Privacy Policy

Black Cove Inc. ("Black Cove," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and related services (collectively, the "Services").

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide when you:

• Create an account: Name, email address, company name, job title, and password
• Use the Services: Files, documents, code repositories, data, and other content you upload or submit ("Input Content")
• Communicate with us: Contact information and the content of your messages
• Subscribe to paid services: Billing information (processed by third-party payment processors)

1.2 Information Collected Automatically

When you access the Services, we automatically collect:

• Usage Data: Features used, time spent, actions taken, frequency of use
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, pages viewed, clickstream data, referring URLs
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing activities

1.3 Information from Third Parties

We may receive information from:

• Authentication providers: If you sign in using third-party services (e.g., Google, Microsoft)
• Business partners: If you access the Services through a partner integration
• Publicly available sources: To enhance our understanding of business context

2. How We Use Your Information

We use your information to:

2.1 Provide and Improve the Services

• Operate, maintain, and deliver the Services
• Process your requests and generate assessments, reports, and insights
• Analyze and improve AI model performance, accuracy, and features
• Develop new features and services
• Troubleshoot technical issues and provide customer support

2.2 Communicate with You

• Send service-related announcements and updates
• Respond to your inquiries and requests
• Send marketing communications (with your consent, where required)
• Request feedback and surveys

2.3 Security and Compliance

• Detect, prevent, and address fraud, security issues, and technical problems
• Enforce our Terms of Use
• Comply with legal obligations and respond to legal requests

2.4 Analytics and Research

• Understand usage patterns and trends
• Conduct aggregate analytics and statistical research
• Benchmark and improve performance

3. Use of Input Content for AI Training

Important: We understand that your Input Content may contain sensitive business information.

We do not use your Input Content to train AI models or improve our Services for other users. Your data is used solely to:

• Provide the Services to you (generating assessments, reports, and insights)
• Maintain the Services (backup, disaster recovery, system maintenance)
• Provide technical support for your account

We may collect anonymized, aggregated usage statistics (e.g., number of assessments run, feature adoption rates) for internal analytics, but these do not include your actual Input Content or business-identifying information.

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

4.1 Service Providers

We work with third-party service providers who perform services on our behalf:

• Cloud hosting providers: Amazon Web Services (AWS), Google Cloud Platform, or similar
• AI and machine learning providers: OpenAI, Anthropic, or other AI model providers
• Payment processors: Stripe, PayPal, or similar
• Analytics providers: Google Analytics or similar services
• Customer support tools: Email, chat, and ticketing platforms

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Business Transfers

If Black Cove is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Court orders, subpoenas, or legal processes
• Requests from government authorities
• Protection of our rights, property, or safety, or that of others
• Investigation of fraud, security issues, or violations of our Terms

4.4 With Your Consent

We may share your information with third parties when you explicitly consent or direct us to do so.

5. Data Retention

5.1 Account Data

We retain your account information for as long as your account is active or as needed to provide the Services.

5.2 Input Content

• Active Accounts: Input Content is retained for as long as you maintain your account, unless you delete it earlier.
• After Account Deletion: We will delete your Input Content within 90 days of account termination, except where we are required to retain it for legal, regulatory, or security purposes.

5.3 Aggregate and Anonymized Data

We may retain anonymized, aggregated, or de-identified data indefinitely for analytics, research, and service improvement.

5.4 Backup and Disaster Recovery

Data may persist in backup systems for up to 180 days after deletion from production systems.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

6.1 Access and Portability

• Request a copy of the personal information we hold about you
• Request your data in a structured, machine-readable format

6.2 Correction and Updates

• Update or correct your account information at any time through your account settings
• Contact us to request corrections to your data

6.3 Deletion

• Delete your account and request deletion of your personal information
• Note that we may retain certain information as required by law or for legitimate business purposes

6.4 Restrict or Object to Processing

• Object to certain types of processing, such as marketing communications
• Request restriction of processing in certain circumstances

6.5 Withdraw Consent

• Withdraw consent for data processing where consent is the legal basis
• Note that withdrawal may limit your ability to use certain features

6.6 Opt-Out of Marketing

• Unsubscribe from marketing emails using the link in any marketing message
• Adjust communication preferences in your account settings

To exercise these rights, contact us at privacy@blackcove.ai.

We will respond to requests within 30 days (or as required by applicable law).

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication mechanisms
• Regular security assessments and audits
• Employee training on data protection and security
• Incident response and breach notification procedures

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. International Data Transfers

Black Cove is based in Canada. If you access the Services from outside Canada, your information may be transferred to, stored, and processed in Canada or other countries where our service providers operate.

We take steps to ensure that your data receives adequate protection, including:

• Using service providers that comply with recognized data protection frameworks
• Implementing contractual safeguards such as Standard Contractual Clauses
• Obtaining your consent where required by law

9. Children's Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.

10. Cookies and Tracking Technologies

10.1 What We Use

• Essential Cookies: Required for the Services to function (e.g., authentication, security)
• Analytics Cookies: Help us understand how users interact with the Services
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track visits to deliver relevant advertisements (with consent)

10.2 Your Choices

Most browsers allow you to control cookies through settings. Note that disabling cookies may limit your ability to use certain features.

You can also opt out of certain analytics:

• Google Analytics: https://tools.google.com/dlpage/gaoptout

11. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

• Posting a notice on our website
• Sending an email to the address associated with your account
• Providing in-product notifications

Your continued use of the Services after the effective date of the updated Privacy Policy constitutes acceptance of the changes.

13. Jurisdiction-Specific Rights

13.1 Canadian Users (PIPEDA)

If you are in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including:

• The right to know what personal information we collect and how it's used
• The right to access and correct your information
• The right to withdraw consent
• The right to file a complaint with the Privacy Commissioner of Canada

13.2 California Users (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt out of the "sale" or "sharing" of personal information
• Right to non-discrimination for exercising your rights

We do not sell personal information as defined by the CCPA.

To exercise your rights, contact us at privacy@blackcove.ai.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Last Updated: November 4, 2025