CloviAnalytics
This Privacy Policy is issued by CloviTek AI ("we", "us", "our"), the operator of CloviAnalytics. It explains how we collect, use, store, share, and protect personal information when you use our analytics and behavioral data platform ("Service"). Contact us at legal@clovitek.com.
We may update this Policy and will notify you of material changes via email or in-Service notice. Substantial changes may require renewed consent. Retention periods for each data category are detailed in our Data Handling and Deletion Schedule.
Two-Layer Data Processing: CloviAnalytics operates at two levels: (1) data about our customers (you, the platform user), for which CloviTek AI is the data controller; and (2) data about your end users, collected via our tracking code on your properties, for which you are the data controller and CloviTek AI acts as data processor. This policy covers category (1). Category (2) is governed by our Data Processing Agreement.
We collect the following categories of personal data from you as a customer of the Service:
| Category | Examples | Purpose | Lawful Basis |
|---|---|---|---|
| Contact & Identity | Name, email address, company name | Account creation, communication, support | Contract, Legitimate Interests |
| Account & Profile Data | Username, hashed password, user ID, role | Account management, security, personalization | Contract, Legitimate Interests |
| Billing & Payment Data | Billing address, payment method (last 4 digits), transaction history | Payments, invoicing, compliance | Contract, Legal Obligation |
| Platform Usage Data | Dashboard interactions, feature usage, login timestamps, IP address, browser and device info | Service delivery, analytics, security, troubleshooting | Contract, Legitimate Interests |
| Configured Tracking Properties | Domains, event names, funnel configurations, audience segments you define | Service delivery, data collection configuration | Contract |
| Support & Communications | Support tickets, chat transcripts, email correspondence | Support delivery, dispute resolution | Contract, Legitimate Interests |
| Cookies & Session Data | Session cookies, persistent preference cookies, analytics identifiers | Authentication, personalization, platform analytics | Consent (non-essential), Contract (essential) |
| Marketing & Preferences | Email opt-in status, communication preferences | Marketing (with consent), preference management | Consent, Legitimate Interests |
| Legal & Compliance Data | Consent records, data subject requests, audit logs | Compliance, legal defense, regulatory audits | Legal Obligation, Legitimate Interests |
We use the following categories of cookies and tracking technologies:
| Category | Examples | Purpose | Consent Required |
|---|---|---|---|
| Strictly Necessary | Session authentication token, CSRF protection token, load-balancer cookie | Required to operate the Service; cannot be disabled | No (essential) |
| Functional / Preference | Language preference, dashboard layout, theme selection | Remember your settings and personalize your experience | Optional (stored locally) |
| Analytics / Performance | Page view tracking, feature engagement tracking, error reporting | Understand how customers use the platform to improve it; internal product analytics | Yes (consent banner) |
| Behavioral Profiling | Session replay (for UX research on opt-in accounts), heatmaps, click tracking within the platform dashboard | UX improvement, product iteration; conducted only on accounts that opt in | Yes (explicit opt-in) |
| Marketing / Retargeting | Ad conversion pixels on public marketing pages (not inside the authenticated app) | Measure effectiveness of marketing campaigns | Yes (consent banner) |
You can manage cookie preferences at any time via the consent preferences link in the Service footer, or by configuring your browser to block or delete cookies. Blocking essential cookies will impair Service functionality.
For full details on individual cookie names, durations, and provider identities, refer to our Cookie Policy (available at legal@clovitek.com or in the consent banner).
What behavioral data we collect about you on the platform:
How we use your behavioral data:
What we do NOT do with your behavioral data:
Regarding your end users' behavioral data: When you deploy the CloviAnalytics tracking code on your properties, you instruct CloviTek AI (as data processor) to collect behavioral data about your end users. You are responsible for obtaining valid consent from your end users where required by law before activating tracking. See the Data Processing Agreement for processor obligations and the Data Handling and Deletion Schedule for retention terms.
Your data may be transferred to and processed in countries outside your country of residence, including the United States. For EU/EEA/UK users, transfers outside the EEA rely on Standard Contractual Clauses (SCCs) or an adequacy decision. For details on individual provider transfer mechanisms, see our Data Handling and Deletion Schedule.
We implement industry-standard technical and organizational security measures including encryption at rest and in transit (TLS 1.2+), access controls, role-based permissions, regular security reviews, and contractual security requirements for all sub-processors. We maintain incident response procedures and will notify affected users of confirmed data breaches in accordance with applicable law.
We retain personal data only as long as necessary for the purposes described or as required by law. Full retention periods are detailed in our Data Handling and Deletion Schedule. Upon expiry of the retention period or a verified deletion request, data is securely deleted or irreversibly anonymized. To submit a deletion request, contact legal@clovitek.com.
We share personal data only with trusted sub-processors under contractual and security safeguards (DPAs, SCCs where required). We do not sell personal data.
| Category | Purpose | Data Shared | Safeguards |
|---|---|---|---|
| Cloud Infrastructure / CDN | Hosting, data storage, delivery | Stored user and analytics data | Encryption, DPA |
| Payment Processing | Billing, subscriptions, invoicing | Billing info, transaction records | PCI DSS, DPA |
| Email / Transactional Messaging | Account notifications, support correspondence | Email address, name, message content | Encryption, DPA |
| Error Monitoring | Bug detection, performance monitoring | Anonymized error logs, stack traces | Data minimization, DPA |
| Customer Support Software | Ticketing, live chat support | Account info, support messages | DPA |
| Internal Analytics (platform-level) | Product usage analysis to improve the Service | Aggregated or pseudonymized usage events | Data minimization, DPA, Consent |
The Service is not directed to children under 13 (or 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact legal@clovitek.com for immediate deletion.
Depending on your jurisdiction you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority. To exercise any right, contact legal@clovitek.com. We will verify your identity and respond within the legally required timeframe (30 days for GDPR; 45 days for CCPA).
This Privacy Policy is governed by the laws of the State of Delaware, USA. Data subjects in the EU/EEA/UK benefit from the additional protections of applicable data protection law regardless of governing law.
For privacy inquiries, data subject requests, or to reach our data protection contact: legal@clovitek.com.