Legal & Privacy

Effective Date: October 8, 2026

Privacy Policy Terms of Use Copyright Notice Data Deletion YouTube

Privacy Policy

Cavmir ("we," "our," or "us"), a brand of Trousdale Digital Technologies LLC, a Wyoming limited liability company, respects your privacy. This Privacy Policy explains what information we collect when you visit cavmir.com, how we use it, and the choices you have.

What We Collect

  • Contact information you voluntarily submit (name, email, phone) through our contact and inquiry forms
  • Usage data collected automatically: pages visited, time on site, browser type, device type, referring URL
  • Cookies and similar tracking technologies (Google Analytics, the Meta Pixel, etc.)
  • Messages you send to our AI chat assistant, together with the page you were on and a truncated IP address (see “AI Assistant Chat” below)
  • Comments and direct messages you send to Instagram and Facebook accounts that use our social service (see “Social Platform Data” below)
  • Details of YouTube channels that clients connect to our video publishing service (see “YouTube Channel Data” below)

How We Use It

  • To respond to inquiries and service requests
  • To improve website performance and user experience
  • To send service-related communications (never sold to third parties)
  • To analyze traffic patterns and optimize content

Cookies

We use cookies to understand how visitors use our site. You may disable cookies in your browser settings; some site features may be affected. We use Google Analytics — you may opt out via Google's opt-out tool.

Meta Pixel. If you accept cookies, we also load the Meta Pixel, a tag from Meta Platforms, Inc. It tells Meta which pages you visit and when you send us an inquiry, so we can measure our Facebook and Instagram ads and show our ads to people who have visited this site. It does not load if you decline or have not yet chosen. You can change your mind by clearing this site's data in your browser, and manage ads in your Facebook and Instagram settings. Meta's handling of that data is described in its Privacy Policy.

Third Parties

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share data with service providers (hosting, analytics, and the AI models named below) who process it on our behalf and are bound by confidentiality.

AI Assistant Chat (“Mira”)

This site offers an optional AI chat assistant. When you send it a message, your message and the assistant's reply are processed by our AI providers (Anthropic and Cloudflare) solely to generate a response. We store the conversation transcript, the page you were viewing, your approximate location (country), and a truncated IP address for up to 30 days. We use this to respond to enquiries, prevent abuse, and improve the assistant; our lawful basis is legitimate interest. We do not sell chat data, and we do not use it to train third-party public AI models. Please do not enter sensitive personal information — such as passwords or payment details — into the chat. You can request deletion of your chat data at any time by emailing [email protected].

Client Portal and Website Board

Clients sign in to the Cavmir client portal at cavmir.com/login. To run it we store your name, email address, business name, website address, and a securely hashed password, and we email you a one-time sign-in code when you log in.

The website board inside the portal is where a client and our team work through changes to the client's website. What you add there (cards, descriptions, comments, checklists, screenshots, markup, and files) is stored on Cloudflare's servers and can be seen only by the people on that board and by the Cavmir team. When you use Snap a page, our system opens the web address you enter in a secure browser and returns a picture of the page. Please use the Hide tool to blur anything private before you save a screenshot. When a client adds something to a board, the Cavmir team receives an email about it. Edit website & blog passes you to your website editor with a short-lived, single-use sign-in link, so you do not need a second password.

We use this information only to deliver our services to you, and we keep it while you are a client. You can ask us to delete a board and its files at any time by emailing [email protected]; we will do so within 30 days unless the law requires us to keep something. The portal pages use Google Analytics in the same consent mode as the rest of cavmir.com.

Social Platform Data (Facebook & Instagram)

Cavmir runs Instagram and Facebook accounts for client businesses and for itself through a Meta app called Social Publisher. The app does two jobs: it publishes posts the business approved, and it helps the business answer comments and direct messages. What we receive depends on the job.

Publishing. When a business connects its Facebook Page and Instagram professional account, we store the Page ID, the Instagram account ID, and an access token that lets us publish the posts the business approved to its own accounts. Access tokens are stored as encrypted secrets, never in client-facing pages or source code.

Comments and messages. When you comment on, or send a direct message to, an Instagram or Facebook account that uses our service, Meta sends us that comment or message: its text and any attachment, the time, your username or name, and the ID Meta assigns you for that business. We use it to answer common questions automatically, to pass anything about prices, bookings, payments or complaints to a person on the business's team, to keep the conversation in context, and to make sure no one is answered twice. Automated replies say that they come from an automated assistant, and you can ask for a person at any time. We only message people who messaged or commented first.

