Civenza Privacy Policy
FINAL DRAFT — recommended for attorney sign-off before publishing.
Last updated: August 1, 2026
This Privacy Policy explains how Civenza, Inc. ("Civenza," "we," "us") collects, uses, and protects personal information in connection with the Civenza platform (the "Service"). It covers personal information about the people who use Civenza — not the strategic-planning content your organization stores in the Service, which is Customer Data governed by our Terms of Service.
1. Information We Collect
1.1 Account information. Name, work email, and organization when you or your admin creates your account.
1.2 Usage information. Log data such as IP address, browser type, and pages viewed, collected automatically to operate and secure the Service.
1.3 Billing information. If your organization subscribes to a paid plan, our payment processor (Stripe) collects payment details directly — Civenza never receives or stores your card number.
1.4 Content you provide. Anything you or your organization enters into the Service — plans, tasks, comments, uploaded documents. This is Customer Data, and your organization controls it as described in our Terms of Service.
1.5 Communications. If you email us or contact support, we keep that correspondence to respond and maintain a record.
2. How We Use Information
We use personal information to:
- Provide, maintain, and secure the Service, including authenticating you and enforcing the access controls described in our Architecture, Security & Reliability overview;
- Send transactional communications — task digests, billing notices, security alerts, and legal notices under our Terms;
- Respond to support requests;
- Improve the Service, including using aggregated, de-identified usage patterns as described in Section 6.2 of our Terms of Service;
- Comply with legal obligations and enforce our Terms.
We do not use personal information for advertising, and we do not sell it.
3. Who We Share Information With
3.1 Subprocessors. We share information with the service providers listed on our Subprocessors page, each bound to use it only to perform its function for Civenza.
3.2 Your organization. If you're a member of an organization's Civenza workspace, your name, role, and activity within that workspace are visible to other members of your organization as intended by the Service's design — that's not third-party sharing, it's how the product works.
3.3 Legal requirements. We may disclose information if required by law, subpoena, or valid legal process, or to protect the rights, safety, or property of Civenza, our customers, or others.
3.4 Business transfers. If Civenza is acquired or merges with another company, personal information may transfer as part of that transaction, subject to this Policy or a successor policy with comparable protections.
4. Cookies & Similar Technologies
We use cookies and similar technologies for authentication (keeping you signed in), security, and understanding how the Service is used. We don't use them for third-party advertising. You can control cookies through your browser settings, though blocking essential cookies may prevent you from signing in.
5. AI-Assisted Features
When you use a feature that processes your content with AI — for example, importing a strategic plan document — the content you submit for that action is sent to the AI provider listed on our Subprocessors page solely to perform the requested extraction. We do not permit that provider to use your content to train their general-purpose models. The AI's output is a suggestion for you to review and approve, never something Civenza publishes on your behalf without your review.
6. Your Rights & Choices
6.1 Access and export. You can access and export your organization's Customer Data at any time using the Service's built-in export tools, as described in our Terms of Service.
6.2 Correction. You can correct your account information directly in your profile settings, or by contacting us.
6.3 Deletion. You can request deletion of your account. As described in our Terms of Service, your login and profile are purged; personal references on shared organizational records are anonymized rather than deleted outright, to preserve your organization's records and reporting history; de-identified governance records are retained.
6.4 State privacy rights. If you're a resident of California or another state with a comprehensive privacy law, you may have additional rights to know, access, correct, or delete your personal information, or to opt out of certain processing. We don't sell personal information or engage in what those laws define as "sharing" for cross-context behavioral advertising, so several of those opt-out rights don't apply to how we operate — but you can still submit any request to legal@civenza.io and we'll respond as the law requires.
6.5 Marketing communications. Any non-essential marketing email we send includes an unsubscribe link. You can't opt out of essential account, billing, or security communications while your account is active.
7. Data Retention
We retain personal information for as long as your account is active, plus a limited period afterward as described in Section 6.3, and as needed to comply with legal obligations, resolve disputes, and enforce our agreements. Routine backups are retained on a rolling basis as described in our Architecture, Security & Reliability overview.
8. Security
We protect personal information with the safeguards described in our Architecture, Security & Reliability overview, including encryption in transit and at rest, database-enforced tenant isolation, and role-based access controls. No system is perfectly secure, and we'll notify affected customers of a confirmed data breach involving their personal information as required by applicable law.
9. Children's Privacy
The Service is intended for business and organizational use by adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 18.
10. International Users
Civenza and our subprocessors operate in the United States. If you access the Service from outside the U.S., your information will be processed in the U.S., which may have different data protection laws than your country.
11. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we'll give notice consistent with Section 15 of our Terms of Service.
12. Contact Us
Questions about this Policy or your personal information: legal@civenza.io, or Civenza, Inc., 101 S. Capitol Blvd, Suite 1100, Boise, ID 83702.