Privacy Policy

1. Introduction

Involvyn (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI specialist platform, including our website, dashboard, API, mobile applications, and related services (collectively, the “Platform”).

By using Involvyn, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Account Information

• Name, email address, and profile photo (via Firebase Authentication or email/password signup)
• Organization name and membership details
• Payment and billing information processed through Stripe
• Communication preferences and notification settings

2.2 Content You Provide

• Conversations and messages with AI specialists
• Resume data (name, contact info, work history, education, skills) submitted through our resume builder
• Documents, files, images, and media uploaded to the Platform
• Feedback, support requests, and survey responses
• Blog posts, career listings, and other content created via admin tools

2.3 Third-Party Integration Data

When you connect external services, we store the credentials and data needed to maintain those connections:

• OAuth tokens and API keys for connected services (Google Workspace, Reddit, Slack, LinkedIn, Twitter/X, TikTok, GitHub, Jira, Asana, Stripe, Vercel, and others)
• Messaging platform data from WhatsApp, Telegram, and email (SMTP) integrations — including messages sent and received on your behalf
• Database credentials for connected MongoDB or PostgreSQL instances (encrypted at rest)
• Custom API credentials you provide for user-defined integrations (encrypted at rest)
• Integration configuration, scopes, and connection metadata

2.4 AI Specialist Data

• Specialist configurations, system prompts, tool assignments, and knowledge bases
• Conversation history and tool call logs
• Scheduled job configurations and execution results
• Workflow definitions and automation rules
• Performance metrics and usage analytics

2.5 Automatically Collected Information

• IP address, browser type, operating system, and device information
• Pages visited, features used, and interaction patterns
• Error reports and performance data
• Referral sources and session duration

3. How We Use Your Information

• Provide, operate, and improve the Platform and its features
• Process your conversations through AI language models to generate specialist responses
• Execute scheduled jobs and background tasks on your behalf
• Connect to and interact with third-party services you have authorized
• Generate images, videos, audio, and other media using AI tools when requested
• Send and receive messages on messaging platforms you have connected
• Post, comment, and interact on social media platforms on your behalf when authorized
• Process payments and manage your subscription
• Send transactional emails, notifications, and support communications
• Monitor platform health, detect abuse, and enforce our terms
• Analyze usage trends to improve our services

4. Third-Party AI and Service Providers

To provide our AI specialist capabilities, your conversations and content may be processed by the following third-party services:

AI Language Models

• Anthropic (Claude) — processes conversations to generate specialist responses
• OpenAI (GPT, DALL-E, Sora) — processes conversations, generates images, and generates video
• Google (Gemini) — processes conversations and generates images

Media Generation

• ElevenLabs — text-to-speech audio generation and sound effects
• Mubert — AI music and soundtrack generation

Connected Platforms

• Google Workspace — Gmail, Calendar, Drive, Docs, Sheets, Slides, YouTube
• WhatsApp & Telegram — messaging on your behalf
• Reddit — browsing, posting, and commenting
• Twitter/X — posting and social engagement
• LinkedIn — profile management and posting
• TikTok — video content publishing
• GitHub — repository and issue management
• Slack — messaging and file sharing
• Jira & Asana — project and task management
• Vercel — deployment management

Infrastructure & Storage

• Vercel — frontend hosting and blob storage for uploaded files and images
• Railway — backend application hosting and database
• Firebase (Google) — user authentication
• Convex — real-time data synchronization
• Stripe — payment processing (we do not store your full card details)
• Cloudflare — CAPTCHA verification (Turnstile) and security

Each of these providers has their own privacy policies governing how they handle data. We encourage you to review their policies. We select providers that maintain appropriate data protection standards.

Google Workspace API — AI/ML Training Disclosure

5. Social Media and Messaging Automation

When you authorize integrations with social media or messaging platforms, our AI specialists may perform actions on your behalf, including:

• Reading and replying to messages on WhatsApp, Telegram, Slack, and email (SMTP)
• Browsing subreddits, posting, commenting, and voting on Reddit
• Posting to Twitter/X, LinkedIn, and TikTok
• Reading and creating content in Google Workspace (Gmail, Calendar, Drive, Docs, Sheets, Slides)
• Uploading and managing videos on YouTube
• Managing repositories, issues, and pull requests on GitHub
• Managing tasks and projects on Jira and Asana
• Managing deployments on Vercel
• Querying connected databases (MongoDB, PostgreSQL)
• Calling custom API endpoints you have configured

Important: These actions are performed only when you explicitly authorize them or configure automated workflows. You retain full control over which integrations are active and can disconnect them at any time.

Content posted or sent on your behalf through these integrations is governed by the respective platform's terms of service and privacy policy.

6. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in the following circumstances:

• Service Providers: With trusted third-party providers who process data on our behalf (as listed in Section 4) under contractual obligations to protect your data
• Authorized Integrations: With third-party platforms you have explicitly connected and authorized
• Organization Members: With other members of your organization when using shared workspaces and team features
• Legal Requirements: When required by law, court order, or to protect our rights, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with advance notice to affected users
• With Your Consent: When you explicitly authorize sharing

7. Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted over HTTPS/TLS encryption
• Sensitive credentials (API keys, tokens, passwords) encrypted at rest using AES-256
• Database access restricted with role-based controls
• Regular security assessments and dependency updates
• Session management with token expiration and rotation
• Infrastructure hosted on SOC 2 compliant providers

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information and account
• Portability: Request your data in a structured, machine-readable format
• Restriction: Request that we limit processing of your information
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time
• Opt-out: Unsubscribe from marketing communications via the link in any email

To exercise these rights, contact us at support@involvyn.com. We will respond within 30 days.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• The right to know what personal information is collected, used, and shared
• The right to delete personal information held by us
• The right to opt out of the sale of personal information (we do not sell your data)
• The right to non-discrimination for exercising your privacy rights

10. Cookies and Tracking Technologies

• Essential Cookies: Required for authentication, session management, and basic functionality
• Analytics Cookies: Help us understand usage patterns and improve our services
• Preference Cookies: Remember your settings, theme, and language preferences

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

11. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal and regulatory obligations
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law. Conversation logs and specialist data are permanently deleted. Backup copies may persist for up to 90 days before being purged.

Third-party integration credentials are deleted immediately upon disconnection or account deletion.

12. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place, including standard contractual clauses where applicable, to protect your information during transfer.

13. Children's Privacy

Our Platform is not intended for children under 13 years of age (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@involvyn.com and we will promptly delete it.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Post the updated policy on this page with a new “Last updated” date
• Notify you via email or in-app notification for significant changes

Your continued use of the Platform after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or have concerns about our data practices, please contact us: