ai may verify identity, retain information where legally required, and maintain backup or audit records for security, dispute resolution, fraud prevention, legal compliance, or operational continuity. Where Codvo.ai processes data on behalf of an enterprise customer, requests may need to be directed to the applicable customer organization.

Residents of certain U.S. states may possess additional rights under applicable laws, including CCPA, CPRA, VCDPA, and CPA.Codvo.ai does not sell personal information or share personal information for cross-context behavioral advertising purposes.

Codvo.ai uses cookies, SDKs, analytics technologies, device identifiers, and similar tracking mechanisms to support website and platform functionality, authentication and session management, security monitoring and fraud prevention, performance diagnostics, and user experience improvements. Additional details are available in the Codvo.ai Cookie Policy.

Unless expressly authorized through a separate written agreement, users should not upload or process the following through the platform:

• Payment card information;
• Biometric identifiers;
• Government-issued identification numbers;
• Protected health information;
• Highly sensitive regulated information;
• Special categories of personal data under GDPR;
• Sensitive personal information under applicable law.

The Codvo.ai websites and platforms may contain links or integrations relating to third-party systems, applications, or services. Codvo.ai is not responsible for the privacy, security, availability, or content practices of third parties. Users should independently review applicable third-party policies.

Codvo.ai services are intended for enterprise and professional use and are not directed toward children. We do not knowingly collect personal information from children under the age required by applicable law. If we become aware of such collection, we will take reasonable steps to delete the information.

Codvo.ai may update this Privacy Policy periodically to reflect legal and regulatory changes, platform or operational updates, security enhancements, or changes in processing practices. Updated versions will be posted with revised effective dates.