Who handles it. Replies are drafted by AI models from our service providers, currently Anthropic and Google. They receive the text of the comment or message, together with the business's own information such as its answers to common questions, only to draft a reply. Cloudflare hosts and stores the data. The business's staff and the Cavmir team can read conversations with that business. When we act for a client business, we handle this data on the client's behalf, and the client's own privacy policy also applies. Our lawful basis is legitimate interest in answering people who contact the business.

  • We do not sell, license, or transfer platform data to anyone else, and we do not use it for advertising
  • We do not use comments, messages, or any other platform data to train AI models
  • We do not collect follower lists, contact lists, or audience data

How long we keep it. We keep the text of comments, messages and our replies, and the names and IDs attached to them, for up to 90 days, then delete them. After that we keep only the comment and message IDs that stop us from answering the same message twice. We keep a business's Page ID, Instagram account ID and access token only while it uses the service, and delete them within 30 days of disconnection or cancellation.

Deleting your data. If you messaged or commented on an account we run, email [email protected] with your Instagram username or Facebook name and the account you contacted, and we will delete what we hold within 30 days. This does not remove anything from Instagram or Facebook; you can unsend a message or delete a comment there. Businesses can disconnect at any time from their dashboard, remove the app in their Facebook settings, or email [email protected]. Step-by-step instructions are at cavmir.com/data-deletion.

YouTube Channel Data (YouTube API Services)

Cavmir's video publishing service at video.cavmir.com lets a client business connect its own YouTube channel so that we can publish the videos the client approved. The service uses the YouTube API Services. By connecting a channel, you agree to the Google Privacy Policy, which governs how Google handles your data.

What we receive and store. When a client connects a channel, we ask Google for two permissions: to manage the channel's videos, captions and playlists (the youtube.force-ssl scope) and to read the channel's YouTube Analytics reports (the yt-analytics.readonly scope). We store the channel's ID, title, handle and profile image link, the permissions the client granted, and a refresh token that Google issues so we can act on the channel's behalf. For each video we upload, we store its YouTube video ID, its processing and publishing status, the ID of the caption track we added, and the IDs of the playlists we created or added it to. For the monthly report, we store the channel's daily views, watch time, average view duration and subscribers gained.

How we use it. We use this data only to:

  • upload the videos the client approved to the client's own channel, on the schedule the client approved, with the thumbnail, captions and playlist placement we made for each one
  • correct the title, description or tags of a video we uploaded when the client asks
  • confirm which channel is connected and tell the client when each video is live
  • report the channel's results to the client each month

Before we create a playlist, we look up the channel's playlists by title so that we never create the same playlist twice.

  • We never delete videos, we never read, post or delete comments, and we never change videos we did not upload
  • We do not sell, license, or transfer YouTube data to anyone else
  • We do not use YouTube data for advertising or to train AI models
  • We do not collect subscriber lists, comments, messages, or data about anyone other than the connected channel

Who can see it and how it is protected. Cloudflare hosts and stores the data. Only the client and the Cavmir team can see it. The refresh token is stored encrypted, and access tokens are kept only in memory while a task runs; neither ever appears in client-facing pages or source code.

How long we keep it. We refresh or delete the YouTube data we store at least every 30 days: channel details are refreshed daily, video status is refreshed weekly, statistics are deleted after 30 days, and data we can no longer refresh is deleted.

Revoking access. A client can disconnect at any time on its review page. Disconnecting revokes our access with Google and immediately deletes the token, the channel details, the stored statistics and the playlist IDs. You can also revoke Cavmir's access at any time in your Google Account's security settings at myaccount.google.com/permissions. If you revoke access there, we delete the token the next time our service tries to use it.

Deleting your data. “Erase my data” on the review page deletes everything above at once, together with the record of the videos we published and every file we stored for the client. You can also email [email protected]; we delete all data about your channel within 7 days and confirm by email. This does not remove anything from YouTube: videos already published stay on your channel until you delete them in YouTube Studio. Step-by-step instructions are at cavmir.com/data-deletion.

Children's Privacy (COPPA)

This site is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child under 13 has submitted personal data through our site, contact us immediately at [email protected] and we will delete it promptly.

