Categories of Personal Information Collected (last 12 months):

We collect the following categories of personal information: identifiers (e.g., name, business email, IP address, account ID), customer records (e.g., billing contact, business address), commercial information (e.g., subscription history, transactions), internet/network activity (e.g., log data, auth events, usage analytics — opt-in), and geolocation (approximate from IP). We do not intentionally collect sensitive personal information such as government IDs, precise location, or health data.

Purposes of Use:

We use personal information to provide and secure the Service; support self‑assessment workflows; improve the Service; handle billing and administration; and ensure legal compliance.

Disclosures:

We disclose personal information to service providers/subprocessors under written contracts, to advisors, in corporate transactions, and as required by law. We do not sell or share personal information for cross‑context behavioral advertising.

Your Rights & How to Exercise Them:

You have the right to know/access, delete, correct, and request data portability. You also have the right to opt‑out of “sale”/“sharing” (not applicable as we do neither), the right to limit the use of sensitive personal information (not collected), and the right to non‑discrimination for exercising your rights.

To submit requests, email privacy@cuivault.com. We will verify your identity and respond within statutory timeframes. Authorized agents may submit requests with proof of authorization. Appeals (where applicable) can be submitted to the same email with “Privacy Appeal” in the subject.

Retention:

We retain customer content for your subscription term, security logs for 24 months, and billing records for 7 years, unless a longer period is required by law.