Privacy Policy

1. Data we collect

We collect only the data needed to provide and secure the Carvin service:

• Account data: name, email address, role, employer/venue and preferred language.
• Phone number: when you or your employer add a mobile number to your account, we use it to send SMS invitations and one-time login codes.
• Usage data: content viewed, learning paths completed, quiz results and adoption metrics, so managers can track training progress.
• Technical data: device type, browser, IP address and logs required to keep the service reliable and secure.
• Contact requests: information you submit through our contact or demo booking forms.

2. How we use your data

We use personal data to:

• Create and manage your account and deliver the operational standards, recipes and training assigned to your role.
• Send transactional SMS messages: invitations to join your organization’s workspace and one-time verification codes to sign in.
• Provide progress and adoption reporting to your organization’s managers.
• Respond to your requests, provide support and communicate about the service.
• Maintain security, prevent fraud and comply with legal obligations.

3. SMS and phone numbers

Phone numbers are used exclusively for account-related SMS: workspace invitations and login verification codes. We do not send marketing or promotional text messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Phone numbers and SMS consent are never sold, rented or shared for any marketing purpose. Information may be shared only with the SMS delivery providers that are required to transmit the messages you requested.

You can opt out of SMS at any time by replying STOP to any message. Reply HELP for assistance. Message and data rates may apply.

4. Sharing of data

We share personal data only with:

• Your organization: managers and administrators of the workspace you belong to can see your profile and training progress.
• Service providers acting on our behalf (hosting, SMS delivery, email delivery, analytics), bound by confidentiality and data-processing obligations.
• Authorities when required by law or to protect our rights, users or the public.

5. Data protection

We protect your data with encryption in transit and at rest, role-based access controls, audit logging and regular security reviews. Access to personal data is limited to staff and providers who need it to operate the service.

We retain personal data for as long as your account is active or as needed to provide the service to your organization, then delete or anonymize it unless a longer retention is required by law.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to or restrict certain processing. To exercise these rights, contact us through the contact page on carvinapp.com or ask your organization’s administrator.

7. Changes and contact

We may update this policy from time to time. Significant changes will be announced in the app or by email. Questions about this policy can be sent to Carvin Software LLC via carvinapp.com/contact.