Draft — pending legal review. This document is a starting template, not legal advice. Have counsel review and adapt it to your jurisdiction and processing activities before launch, then remove this notice.

Privacy policy

Last updated: 10 August 2026

This policy explains what personal data Chanova Labs (“we”) collects when you use this website or any product in our portfolio, why we collect it, and what rights you have over it.

1. Data we collect

Account data. Name, email address, hashed password, and organisation membership when you create an account.
Content you provide. Files, documents, and other material you upload or create inside a product.
Billing data. Subscription status and plan. Card details are handled by our payment processor and are never stored on our systems.
Enquiries. Anything you send through the contact form or by email.
Technical data. Log entries, error reports, and aggregate usage necessary to operate and secure the service.

2. Why we process it

To provide the product you signed up for and to authenticate you
To bill you and to enforce plan limits
To respond to your enquiries and provide support
To detect abuse, debug faults, and keep the service secure
To meet legal and accounting obligations

We do not sell personal data, and we do not use the content you upload to train models for other customers.

3. Processors we rely on

We use third-party infrastructure to deliver the service, including managed database hosting, S3-compatible object storage, payment processing, email delivery, and — where a product provides AI features — model providers. Each processes data only on our instructions. A current list is available on request from support@chanovalabs.com.

4. Retention

Account and content data is retained while your account is active. On deletion, we remove it within a reasonable operational window, except where we are legally required to retain records — for example invoices for tax purposes. Backups age out on their own schedule.

5. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to processing, and to complain to a supervisory authority. Export is available at any time without needing to make a formal request. To exercise any of these rights, email support@chanovalabs.com.

6. Security

Passwords are hashed, sessions are carried in HttpOnly cookies, traffic is encrypted in transit, and access is role-controlled. Our full security posture is described on the security and trust page.

7. International transfers

Our infrastructure providers may process data outside your country of residence. Where required, transfers rely on appropriate safeguards. Region-specific requirements can be agreed as part of an enterprise agreement.

8. Cookies

We use cookies that are strictly necessary to keep you signed in and to keep the service secure. We do not use advertising cookies.

9. Changes

If we make a material change to this policy we will update the date above and, for account holders, notify you by email before it takes effect.

10. Contact

Questions about this policy: support@chanovalabs.com. Security matters: security@chanovalabs.com.