Last Updated: May 21, 2025
CVAT.ai Corporation (“CVAT.ai”, “we”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and disclose personal information when you visit our website cvat.ai (including but not limited to status.cvat.ai, docs.cvat.ai) or use our CVAT Online (app.cvat.ai) (together, the “Service”), and how we comply with international data protection laws including but not limited to the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) as amended by the CPRA. It also describes your rights regarding your personal data and how you can contact us about privacy concerns.
Controller: For the purposes of data protection laws, CVAT.ai Corporation, a company based in the United States at 300 Delaware Ave. Suite 210 #32693, Wilmington, DE, 19801 is the data controller of personal information you provide to us as a user of our Service. If you are located in the European Economic Area (EEA), we have appointed CVAT.ai Europe Ltd, located at Office 301, ANNA HOUSE, 20 Evagora Pallikaridi, Paphos, 8010, Cyprus, as our representative in the EU. We can be reached at legal@cvat.ai (please specify “Privacy Request” in the subject line) for any questions or requests regarding this Privacy Policy or your personal data.
By using our Service, you acknowledge that you have read and understood this Privacy Policy. We may update this Policy from time to time (see “Changes to This Privacy Policy” below). If we make material changes, we will notify you via email or a prominent notice on the Service before they take effect. If you do not agree with our handling of your information as described in this Policy, please do not use the Service.
We collect several categories of personal information from you for various purposes. In this Policy, “Personal Data” (or “personal information”) means any information that relates to an identified or identifiable natural person. The types of Personal Data we collect include:
Your web browser may allow you to manage your cookie preferences, including to delete and disable CVAT.ai cookies. Please take a look at the help section of your web browser or follow the links below to understand your options. If you choose to disable cookies, some features of our Site or Services may not operate as intended.
We will not collect any personal data from you that is not needed for the purposes described, and we do not knowingly collect information from children under 18 (see “Children’s Privacy” below).
CVAT.ai Corporation uses your information for the following purposes, in accordance with applicable law:
We do not use personal data for any form of automated decision-making that produces legal or similarly significant effects on you without human involvement. In other words, we do not profile users or algorithmically decide matters affecting your rights or employment, etc., without your input.
For individuals in the EEA, UK, and other jurisdictions that require a legal justification for processing personal data, we rely on the following lawful bases:
We do not disclose personal information to third parties solely for their own marketing or advertising purposes, as well as we do not sell your personal information to third parties. However, in the normal course of running our Service we share personal data with third parties in the following circumstances:
Service Providers (Processors): We use trusted third-party companies to help us operate and improve our Service, including: cloud hosting providers, email service providers, customer support platforms, payment processors, and analytics tools. These third parties may process certain categories of personal data, including but not limited to: contact information, account details, and usage data. These third parties process data only under our instructions and for the purposes we specify, in accordance with this Policy and our contracts with them. They are prohibited from using your data for any purpose other than providing services to us.
Within our Corporate Group: CVAT.ai Corporation may share data with its affiliated companies or subsidiaries in order to operate the Service. All entities will follow this Privacy Policy and are under common control.
Business Transfers: If CVAT.ai Corporation is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your personal data may be transferred as part of that transaction. We would ensure the new owner continues to honor your privacy rights under terms at least as protective as this Policy. You will be notified via email and/or a prominent notice on our Service of any change in ownership or new uses of your personal information.
Legal Compliance and Protection: We may disclose personal information to third parties (such as law enforcement, regulators, or courts) if we believe in good faith that such disclosure is necessary to:
In any case of disclosure for law enforcement or national security, we will examine the request carefully and only provide the minimum data necessary, in line with applicable law. Wherever possible and legally permissible, we will inform you if your data has been requested.
With Your Consent or at Your Direction: We will share your personal data with other third parties if you explicitly request or consent to it. For instance, if you integrate CVAT.ai with a third-party service or API at your direction, we will transfer data as needed with your permission. Also, if we ever want to use your personal data in a new way not covered by this Policy, we will seek your consent.
Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. By submitting your personal data to us and using our services, you acknowledge that your data may be transferred and processed outside your jurisdiction, subject to the safeguards outlined in this Privacy Policy.
CVAT.ai Corporation will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, and to comply with applicable legal, contractual, and regulatory obligations. The specific retention period depends on the type of data and the context in which it was provided. Data you create or upload to our platform remains under your control and is deleted upon your request or account termination, with residual copies in backups removed within a reasonable timeframe. In all cases, we aim to minimize retention and securely delete or anonymize data once it is no longer needed. You may contact us at any time to learn more about our data retention practices.
We take the security of your personal data very seriously. While no website or Internet transmission is completely secure, we implement a range of technical and organizational measures to protect the information we hold against unauthorized access, alteration, disclosure, or destruction.
