Privacy policy

Last updated: 12 August 2026

This policy explains what personal data Chanova Labs (“we”) collects when you use this website or any product in our portfolio, why we collect it, and what rights you have over it.

1. Data we collect

Account data. Name, email address, hashed password, and organisation membership when you create an account.
Content you provide. Files, documents, and other material you upload or create inside a partner.
Billing data. Subscription status and plan. Card details are handled by our payment processor and are never stored on our systems.
Enquiries. Anything you send through the contact form or by email.
Job applications. If you apply for a role, the name, email address, location, links, covering note, and CV or résumé file you submit, plus the role applied for and the date.
Technical data. Log entries, error reports, and aggregate usage necessary to operate and secure the service.

2. Why we process it

To provide the product you signed up for and to authenticate you
To bill you and to enforce plan limits
To respond to your enquiries and provide support
To detect abuse, debug faults, and keep the service secure
To assess a job application and communicate with you about it
To meet legal and accounting obligations

We do not sell personal data, and we do not use the content you upload to train models for other customers.

3. Processors we rely on

We use third-party infrastructure to deliver the service, including managed database hosting, S3-compatible object storage, payment processing, email delivery, and — where a product provides AI features — model providers. Each processes data only on our instructions. A current list is available on request from support@chanovalabs.com.

4. Recruitment

Applications submitted through our careers pages are stored in our own systems and read only by the people involved in hiring for that role. Your CV file is held in private object storage and is not publicly reachable. We do not run automated decision-making on applications, and we do not share them outside the company or use them for anything other than assessing you for work with us.

If we do not proceed, we keep your application for up to twelve months so we can contact you about a future opening, then delete it. Ask us to delete it sooner at any point by emailing careers@chanovalabs.com and we will, without asking why.

5. Retention

Account and content data is retained while your account is active. On deletion, we remove it within a reasonable operational window, except where we are legally required to retain records — for example invoices for tax purposes. Job applications follow the twelve-month rule above. Backups age out on their own schedule.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to processing, and to complain to a supervisory authority. Export is available at any time without needing to make a formal request. To exercise any of these rights, email support@chanovalabs.com.

7. Security

Passwords are hashed, sessions are carried in HttpOnly cookies, traffic is encrypted in transit, and access is role-controlled. Our full security posture is described on the security and trust page.

8. International transfers

Our infrastructure providers may process data outside your country of residence. Where required, transfers rely on appropriate safeguards. Region-specific requirements can be agreed as part of an enterprise agreement.

9. Cookies

We use cookies that are strictly necessary to keep you signed in and to keep the service secure. We do not use advertising cookies.

10. Changes

If we make a material change to this policy we will update the date above and, for account holders, notify you by email before it takes effect.

11. Contact

Questions about this policy: support@chanovalabs.com. Security matters: security@chanovalabs.com.