Last Updated: October 4, 2026

Pervaziv AI ("Pervaziv AI," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit pervaziv.com, use our applications, developer tools, browser extensions, mobile applications, cloud services, AI Code Review, DevSecOps, Enterprise AI features, or related support and communications (collectively, the "Services").

This Policy applies when Pervaziv AI determines the purposes and means of processing personal information. When an organization uses the Services under an enterprise agreement and submits personal information for processing, that organization may be the controller or business and Pervaziv AI may act as its processor or service provider. In that case, the organization’s privacy notice and its agreement with Pervaziv AI govern that processing.

1. Information We Collect

We may collect and process the following categories of personal information:

a. Information You Provide Directly:

• Account and profile information: name, email address, username, organization, role, profile image, and sign-in or authentication information.
• Billing and transaction information: billing contact, subscription, plan, transaction status, and limited payment-related identifiers. Payment processors, app stores, and marketplaces may collect payment-card or bank information directly under their own policies.
• Customer Content: prompts, messages, code, files, screenshots, repository content, pull requests, security findings, connector results, task history, and other material you choose to submit to the Services.
• Configuration and connection information: selected repositories, integrations, enterprise connectors, project settings, and permissions you authorize.
• Communications: support requests, feedback, survey responses, and other correspondence.
• Contacts or collaboration information: information you choose to provide when inviting or working with other users.

b. Information We Collect Automatically:

• Device and usage information: device, browser, operating system, application version, language, general configuration, IP address, approximate location inferred from IP address, dates and times, referring URLs, pages or features viewed, links selected, and interaction events.
• Service and security logs: account, session, authentication, diagnostic, crash, performance, audit, security, subscription, entitlement, and product-usage information.
• Cookies and similar technologies: cookie, local-storage, software-development-kit, and similar technology identifiers used for authentication, security, preferences, analytics, and core functionality.

c. Information from Other Sources: We may receive information from your employer, organization administrator, team members, identity providers, repositories and other connectors you authorize, app stores, marketplaces, payment processors, resellers, service providers, and public sources where permitted by law.

d. Sensitive Information: Please do not submit sensitive personal information, regulated data, secrets, or third-party content unless it is necessary for your permitted use of the Services and you are authorized to provide it. Customer Content may contain information a customer chooses to submit. Enterprise customers should use available controls and contractual safeguards for regulated data.

We may aggregate or de-identify information so that it cannot reasonably be linked to you. We may use and disclose de-identified information for lawful purposes and will not attempt to re-identify it except to test our de-identification safeguards or as permitted by law.

2. How We Use Your Information

We may use personal information to:

• provide, operate, maintain, secure, and support the Services;
• authenticate users, administer accounts, enforce permissions, process transactions, and synchronize authorized work across supported products and devices;
• process Customer Content and perform the tasks you request;
• communicate about accounts, security, transactions, product updates, and service changes;
• monitor reliability, diagnose errors, prevent abuse, investigate security incidents, and enforce our agreements;
• improve usability, quality, accessibility, performance, and features using aggregated, de-identified, synthetic, or otherwise lawfully available data;
• send marketing communications where permitted by law and subject to available opt-out rights;
• comply with law, legal process, and accounting obligations; and
• carry out another purpose disclosed when information is collected or with your consent.

We do not use Customer Content to train a generalized or shared AI model unless the customer expressly opts in or a written agreement permits that use. We may process Customer Content through a model or infrastructure provider selected by Pervaziv AI or an authorized organization to provide the requested service, address abuse, maintain security, or comply with law, subject to applicable contractual and technical controls.

3. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process personal data only where we have a lawful basis, including:

• Contractual Necessity: to provide the Services you request, administer your account, process a transaction, or take steps at your request before entering into a contract.
• Consent: where you have given consent, such as for optional marketing or cookies where consent is required. You may withdraw consent at any time; withdrawal does not affect processing that was lawful before withdrawal.
• Legitimate Interests: to operate, improve, secure, and defend the Services; prevent fraud and abuse; communicate with customers; and manage customer relationships, where those interests are not overridden by your rights and interests.
• Legal Obligation: to comply with applicable law, legal process, tax, accounting, recordkeeping, and regulatory requirements.
• Vital or Public Interests: where applicable law permits processing to protect vital interests or carry out a task in the public interest.

Where Pervaziv AI acts as a processor for an enterprise customer, we process personal data under that customer’s documented instructions and the applicable data-processing agreement, unless law requires otherwise.

4. California Privacy Rights (CCPA/CPRA Compliance)

This section supplements the rest of this Policy for California residents and applies to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), covers Pervaziv AI’s processing.

Notice at Collection. At or before collection, we provide notice of the categories of personal information we collect and the purposes for which we use them. The categories are described in Section 1; the purposes are described in Section 2; and the retention criteria are described in Section 7. We do not sell or rent personal information. We do not share personal information for cross-context behavioral advertising. If these practices change, we will provide legally required notice and opt-out methods before doing so.

California residents may have the following rights, subject to applicable exceptions and verification requirements:

• Right to Know and Access: request the categories and specific pieces of personal information collected, the sources, purposes, and categories of third parties to whom it was disclosed.
• Right to Delete: request deletion of personal information we collected, subject to exceptions such as completing a transaction, security, legal compliance, or exercising legal rights.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out: opt out of sale or sharing of personal information if those activities occur. We honor opt-out preference signals, including Global Privacy Control, where legally required.
• Right to Limit: limit certain uses and disclosures of sensitive personal information where the right applies.
• Right to Non-Discrimination: receive equal treatment for exercising a privacy right.
• Authorized Agent and Appeal: use an authorized agent where permitted and appeal a denied request by contacting us with "Privacy Appeal" in the subject or request category.

