Legal
Privacy Policy
Last updated: August 19, 2026
1. Introduction
This Privacy Policy (“Policy”) describes how cvPal, Inc. (“cvPal,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with our websites, applications, MCP Server platform, and other services that link to this Policy (collectively, the “Services”), as well as your rights and choices regarding such information.
By accessing or using our Services, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use our Services.
2. Information We Collect
Information You Provide Directly
- Account and registration information, including your name, email address, password, and organization details
- Payment and billing information processed through our third-party payment provider (we do not store full payment card numbers)
- Content you upload, including dataset files, metadata, class labels, and annotation schemas
- Communications with us, such as support requests, feedback, and survey responses
- Workspace settings, team configurations, and user preferences
Information Collected Automatically
- Device and browser information, including device type, operating system, browser type, and unique device identifiers
- Log and usage data, such as IP address, pages visited, features used, timestamps, and referring URLs
- API and MCP tool invocation logs, including request metadata and performance metrics
- Cookies and similar tracking technologies (see our Cookie section below for more details)
3. How We Use Your Information
We process your personal information for the following purposes, as permitted by applicable law:
4. Data Security
We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:
- •Encryption of data in transit using TLS 1.2 or higher
- •Encryption of data at rest using AES-256
- •Regular security assessments and infrastructure audits
- •Access controls based on the principle of least privilege
- •Isolated storage environments for customer datasets
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.
5. MCP Service Usage and Analytics
When you use our MCP Server tools, we collect operational telemetry to ensure service reliability, enforce usage limits, and improve performance. This telemetry may include:
- •Tool invocation logs, including which tools were called and their execution status
- •Request volume and usage metrics tied to your subscription plan
- •Error diagnostics and performance benchmarks
- •Processing throughput and response time data
This data is used solely for service delivery, capacity planning, billing accuracy, and platform optimization. We do not use the content of your datasets for analytics purposes.
6. Data Retention
We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
Dataset files and generated outputs are retained for the duration of your active subscription. Upon account deletion, we will delete or anonymize your personal information within thirty (30) days, unless we are required to retain it to comply with applicable legal, tax, or regulatory obligations.
Aggregated and de-identified information that can no longer be used to identify you may be retained indefinitely for analytical and service improvement purposes.
7. Your Rights
Subject to applicable law, you may have the following rights with respect to your personal information:
Right of Access
You may request a copy of the personal information we hold about you.
Right to Rectification
You may request that we correct or update inaccurate or incomplete personal information.
Right to Erasure
You may request that we delete your personal information, subject to certain legal exceptions.
Right to Data Portability
You may request a copy of your data in a structured, commonly used, machine-readable format.
Right to Restrict Processing
You may request that we limit the processing of your personal information in certain circumstances.
Right to Object
You may object to the processing of your personal information for direct marketing or other purposes.
To exercise any of these rights, please contact us at privacy@cvpal.dev. We will respond to your request within the timeframe required by applicable law.
8. Third-Party Services
Our Services may contain links to or integrations with third-party services, including Hugging Face, Kaggle, Roboflow, and cloud storage providers. When you connect a third-party account, we access only the minimum data necessary to provide the requested functionality (such as public dataset metadata).
We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We may share information with service providers who assist us in operating our Services, subject to confidentiality obligations and data processing agreements.
This Policy does not apply to the practices of third parties that we do not own or control. We encourage you to review the privacy policies of any third-party services you access through our platform.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by email or by posting a prominent notice on our Services prior to the change becoming effective. The “Last updated” date at the top of this page indicates when this Policy was last revised. Your continued use of the Services after any changes constitutes your acceptance of the updated Policy.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: