Privacy Policy

1. Who we are

Cuvello is a field-sales CRM for food and beverage brands, operated by ClayGen Consulting Inc. in Ontario, Canada ("Cuvello", "we", "us"). This policy explains what information we collect, how we use it, and the choices you have. It is written to meet the expectations of Canadian privacy law, including PIPEDA.

Cuvello is a business tool. Our customer is the company whose workspace you use. For the business records your team stores in a workspace, that company decides what is collected and why; we process those records on its behalf to provide the service.

2. Information we collect

• Account information: your name, work email address, and sign-in identifiers, collected when you are invited to or create a workspace.
• Workspace records: the CRM data your team enters, such as accounts, locations, contacts (typically business contact details of buyers, chefs, brokers, and distributor staff), visit notes and photos, sales records, and uploaded distributor reports.
• Visit location data: when a rep uses GPS check-in, the device location they capture for that visit is stored with the visit record. Location capture is user-initiated; the app does not track location in the background.
• Billing information: subscription and seat details, and payment records processed by Stripe. We do not store full card numbers.
• Technical and usage information: log data such as IP address, browser type, and actions taken in the service, used for security, rate limiting, and troubleshooting.

3. How we use information

We do not sell personal information, and we do not use your workspace records to advertise to your contacts.

• To provide the service: hosting your workspace, syncing your records, sending the emails and notifications your team asks the product to send.
• To operate AI features: when your team uses an AI assist, the relevant workspace records are processed to generate the summary, draft, or suggestion your user requested.
• To bill for the service and prevent fraud and abuse (including rate limiting and anti-spam controls).
• To secure, support, troubleshoot, and improve the service.
• To send transactional email such as invitations, receipts, and important service notices.

4. Service providers we use

We use a small set of providers to run Cuvello, each processing only what its role requires:

• Amazon Web Services (Canada region) hosts the application and databases.
• Clerk provides sign-in and account management.
• Stripe processes subscription payments.
• Microsoft (Microsoft 365 / Graph) is used when a user connects their own mailbox so sequence emails can send from it, and for our transactional email. Mailbox access is limited to sending; connection tokens are stored encrypted and a user can disconnect at any time.
• Anthropic processes the content involved in AI-assisted features when your team uses them.

5. Email your team sends

Outreach email sent through Cuvello is sent on behalf of your company, from your users’ connected mailboxes, to contacts your company chose. Your company is responsible for having the consent required by anti-spam laws such as CASL. We keep records of what the product sent (for example, the activity log on a contact) as part of your workspace records.

6. Retention and deletion

We keep workspace records while the workspace is active so the service can function. Your team can delete records in the app (deleted records move to a recycle bin that workspace admins can restore from) and can export field and account records as CSV.

When a workspace is closed, we delete or de-identify its records in the ordinary course of our retention practices, except where we must keep specific records longer (for example, billing records required for tax and accounting).

7. Security

Workspaces are isolated from each other, access is role-based, traffic is encrypted in transit, and sensitive credentials (such as mailbox connection tokens) are stored encrypted. No system is perfectly secure; if we learn of a breach affecting your information, we will notify affected customers and authorities as required by law.

8. Your rights

You may request access to or correction of personal information we hold about you. If your information lives inside a customer’s workspace, we may refer the request to that customer, since they control those records. Contact us at hello@cuvello.ca and we will respond within the timelines required by law. You may also complain to the Office of the Privacy Commissioner of Canada.

9. Where data is processed

Primary hosting is in Canada. Some providers listed above process data in the United States or other countries as part of providing their service; where they do, the information is subject to the laws of those jurisdictions.

10. Changes and contact

When we materially change this policy, we will update the effective date above and prompt workspace users to review it. Questions or requests: hello@cuvello.ca. ClayGen Consulting Inc., Ontario, Canada.