Your visitors’ messages deserve care.
Cayve reads what strangers type into your website, so we keep as little as we can, for as short a time as we can, and we tell you exactly what that is.
What Cayve receives
- The fields of the submitted form, comment, review or sign-up.
- The sender’s IP address and browser, the page and the form.
- If you switch it on, a typing summary: counts of key presses, pastes and pointer movement. Never what was typed.
How long it’s kept
- Message text, names and email addresses are deleted after 30 days.
- The decision, its score and its reasons stay, so your history still makes sense.
- Held messages stay in your own WordPress database for 90 days for your review.
Learning, with consent
- A scrubbed copy of each message helps Cayve learn: names, email addresses, phone numbers, links and address fields removed.
- Copies are encrypted and kept up to 12 months.
- An account owner or admin can switch “Help Cayve learn” off; doing so deletes the copies.
Keys and sign-in
- You sign in with a 6-digit code sent to your email. There is no password to leak or reuse.
- API keys are shown once, when created. Cayve stores only a keyed hash, never the key itself.
- Test keys give fixed answers and are never counted, so you can build safely.
The WordPress plugin
- Every release is signed. A site installs an update only if its checksum and signature match Cayve’s published key.
- Automatic updates are on by default and can be switched off; critical security fixes always install.
- If Cayve can’t be reached, forms keep working and messages are checked afterwards.
Access in your account
- Owners can do everything, including billing. Admins manage sites, keys and the team. Members can see everything and mark messages.
- The Activity page records who changed what, and when.
- Ask Cayve can only read what the person asking can see, and can’t change anything.
What Cayve never does
- Never shows a visitor a CAPTCHA or asks them to do anything extra.
- Never records keystrokes or what someone typed before they pressed send.
- Never sells or shares your messages for advertising.
- Never shows the reasons for a decision to the person who submitted the form.
Found a security problem?
Please tell us before telling anyone else. Email hello@cayve.co with “Security” in the subject and as much detail as you can. We’ll reply as quickly as we can and keep you updated until it’s fixed.
Questions about data or security?
We’re happy to answer them before you sign up.