Despite our efforts, no method of transmission or storage is 100% secure. The security of your data also depends on you: please use a strong, unique password for our Service, do not share your login credentials, and notify us immediately if you suspect any unauthorized access to your account.
In the event of a data breach that affects your personal data, we will act promptly to contain and remediate the issue. If the breach is likely to result in a high risk to your rights (e.g., financial loss or identity theft), we will inform you and the relevant supervisory authorities as required by law, without undue delay.
You have important rights regarding your personal data. These includes:
Access: You have the right to request a copy of the personal data we hold about you.
Correction: If any of your personal information is inaccurate or incomplete, you have the right to ask us to correct it. We encourage you to keep your account profile up-to-date, and you can directly edit most of your information through the platform. For any other corrections, contact us.
Deletion: You can request that we delete your personal data. If you wish to delete your account or any specific data, you can do so from your account settings or by contacting support. We will honor deletion requests provided we do not have a legal obligation or overriding legitimate interest to retain the data.
Note: content you uploaded can be deleted by you at any time; we will ensure it's removed from active systems and only retained in backups as outlined in our retention section until those backups are cycled out.
Withdraw Consent: Where we rely on your consent, you are free to withdraw that consent at any time. For example, you can unsubscribe from our emails or opt-out of analytics cookies. Withdrawal of consent will not affect the lawfulness of processing already carried out, but it will prevent us from continuing the processing in question. If you withdraw consent for a necessary aspect (like certain sensitive data needed to use the service), we will advise if we need to deactivate your service in response.
Non-Discrimination (California): If you exercise any of your rights under the CCPA/CPRA, we will not discriminate against you. That means we won't deny you services, charge you different prices, or provide a lesser quality of service because you exercised your privacy rights. It's possible that deletion of certain data might limit aspects of the service – e.g. if you ask us to delete your account info, you will not be able to log in – but we will inform you of such consequences and it's your choice.
Right to Opt-Out of Sale/Sharing (California): We do not sell personal information and as such, we do not offer a "Do Not Sell My Info" link because it is not applicable – we confirm we have not sold anyone's personal data in the last 12 months. We also do not "share" your personal information for cross-context behavioral advertising. If in the future we consider selling or sharing data, we will update our practices and give you a chance to opt-out.
These rights are not absolute – they can be subject to certain legal conditions and exceptions. For example, we might not delete data immediately if we are required to keep it, or we might decline a request for access if it adversely affects the rights of others.
How to Exercise Your Rights: You can exercise many of these rights through the Service directly:
For any rights that cannot be self-serviced, please send a request to legal@cvat.ai with the subject “Privacy Request”. Please describe the nature of your request.
Verification Process: To protect your privacy and security, we need to verify your identity before fulfilling your request. Our verification process typically involves:
For account holders: Confirming your identity through your login credentials or the email associated with your account
For non-account holders: Requesting information that matches what we have on file, such as email address, name, and other identifiers
For sensitive requests (like deletion): We may require additional verification steps, such as responding to a confirmation email or providing additional identifying information
We aim to complete the verification process within 5 business days. We will never ask for sensitive personal information like passwords or payment details during verification.
We will respond to your request within the time frame required by law (30 days for GDPR requests, 45 days for CCPA/CPRA requests). If we need more time allowed in certain cases, we will let you know the reason and extension period..
Our Service may contain links to third-party websites or integrate with third-party services that are outside our control. For example:
If you click on a link to any external site or use an external service, that third party’s privacy policy will govern your activity on their platform. We are not responsible for the privacy practices or content of third-party sites or services. We recommend you review the privacy policies of any third-party site you visit or service you use.
Our Service is not intended for use by children under the age of 18. We do not knowingly collect personal information from anyone under 18 years old. If you are under 18, please do not register an account or provide any personal data to us.
If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information promptly from our records, unless we are legally obligated to retain it.
If you are a parent or guardian and you believe your child under 18 has provided personal information to us, please contact us at legal@cvat.ai. We will investigate and delete the information if found.
We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, and other factors. We will not reduce your rights under this Policy without your explicit consent.
If we make material changes, we will provide you with notice – for example, by sending an email to the address associated with your account and/or by placing a prominent notice on our website or within the application prior to the change becoming effective. The notice will outline the key changes and, if required, we will obtain your consent.
We indicate the effective date of the Privacy Policy at the top. Previous versions of the Privacy Policy from the past 24 months will be made available upon request for your reference.
We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after the updated Policy has become effective (after notice) will signify your acceptance of those changes. If you do not agree to the updated terms, you should stop using the Service and may delete your account.
If you have any questions, concerns, or requests regarding this Privacy Policy or how CVAT.ai handles your personal data, please contact us:
We will respond to your inquiries as soon as reasonably possible, and at most within any timeframe required by law. Your feedback and trust are important to us – if you feel that we’re not abiding by this Privacy Policy or have any suggestions for improvement, please let us know.
.svg)
