Privacy Policy — CAEVIX HQ

This Privacy Policy explains how CAEVIX ("we", "us", "our") collects, uses, stores and protects information when you use CAEVIX HQ, our AI Operating System for running modern businesses.

1. Who we are

CAEVIX is a software company founded by Daniel Gustavsson and based in Alvhem, Sweden. CAEVIX HQ is our flagship product: an AI Operating System that orchestrates specialized AI Employees across operations, marketing, content, finance and analytics. For privacy questions, contact us at elaraquinn.media@gmail.com.

2. Information we collect

Account information

Email address, display name, and authentication identifiers.
Workspace preferences, roles and configuration.

Connected Accounts and Connected Services

CAEVIX HQ integrates with a growing set of third-party Connected Services (such as TikTok, Pinterest, Instagram, Facebook, YouTube, Amazon and PayPal, as well as future integrations). When you link a Connected Account we use the provider's OAuth flow to obtain a secure access token. We do not receive or store your third-party passwords. We request only the scopes needed to power the AI Employees you enable.

Data from Connected Services

Profile-level metadata returned by each provider (identifiers, usernames, display names, avatar URLs).
Business objects relevant to the AI Employees you enable (for example: content items, catalogs, orders, transactions, campaigns, analytics).
Aggregated performance metrics we snapshot over time to power dashboards and executive dialogues.

AI Employee activity

Instructions you give to AI Employees, generated outputs, approvals and audit trails.
Operational telemetry needed to run, monitor and improve each AI Employee.

Cookies

We use strictly necessary cookies and local storage for authentication and session management. We do not use advertising cookies and we do not sell tracking data.

3. How we use your information

To operate CAEVIX HQ and the AI Employees you enable.
To authenticate you and maintain your session.
To sync, analyze and display data from your Connected Accounts.
To generate, schedule and execute work on your behalf when you instruct us to.
To communicate service, security and billing notices.
To monitor reliability, prevent abuse and improve the product.

4. Secure token storage

OAuth access and refresh tokens for all Connected Services are stored encrypted at rest, transmitted only over TLS, and accessed only by server-side code executing on your behalf. Row-level security restricts access to the workspace that owns each token.

5. Subprocessors

We rely on a limited set of subprocessors to operate CAEVIX HQ, including cloud infrastructure and database hosting, and AI model providers used to power AI Employees. Each subprocessor is bound by its own data-protection terms. We do not sell your personal data.

6. GDPR compliance

As a Sweden-based company, CAEVIX complies with the EU General Data Protection Regulation. Depending on your jurisdiction you have the right to access, rectify, port, restrict or erase your personal data, and to object to certain processing. Our legal bases are contract performance (delivering CAEVIX HQ), your consent (for Connected Accounts and optional features), and legitimate interests (security, fraud prevention, product improvement).

7. Data deletion

You can disconnect any Connected Account at any time from the relevant AI Employee settings, which revokes and deletes stored tokens for that Connected Service. To delete your CAEVIX HQ workspace and all associated data, email elaraquinn.media@gmail.com from the address associated with your account. We complete verified deletion requests within 30 days.

8. Data retention

We retain workspace data for as long as your account is active. Aggregated analytics may be retained in de-identified form for historical trend analysis. Backups are rotated on a regular schedule.

9. Security

We use TLS in transit, encryption at rest, least-privilege database access, row-level security policies and audit logging. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

10. Children

CAEVIX HQ is not directed to children under 16 and we do not knowingly collect their data.

11. Changes to this policy

We may update this Privacy Policy from time to time as CAEVIX HQ evolves and new Connected Services and AI Employees are added. Material changes will be announced in-app or by email.

12. Contact

CAEVIX
Alvhem, Sweden
Email: elaraquinn.media@gmail.com

All third-party product names, logos and brands referenced by Connected Services are property of their respective owners. CAEVIX is an independent company and is not affiliated with or endorsed by any Connected Service provider.