Privacy Policy

Who we are

The Cavab service (hereinafter "Cavab", "we") is provided by the individual [first and last name]. For questions about data, write to support@cavab.pro or to support in your dashboard.

Cavab's two roles

For people who register with Cavab (business owners and their employees), we determine how their data is used.

For customers who write to a business, data is processed on behalf of that business. The business is responsible for the lawfulness of its correspondence with customers and for informing them. If you are a customer and want your data deleted, write to the business or to us.

What data we process

• Account: email or phone number, name, language, encrypted password, your Google ID if you sign in with Google, and your Telegram chat ID if you have connected the Cavab bot.
• Business: name, AI seller settings, information about products and services, prices, photos and materials you have uploaded, and tokens of connected channels (stored encrypted).
• Correspondence with customers: name or username, number or ID in the channel, messages, photos, voice messages, orders, and anything the customer has written themselves.
• Payments: plan, amount, status, payment number, and the email address for the receipt. We do not receive card details.
• Technical data: IP address (to protect against password guessing and attacks), error log, AI token usage, and time of last sign-in.
• Website visits: aggregated statistics by source (for example, Instagram or Google), not linked to any individual, and Google Analytics, if it is enabled, only after your consent.
• Website form: the name, contact details, and message you left. We need them to reply to you.
• Assistant on the website and in the dashboard: your questions are sent to an AI model to compose a reply. We keep conversations with the website assistant for 30 days to improve its answers, and we mask phone numbers and email addresses in them. We do not keep conversations held in the dashboard.
• Website demo: your messages are sent to an AI model, and voice messages are sent to ElevenLabs to convert them to text. We do not keep voice recordings. We keep the text of the conversation for 30 days and mask phone numbers and email addresses in it. For rate limits, the IP address is held only in server memory for one day.

Why

• so that the AI seller can reply to customers on behalf of the business and collect orders;
• so that you can sign in to the dashboard, receive notifications, and reply to customers;
• to accept payments and keep records of plans;
• to protect the service, fix errors, and provide support;
• to comply with legal requirements.

Legal grounds

We process data to perform our contract with you, on the basis of your consent, to comply with legal requirements, and to protect the service. The Law of the Republic of Azerbaijan "On Personal Data" applies, and for people from the EU and other countries, their data protection laws also apply where applicable.

Who we share data with

We do not sell data and do not use correspondence for advertising. Data is received only by services without which Cavab cannot work:

• Anthropic (USA): generates the AI seller's replies using AI. Under Anthropic's commercial terms, data sent through the API is not used to train models
• Hetzner (Germany): the servers on which Cavab runs and data is stored
• Meta (Instagram, Messenger, WhatsApp): message delivery, if the business has connected these channels
• Telegram: delivery of messages and notifications to the owner
• Google: Sign in with Google, if the person chose it, and Google Analytics, if consent has been given
• ElevenLabs (USA): voice message recognition and voice replies, if they are enabled
• lava.top: payment processing. Card details are entered on the payment provider's side; Cavab does not receive them

Some of these services are located outside Azerbaijan, so data may be transferred abroad. We may also disclose data if required by law.

How AI works with data

Customer messages and information about the business are sent to an AI model to compose a reply. The AI seller tells the customer that it is an AI assistant. The owner can take over the conversation at any time. AI replies may contain errors.

How long we keep data

• account data, business data, and correspondence are kept for as long as the account exists;
• after a deletion request, we delete the data within 30 days;
• backups are kept for up to 7 days and deleted automatically;
• a sign-in session lasts up to 60 days;
• we may keep payment records for as long as the law requires.

Security

The connection is protected by HTTPS, passwords are stored only as hashes, channel tokens and keys are encrypted, and administrator sign-in is protected by a second factor. No system offers a complete guarantee, so we will notify you of a serious breach and, where required, the government authorities.

Your rights

You can find out what data we hold about you, correct it, get a copy, withdraw consent, object to processing, and request deletion. Write to support@cavab.pro or to support. How to delete data is described on the Data Deletion page. You may also contact the competent government authority.

Age

Cavab is intended for businesses. Only people over 18 may register.

Cookies

Cookies are described on the Cookies page.

Changes

If we materially change this policy, we will let you know in the dashboard or by email. The date of the last update is shown at the top of the page.