Privacy policy

Cayve is a spam protection service operated by HJI Technologies, LLC (“we”, “us”). This policy explains what information we handle, why, how long we keep it and the choices you have. It covers two groups of people: our customers, who use Cayve to protect their websites, and the visitors whose form submissions, comments, reviews and sign-ups those websites send to Cayve to be checked.

Information about our customers

When you create an account and use the dashboard, we handle:

• Account details: your name, email address, the name of your account and the people you invite.
• Site details: the websites you add, their settings and rules, and the API keys you create (we store only a keyed hash of each key).
• Billing details: your plan and billing history. Card details are collected and stored by our payment provider; we never see your full card number.
• Usage and activity: how many checks your sites make, and a record of changes made in your account, such as who created a key or changed a rule.
• Technical data: IP address, browser and error reports when you use the dashboard, used to keep it secure and working.

We use this to provide the service, sign you in, bill you, answer your questions, keep the service secure, and tell you about important changes. We don’t sell it, and we don’t use it for advertising.

Information in the messages we check

When a customer’s website sends a submission to Cayve, we receive:

• The fields of the submission, such as a name, email address, phone number and message.
• The sender’s IP address and browser identification, the page and the form.
• Evidence the page collected about how the form was filled in, such as how long it was open and, if the customer has switched it on, a summary of typing activity (counts of key presses, pastes and pointer movement, never the keys pressed).

We use this only to decide whether the submission is spam, to show the customer that decision and its reasons, to protect other Cayve customers from the same spam, and to improve how well Cayve detects spam. The customer who runs the website decides what their forms collect and is responsible for telling their visitors; for this information, we act on the customer’s behalf.

How long we keep it

• Message text, names and email addresses are deleted from Cayve 30 days after the check. The decision, its score and its reasons are kept so the customer’s history still makes sense.
• Learning copies. Unless the customer switches off “Help Cayve learn”, we keep a scrubbed copy of each message for up to 12 months to improve spam detection. Before it is stored, the sender’s name, email addresses, phone numbers, links and address fields are removed, and the copy is encrypted. Switching the setting off deletes the copies for that account.
• Network signals. To recognize the same spam across websites, we keep one-way fingerprints of messages and senders, which can’t be turned back into the original text.
• Account information is kept while your account is open and for as long afterwards as we need it for legal, tax and accounting reasons.

Ask Cayve

Ask Cayve, the assistant in the dashboard, answers questions using the parts of your account needed to answer them. To do this it uses an AI model provider, which processes that information only to produce the answer, under a contract that doesn’t allow it to use the information to train its models.

Who we share it with

We use a small number of service providers to run Cayve, each only for its job and under contract:

• hosting, databases and encrypted storage;
• email delivery, for sign-in codes and notifications;
• payment processing;
• error monitoring;
• an AI model provider, for Ask Cayve.

We may also disclose information if the law requires it, or to protect the rights and safety of our customers, the public or ourselves. If Cayve is ever sold or merged, this policy will continue to apply to the information we hold.

Security

Information is sent over encrypted connections. Sign-in uses one-time codes instead of passwords, API keys are stored only as keyed hashes, learning copies are encrypted, and access within an account is limited by role. See our security and privacy page for more.

Your choices and rights

Customers can update account details in the dashboard, switch off “Help Cayve learn”, delete sites, and ask us to close their account and delete their information. Visitors whose messages were checked should contact the website they submitted to first, since that business controls the information; we will help them respond. Depending on where you live, you may have rights to access, correct, delete or object to the use of your information. To make a request, email hello@cayve.co.

Children

Cayve is a business service and isn’t meant for children. We don’t knowingly collect information from children for our own purposes.

Changes

If we make material changes to this policy, we’ll update the date above and tell customers by email or in the dashboard before the changes take effect.

Contact

Questions about privacy: hello@cayve.co.