To exercise a CCPA/CPRA right, use our Contact Us page and identify the right you wish to exercise and the account or Service involved. We may verify your identity and authority before acting. We will respond within the time required by applicable law and explain available appeal rights if we deny a request. We do not offer financial incentives or price differences in exchange for personal information unless we first provide any notice and obtain any consent required by law.

California’s "Shine the Light" law may permit California residents to request information about disclosure of personal information to third parties for their direct marketing. We do not disclose personal information to third parties for their independent direct marketing as described by that law.

5. How We Share Your Information

We may disclose personal information to:

• Service Providers and Processors: providers of hosting, AI processing, authentication, security, analytics, communications, support, payment, or other services on our behalf.
• Organization Administrators and Authorized Users: where an account is managed by an employer or other organization.
• Third-Party Services You Direct Us to Use: repositories, connectors, marketplaces, identity providers, and other services you authorize.
• Professional Advisers and Authorities: advisers, auditors, insurers, government authorities, or other parties when reasonably necessary to comply with law, enforce agreements, investigate fraud or abuse, protect rights and safety, or establish and defend legal claims.
• Transaction Participants: parties involved in a financing, merger, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality protections.

We do not disclose Customer Content to third parties for their independent marketing. Third-party services operate under their own terms and privacy notices, and their retention or processing may continue as allowed by those notices and applicable law.

6. Cookies, Analytics, and Privacy Signals

We use necessary cookies and similar technologies for authentication, security, preferences, and core functionality. With consent where required, we may use analytics or marketing technologies to understand use of the Services and measure communications. You may manage cookies through available product controls or browser settings; disabling certain cookies may impair functionality.

Because we do not sell or share personal information for cross-context behavioral advertising, we do not currently provide a separate "Do Not Sell or Share My Personal Information" link. Where legally required, we recognize opt-out preference signals such as Global Privacy Control. We do not respond to older "Do Not Track" signals in a uniform way because no common industry standard governs them.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, honor customer settings and contracts, maintain security and audit records, resolve disputes, enforce agreements, and satisfy legal, tax, and accounting obligations. Retention depends on the type of information, product configuration, sensitivity, risk, contractual requirements, and applicable law.

Customer Content is retained according to product settings, the applicable plan, and any enterprise agreement. Account, billing, security, support, and legal records may be retained after account closure when reasonably necessary. Information may remain for a limited period in protected backups before scheduled deletion. We may retain aggregated or de-identified information where permitted by law.

8. Your Data Protection Rights (GDPR Compliance)

If you are located in the European Union, European Economic Area, United Kingdom, or Switzerland, you may have the following rights under applicable data-protection law:

• Access: request confirmation of processing and a copy of your personal data.
• Rectification: request correction of inaccurate or incomplete personal data.
• Erasure: request deletion in circumstances provided by law.
• Restriction: request restriction of processing in circumstances provided by law.
• Portability: receive certain personal data in a structured, commonly used, machine-readable format or request its transfer where technically feasible.
• Objection: object to processing based on legitimate interests, including direct marketing.
• Withdraw Consent: withdraw consent at any time where processing is based on consent.

To exercise these rights, use our Contact Us page. We may request information needed to verify your identity and authority. You may also lodge a complaint with the data-protection authority in your place of residence, work, or the location of an alleged infringement.

9. International Data Transfers

Pervaziv AI and its providers may process information in the United States and other countries whose data-protection laws may differ from those where you live. Where required, we use recognized transfer mechanisms and safeguards, such as standard contractual clauses and supplementary protections. Contact us for information about applicable safeguards.

10. AI Features and Automated Processing

The Services may process Customer Content to generate code, text, recommendations, findings, summaries, or other output. AI-generated results may be inaccurate, incomplete, or unsuitable for a particular purpose. Human review is required before relying on an output for a consequential decision. The Services are not intended to make decisions that produce legal or similarly significant effects about a person unless an applicable agreement expressly authorizes that use and required notices, assessments, and safeguards are in place.

11. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication, monitoring, and protections appropriate to the nature of the information. No system, network, or transmission is completely secure, and we cannot guarantee absolute security. You are responsible for protecting credentials, devices, and authorized connections and for notifying us promptly of suspected unauthorized access.

12. Third-Party Services and Links

The Services may link to or interoperate with third-party sites, models, repositories, marketplaces, and services. Pervaziv AI is not responsible for a third party’s privacy or security practices. Review that party’s terms and privacy notice before authorizing access or submitting information.

13. Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from a child under 13 without legally required parental consent. The Services are not intended for anyone below the minimum age required to consent to data processing in their jurisdiction. If you believe a child submitted personal information contrary to this section, contact us so we can investigate and delete it where required.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, law, or our practices. We will post the revised Policy with an updated effective date and provide additional notice where required. Material changes apply prospectively unless law permits otherwise.

15. Contact Us

For privacy questions, requests, or complaints, use Pervaziv AI Contact Us. Include "Privacy" in the subject or request category. Do not include passwords, access tokens, or unnecessary sensitive information.

pervaziv.com, Pervaziv AI