What we collect, and what we do not

01Who we are

Cevran is operated by Cevran Labs (“Cevran”, “we”, “us”). This policy covers the Cevran web application at app.cevran.ai, the Cevran Telegram bot, and the marketing site at cevran.ai (together, the “Service”). For privacy purposes, Cevran Labs is the data controller for the account data described below, and acts as a processor of the content you ask us to work with inside your connected tools.

02What we collect

We collect only what we need to run the Service and do the work you ask for:

• Account information: your name, email address, and authentication identifiers when you sign up or sign in.
• Messages & instructions: the prompts, requests, and conversation history you send to Cevran, in the web app or over Telegram.
• Work output & activity: the plans, drafts, results, and a log of the actions Cevran takes on your behalf.
• Connected-account data: content we read or write in third-party apps you connect (e.g. calendar events, notes, messages), strictly to carry out your requests.
• Telegram identifiers: see section 03.
• Enquiry details: what you enter in the booking form at cevran.ai/book: your contact details, your company, the process you want help with, the systems it touches, and your timeline. We also record the time of submission and the IP address it came from, to block automated abuse of the form.
• Technical & usage data: basic logs (timestamps, request metadata, error diagnostics) needed to operate and secure the Service.

03Using Cevran on Telegram

You can talk to Cevran through our Telegram bot. To do this you first link your Telegram account to your Cevran account using a one-time code or deep link. When you use the bot we process:

• Telegram account identifiers: your Telegram user ID and chat ID, and the link between them and your Cevran account, so we know which account a message belongs to.
• Message content: the text you send to the bot, which we forward to Cevran's backend so it can understand the request, do the work, and reply.
• Conversation history: recent messages in your thread, kept so Cevran can maintain context. You can start a clean thread any time with /fresh.

The bot operates only in private (one-to-one) chats and does not process messages in group chats. We do not receive your Telegram phone number or contact list. You can unlink your Telegram account at any time from your Cevran settings or by contacting us, which stops further processing of messages from that Telegram account. Your use of Telegram itself is also governed by Telegram's Privacy Policy.

04How we use your data

We use the data above to:

• Provide the Service: understand your requests, plan and carry out tasks, and report results back to you.
• Operate connected integrations on your behalf, within the scopes you grant.
• Maintain conversation context and your preferences.
• Secure the Service, prevent abuse, debug issues, and meet legal obligations.
• Communicate with you about your account and important Service changes.
• Respond to an enquiry you send through the booking form, and prepare for the call it leads to. We do not use those details for unrelated marketing, and we do not sell or share them with anyone outside the processors listed below.

We process this data to perform our contract with you, to pursue our legitimate interest in operating and securing the Service, and where required, with your consent.

05Connected accounts & credentials

When you connect a third-party tool, we store the access credentials needed to act on your behalf. We hold these in a dedicated, encrypted credential store, not in the conversation layer and not exposed to the AI model. Cevran requests the narrowest access scope a connector needs, and you can disconnect any integration at any time, which revokes our ongoing access.

06AI processing & model training

Cevran uses large language models to interpret your requests and generate responses. To do this, your messages and the relevant context are sent to our AI infrastructure and trusted model providers acting as our processors.

We do not use your messages, content, or work output to train our own foundation models, and we use providers under terms that prohibit training their models on your data.

07When we share data

We do not sell your personal data. We share it only with:

• Service providers (processors): infrastructure, hosting, and model providers that run the Service under contract and on our instructions.
• Integrations you choose: the third-party apps you connect, when carrying out your requests.
• Legal & safety: where required by law, or to protect the rights, safety, and security of Cevran, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

08Retention & deletion

Enquiries sent through the booking form are kept while we are in contact with you and for a reasonable period afterwards, so we can pick the conversation back up. Ask us at any time and we will delete yours.

We keep your data for as long as your account is active and as needed to provide the Service. You can delete conversations, disconnect integrations, and unlink Telegram at any time. When you close your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to meet legal, security, or accounting obligations.

09How we protect it

We encrypt data in transit and at rest, keep credentials in a separate vaulted store, scope access tightly, and require explicit approval before Cevran takes sensitive or irreversible actions on your behalf. No system is perfectly secure, but we work to protect your data with industry-standard safeguards.

10Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, contact us using the details below. You can also lodge a complaint with your local data protection authority.

11Changes to this policy

We may update this policy as the Service evolves. When we make material changes, we will update the effective date above and, where appropriate, notify you. Continued use of the Service after an update means you accept the revised policy.

12Contact us

Questions about this policy or your data? Reach us at privacy@cevran.ai.