California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information we collect and how it is used, to request deletion of their personal information, and to opt out of any sale of personal information. We do not sell personal information. To exercise these rights, contact [email protected]. We will respond within 45 days.

European Visitors (GDPR)

If you are in the European Economic Area (EEA), you have the right to access, rectify, erase, or port your personal data, to restrict or object to its processing, and to lodge a complaint with your national data protection authority. Our lawful basis for processing contact form data is legitimate interest in responding to service enquiries. Contact [email protected] to exercise your rights.

Brazilian Visitors (LGPD)

Under Brazil's Lei Geral de Proteção de Dados (LGPD), you have the right to confirm, access, correct, delete, or port your personal data, and to file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados). Contact [email protected] to exercise these rights. We will respond within 15 business days.

United Kingdom Visitors (UK GDPR)

If you are in the United Kingdom, your personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You have the right to access, rectify, erase, or port your personal data, to restrict or object to its processing, and to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. Contact [email protected] to exercise your rights.

UAE / Dubai Visitors (PDPL)

If you are in the United Arab Emirates, your personal data is processed in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). You have the right to access, correct, and request deletion of your personal data, and to be informed of how it is used. Contact [email protected] to exercise these rights.

South African Visitors (POPIA)

If you are in South Africa, your personal data is processed in accordance with the Protection of Personal Information Act (POPIA, Act 4 of 2013). You have the right to access and correct your personal information, to object to its processing, and to lodge a complaint with the Information Regulator at inforegulator.org.za. Contact [email protected] to exercise these rights.

Mexican Visitors (LFPDPPP)

If you are in Mexico, your personal data is processed in accordance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP). You have ARCO rights: to Access, Rectify, Cancel, and Object to the processing of your personal data. Contact [email protected] to exercise these rights. You may also file a complaint with the INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales).

Other US State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other US states with applicable privacy laws have the right to access, correct, delete, and obtain a copy of their personal data, and to opt out of any sale or targeted advertising. We do not sell personal information or use it for targeted advertising. To exercise any right, contact [email protected]. We will respond within the timeframe required by your state's law.

Data Retention

Contact form submissions are retained for up to 24 months. You may request deletion at any time.

Your Rights

You have the right to access, correct, or delete your personal data. Contact us at [email protected].

Changes to This Policy

We may update this policy periodically. The effective date at the top of this page reflects the most recent revision.

Contact

For privacy inquiries: [email protected]

Terms of Use

By accessing cavmir.com, you agree to these Terms of Use. If you do not agree, please do not use this site.

Use of This Website

This website is provided for informational purposes about Cavmir's services. You may not use this site for any unlawful purpose or in any way that could damage, disable, or impair the site.

No Warranties

The content on this site is provided "as is" without warranties of any kind. We make no representations regarding the accuracy or completeness of any information presented.

Limitation of Liability

Cavmir shall not be liable for any indirect, incidental, or consequential damages arising from your use of this website.

Third-Party Links

This site may contain links to third-party websites. We have no control over their content and accept no responsibility for them.

YouTube Video Publishing

Cavmir's video publishing service uses the YouTube API Services. By connecting a YouTube channel to Cavmir, or by using any Cavmir service that publishes to YouTube, you agree to be bound by the YouTube Terms of Service.

You confirm that you own the channel you connect, or are authorized by its owner, and that every video you approve follows YouTube's Community Guidelines. Cavmir uploads only the videos you approve, on the schedule you approve. You can cancel a video until it is uploaded, ask us to correct its title, description or tags afterwards, and disconnect your channel at any time.

When a video shows realistic footage that was generated or animated with AI, we mark it on YouTube as altered or synthetic content, as YouTube requires.

Where your agreement with Cavmir allows it, the description of each video Cavmir makes for you includes a line crediting Cavmir with a link to cavmir.com, and Cavmir may add your published videos to playlists on Cavmir's own YouTube channel. Without that permission in your agreement, Cavmir does neither. How we handle your channel's data is set out under “YouTube Channel Data” in the Privacy Policy above.

Governing Law

These terms are governed by the laws of the State of Florida, United States. Any disputes shall be resolved in Miami-Dade County, Florida.

Changes

We reserve the right to modify these terms at any time. Continued use of the site constitutes acceptance of the updated terms.

Contact

For legal inquiries: [email protected]