Privacy Policy

Last updated: May 2, 2026

Cuvion CRM ("we", "Cuvion") values the privacy of your personal data. This Privacy Policy explains the personal data we collect, use, and share when you visit cuvioncrm.com, register for our product, or interact with our marketing chatbot.

1. Data Controller

Cuvion CRM is the controller of personal data we collect through our website and services. Contact: privacy@cuvioncrm.com

2. Information We Collect

Information you provide directly: Name, surname, email, company name, phone, message content — via registration form, contact form, and chatbot lead form.
Automatically collected information: IP address (stored as a hash), browser type, pages visited, cookie preferences.
Chatbot interaction: Questions you ask, assistant answers, message timestamps (90 days, or 5 years if converted to a lead).
Account data: If you create a Cuvion CRM account: user information, usage logs, billing data (processed via LemonSqueezy; we do not store card information).

3. How We Use Your Information

To provide and improve our services
To answer your questions (chatbot and manual support)
For account security, registration confirmation, and technical notifications
To comply with legal obligations (tax, KVKK Authority audits, etc.)
For marketing email communications only with your express consent (which you can revoke at any time)

4. Third-Party Service Providers

We share data with the following trusted third parties to provide our service:

Cloudflare Turnstile (USA) — Bot protection (anti-spam). Only verification tokens are shared, not personal data.
Google Gemini AI (USA) — Chatbot response generation. Question text is sent; PII such as email, phone, government ID numbers are automatically masked.
OpenAI (USA) — Backup AI provider (when Gemini is unavailable). Same PII masking applies.
LemonSqueezy (USA) — Payment processing. Card information goes directly to them; we do not store it.
SMTP provider — For registration and notification emails (operational communication).

International data transfers are made under legal safeguards (GDPR Standard Contractual Clauses, KVKK Article 9 adequacy decisions).

5. Data Retention

Chatbot conversations: 90 days (5 years if converted to a lead)
Contact form submissions: 5 years (for KVKK audit purposes)
Account data: While the account is active + 30 days after deletion request
Anti-bot event logs: 90 days (KVKK-compliant retention)

6. Cookies

Our website uses functional cookies (session management, language preference, chatbot state). We do not currently use analytics or marketing tracking cookies. Details: Cookie Policy.

On your first visit we display a cookie preferences banner; you can change your preferences at any time via the "Cookie Preferences" link in the footer.

🇹🇷 Additional Rights for Turkish Residents (KVKK)

Under Turkish Personal Data Protection Law No. 6698 ("KVKK") Article 11, you have the following rights:

Right to know whether your data is being processed
Right to know the purposes of processing
Right to know third parties to whom data is transferred (domestic/international)
Right to rectification of incomplete or incorrect data
Right to erasure under KVKK Article 7
Right to object to outcomes of automated processing
Right to compensation for damages caused by unlawful processing

To exercise your KVKK rights: privacy@cuvioncrm.com. Detailed KVKK notice (Turkish): KVKK Aydınlatma Metni

🇪🇺 EU/EEA/UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation ("GDPR") provides you with the following rights:

Right of access (Article 15)
Right to rectification (Article 16)
Right to erasure / "right to be forgotten" (Article 17)
Right to restriction of processing (Article 18)
Right to data portability (Article 20)
Right to object (Article 21)
Right to lodge a complaint with a supervisory authority

Detailed information: GDPR Notice. To exercise your rights: privacy@cuvioncrm.com

🇺🇸 California Residents (CCPA/CPRA)

Cuvion CRM does not sell your personal information. California residents under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) have the right to:

Know what personal information we collect, use, and disclose
Request access to or deletion of your personal information
Opt out of the sale or sharing of personal information (we do not sell or share)
Non-discrimination when exercising your CCPA rights

To exercise these rights: privacy@cuvioncrm.com

7. Children's Privacy

Our service is not intended for children under 18. We do not knowingly collect data from anyone under 18.

8. Policy Updates

This policy may be updated from time to time. We will notify you of significant changes via the website and/or email. The "Last updated" date at the top of this page indicates the most recent revision.

9. Contact

For all privacy-related inquiries: privacy@cuvioncrm.com