Privacy Policy

For questions about this Privacy Policy or to exercise your privacy rights, please contact us at privacy@myvue.io.

1. Personal data we collect

We collect personal data in the following categories:

Personal data you provide directly

• Account information: When you create an account, we collect your name, email address, account credentials, and, where applicable, payment information and transaction history.
• User content (Inputs and Outputs): When you interact with our Services, including through chat, voice, coding, or agentic sessions, we collect the content you provide ("Inputs") and the responses generated ("Outputs"). If you include personal data in your Inputs, that information may appear in your Outputs.
• Feedback: When you provide feedback on our Services, such as rating a response, we store the related conversation as part of your feedback submission.
• Communication information: If you contact us, including via email or our support channels, we collect your name, contact details, and the contents of your communications.
• Other information: We may collect additional information when you participate in surveys, events, or identity or age verification processes.

Personal data collected automatically

When you access or use the Services, we automatically receive:

• Device and connection information: Device type, operating system, browser type, IP address, mobile network, time zone, and device identifiers.
• Usage information: Dates and times of access, features used, actions taken, links clicked, and pages viewed.
• Log and diagnostic information: Error logs, performance data, and application state at the time of errors.
• Location information: General location derived from your IP address, and, where you choose to enable it, more precise device location.
• Cookies and similar technologies: We use cookies and similar technologies to operate and improve our Services. For more information, please see our Cookie Policy at myvue.io/legal/cookies.

Personal data from third-party sources

We may receive personal data from trusted third-party sources, including:

• Security and fraud prevention partners;
• Publicly available sources, used to develop and improve our AI models; and
• Datasets obtained through commercial agreements with third-party data providers.

2. How we use personal data

We use personal data for the following purposes:

• To provide, maintain, and improve our Services and develop new features;
• To personalize your experience across our Services;
• To create and administer your Myvue account;
• To process payments for products and services;
• To communicate with you, including service announcements and marketing communications (subject to your preferences);
• To detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service and Usage Policy;
• To investigate and resolve security issues and disputes;
• To debug and repair errors affecting existing functionality;
• To comply with applicable legal obligations; and
• To enforce our Terms of Service, Usage Policy, and similar agreements.

Even if you opt out of model training, we may use your Inputs and Outputs where: (1) your conversations are flagged for safety review; or (2) you have explicitly reported content to us through our feedback mechanisms.

We may also aggregate or de-identify personal data for research, analysis, and model improvement. We will not attempt to re-identify de-identified data unless required by law.

3. How we disclose personal data

We disclose personal data in the following circumstances:

• Affiliates and corporate partners: We may share personal data among our affiliates and related entities for the purposes described in this Policy.
• Service providers and business partners: We engage third-party vendors to assist with hosting services, cloud services, content delivery services, data processing, email communication software, web analytics services, customer support and services vendors, analytics, payments transaction processors, search and shopping providers, marketing service providers, information technology providers, and other business functions. These parties access personal data only as necessary to perform services on our behalf.
• Business transactions: If Myvue is involved in a merger, acquisition, bankruptcy, or other significant corporate transaction, your personal data may be disclosed during due diligence and transferred to a successor entity.
• Third-party integrations: If you connect third-party applications or services through our platform, those third parties will receive information directly from you and their own privacy policies will govern that data.
• Legal and regulatory compliance: We may disclose personal data to government authorities, regulators, or other third parties when required by law, legal process, or regulatory obligation; to protect the rights, safety, or property of Myvue, our users, or others; to detect or prevent fraud or illegal activity; or as otherwise permitted by applicable law.
• With your consent: We may disclose your personal data in other circumstances where you have given us permission to do so.

4. Data retention

We retain personal data only as long as necessary to fulfill the purposes described in this Policy, operate our Services, and comply with our legal obligations. Retention periods vary by data category as described below.

Account information. We retain your name, email address, and account credentials for the duration of your account and for up to twelve (12) months following account closure, unless longer retention is required to comply with legal obligations, resolve disputes, or enforce our agreements.

Payment and transaction data. Payment information and transaction records are retained for the duration of your account and for up to seven (7) years following account closure as required for tax, accounting, and financial record-keeping obligations under applicable law.

Session and observation data. Our Services capture session data during active sessions on user devices, including screen captures, window activity, and interaction signals. This data is encrypted on-device prior to transmission and is processed through Myvue's proprietary methodology to generate Knowledge Derivatives. Myvue does not retain raw session data, screen captures, or underlying source content once processing is complete. The resulting Knowledge Derivatives are retained as Myvue intellectual property and do not constitute a reproduction of the original session data or any user's business records.

User content (Inputs and Outputs). Where you interact with our Services through chat, voice, or other input methods, we retain your Inputs and Outputs for the duration of your account to provide and maintain the Services. Upon account closure or deletion request, Inputs and Outputs are deleted within thirty (30) days, except where retention is required to comply with legal obligations, enforce our agreements, or address fraud or abuse.

Feedback. Feedback you provide, including associated conversation data, may be retained indefinitely to improve our Services, as described in Section 2.

Communication records. Communications you send to us, including support inquiries, are retained for up to twenty-four (24) months following resolution, unless longer retention is required for legal or regulatory purposes.

Technical and usage data. Device information, usage logs, diagnostic data, and similar technical data are retained for up to twenty-four (24) months from the date of collection. Aggregated or de-identified usage data may be retained indefinitely for analytics, benchmarking, and service improvement purposes.

Limited user identity information. Myvue retains limited user identity information, including email address, name, and hashed device identifier, solely as necessary to operate the Services. Myvue does not intentionally collect or retain sensitive personally identifiable information such as Social Security numbers, dates of birth, financial account numbers, or biometric data through its observation methodology.

Account deletion. Upon your request to delete your account, we will remove your personal data from our active systems within thirty (30) days. Certain data may be retained beyond this period where required by law, necessary to resolve pending disputes, or needed to enforce our agreements. Data that has been aggregated or de-identified prior to your deletion request is no longer associated with your account and is not subject to individual deletion.

Knowledge Derivatives and Aggregated Data. Knowledge Derivatives generated through our proprietary methodology and Aggregated Data derived from use of the Services are retained by Myvue as its intellectual property and are not subject to individual deletion requests. These materials do not identify, and cannot reasonably be used to identify, any individual user or customer.

Notwithstanding the retention periods described above, we may retain personal data for longer where required by applicable law, regulation, or court order; where necessary to establish, exercise, or defend legal claims; to investigate or address fraud, abuse, or violations of our Terms of Service or Usage Policy; or to comply with financial record-keeping or tax obligations.

5. Your rights and choices

Depending on where you are located and subject to applicable law, you may have some or all of the following rights with respect to your personal data. Certain rights may be limited where honoring them would conflict with our legal obligations, the rights of others, or the nature of our data processing architecture.

Right to know. You have the right to know what categories of personal data we collect about you, the sources from which it is collected, the purposes for which it is used, and the categories of third parties with whom it is shared.

Access and data portability. You have the right to request a copy of the personal data we hold about you. Where technically feasible and required by applicable law, we will provide this data in a structured, commonly used, and machine-readable format. Access and portability rights apply to personal data in our active systems and do not extend to Knowledge Derivatives or Aggregated Data, which do not identify and cannot reasonably be used to identify any individual.

Correction. You have the right to request correction of inaccurate or incomplete personal data we hold about you. You may update certain account information directly through your account settings. Due to the technical nature of our Services, we may not always be able to correct factual inaccuracies in Outputs, but we will make commercially reasonable efforts to do so where the Output is stored in association with your account.

Deletion. You have the right to request deletion of your personal data. Upon a verified deletion request, we will remove your personal data from our active systems within thirty (30) days, subject to the exceptions described in Section 4 (Data Retention). Deletion does not extend to Knowledge Derivatives or Aggregated Data, which are not personal data and are retained by Myvue as its intellectual property. Where we are unable to fulfill a deletion request in whole or in part, we will inform you of the reason and the applicable legal basis for continued retention.

Restriction of processing. Where permitted by applicable law, you have the right to request that we restrict our processing of your personal data in certain circumstances, including where you contest the accuracy of your personal data, where the processing is unlawful and you request restriction rather than deletion, or where you have objected to processing pending verification of our legitimate grounds.

Objection. Where we process your personal data on the basis of legitimate interests, you have the right to object to such processing. If you object, we will cease processing your personal data for the relevant purpose unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defense of legal claims. You may object to the processing of your personal data for direct marketing purposes at any time, and we will comply without requiring a balancing test.

Withdrawal of consent. Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing conducted prior to withdrawal. You may withdraw consent through your account settings or by contacting us at privacy@myvue.io.

Appeal. If we deny or partially deny a privacy rights request, you have the right to appeal our decision. To submit an appeal, contact us at privacy@myvue.io with a description of the original request and the basis for your appeal. We will respond to all appeals within the timeframe required by applicable law. If your appeal is denied, we will provide information on how to contact the applicable regulatory authority, where required.

Automated decision-making. We do not use your personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on you. Our Services generate Knowledge Derivatives and Outputs through proprietary analytical methodology, but these do not constitute automated individual decision-making as described in Article 22 of the GDPR. Where our customers use our Services to inform their own decision-making processes, responsibility for the use and impact of such decisions rests with the customer.

No sale or sharing of personal data. We do not sell your personal data as that term is defined under applicable law, including the California Consumer Privacy Act (CCPA) and similar state privacy laws. We do not share your personal data with third parties for cross-contextual behavioral advertising.

How to exercise your rights. To exercise any of the rights described above, you or your authorized agent may submit a request by emailing privacy@myvue.io. We will verify your identity before processing your request using reasonable means appropriate to the sensitivity of the data involved and the nature of the request. We will respond to all verified requests within the timeframe required by applicable law. We will not discriminate against you for exercising your privacy rights.

Nothing in this Section creates rights for End Customers of our enterprise customers with respect to data processed through the Services on behalf of those customers. Where Myvue processes personal data as a processor on behalf of an enterprise customer, the enterprise customer's privacy policy governs, and requests from End Customers should be directed to the applicable enterprise customer.

6. Data controls

We provide you with tools to manage your personal data. You may delete your account at any time by contacting account@myvue.io, and upon deletion your personal data will be removed from our active systems within thirty (30) days as described in Section 4. You may manage your marketing communication preferences, including unsubscribing from promotional emails, by using the unsubscribe link included in each communication or by contacting privacy@myvue.io. You may also control cookie preferences through your browser settings or, where available, through the cookie management tools on our website, subject to applicable law.

7. Data transfers

Your personal data may be transferred to and processed on servers located in the United States and other countries, which may not have data protection laws equivalent to those in your country of residence. Where required, we rely on legally recognized transfer mechanisms, including adequacy decisions and standard contractual clauses approved under applicable law, to protect your personal data during such transfers.

8. Security

We implement appropriate technical, administrative, and organizational security measures designed to protect your personal data from unauthorized access, disclosure, alteration, loss, or destruction. However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security. Therefore, you should take special care in deciding what information you provide to the Services. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third-party websites. You are responsible for keeping your account credentials confidential.

9. Children

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided personal data to us, please contact us at privacy@myvue.io and we will investigate and, if appropriate, delete such data promptly.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or applicable law. When we make material changes, we will provide you with no less than thirty (30) days' prior notice by posting the updated Policy on our website at myvue.io/privacy-policy and updating the Effective Date above. Where reasonably practicable, we will also notify you via email or in-app notification. Changes required to comply with applicable law, regulation, or governmental order may take effect immediately upon notice. Your continued use of the Services after the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should discontinue use of the Services.

11. Legal bases for processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following table sets out the legal bases on which we process your personal data:

12. Regional supplemental disclosures

United States — state privacy rights

Depending on the U.S. state in which you reside, you may have additional privacy rights under applicable state law, including rights to know, access, correct, delete, and opt out of certain uses of your personal data. To exercise these rights, please submit a request to privacy@myvue.io.

We do not sell personal data or share it for cross-contextual behavioral advertising as defined under applicable U.S. state privacy laws. We do not process sensitive personal data for the purpose of inferring characteristics about you.

Authorized agents may submit requests on your behalf with appropriate written authorization. We may verify your identity before processing any request. You may appeal a denied request by contacting privacy@myvue.io.

Canada

By using our Services, residents of Canada confirm their consent to the collection, use, and disclosure of personal data as described in this Policy, to the extent express consent is required under applicable Canadian privacy law. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting privacy@myvue.io.

Your personal data may be transferred to and processed in the United States and other jurisdictions outside of Canada. These jurisdictions may have data protection laws that differ from those in Canada. By providing your personal data, you acknowledge and consent to such transfers.

Brazil

Residents of Brazil have rights under the Lei Geral de Proteção de Dados (LGPD), including the right to confirm processing, access, correct, anonymize, block, or erase your personal data, request portability, and withdraw consent. To exercise these rights, contact privacy@myvue.io.

Personal data may be transferred internationally in accordance with applicable Brazilian law, including through the use of standard contractual clauses approved by the Autoridade Nacional de Proteção de Dados (ANPD).

European Economic Area, United Kingdom, and Switzerland

For all users, the data controller is Myvue Knowledge Systems, Inc.

Where we transfer personal data outside the EEA or UK, we rely on legally recognized transfer mechanisms, including adequacy decisions and standard contractual clauses under Article 46 of the GDPR. You have the right to lodge a complaint with your local data protection supervisory authority.

13. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

We will respond to all requests in accordance with applicable law.