Privacy Policy

This Privacy Policy explains how Fenvo AI (“we”, “us”, “our”) collects, uses, and protects personal data when you visit fenvo.ai (the “Site”). We are committed to handling your personal data lawfully and transparently under the EU General Data Protection Regulation (GDPR) and applicable US privacy laws. This policy applies to all visitors of the Site, including visitors located in the European Economic Area (EEA), the United Kingdom, and Switzerland.

The controller responsible for the processing of your personal data on this Site is:

[TODO: Fenvo legal entity name - e.g. Fenvo AI, Inc. or Fenvo AI LLC] [TODO: Street address, Austin, TX ZIP, USA] Email: [TODO: privacy contact - e.g. privacy@fenvo.ai]

You can contact us at the email above with any questions about this policy or about how your personal data is handled.

Because we are established outside the EU/EEA but offer services to persons located within the EU/EEA, we have appointed the following representative in the Union under GDPR Article 27:

[TODO: Name of appointed EU Art. 27 representative - must be a natural or legal person established in an EU member state] [TODO: Full EU address] Email: [TODO: EU rep contact email]

Our EU Representative can be contacted directly by data subjects or supervisory authorities on all matters related to the processing of personal data under the GDPR.

We process only the minimum data needed to operate the Site and communicate with you.

4.1 Server logs (automatic). When you visit fenvo.ai, our hosting provider Vercel Inc. automatically records your IP address, user-agent string, referring URL, and timestamp. These logs are used for security, fraud prevention, and diagnosing technical issues. Logs are retained by Vercel per the Vercel Data Processing Agreement.

4.2 Clicking “Book a call” (cal.com redirect). Every “Book a call” button on this Site redirects to cal.com/fenvo, operated by Cal.com, Inc. (US). When you click one of these buttons, your browser sends a standard HTTP Referer header (containing the fenvo.ai URL) and your IP address to cal.com. Any further data you enter into cal.com (name, email, booking time) is collected by Cal.com under their own privacy policy.

4.3 Contact form placeholder. The contact form on this Site is currently a non-functional placeholder. The fields (name, phone, email, project details) are NOT transmitted anywhere when you click submit — the form displays a thank-you message but performs no network request. No data is stored, sent by email, or otherwise processed by us. Do not submit sensitive information via this form; please email us directly or book a call instead. We will replace this with a fully functional, fully disclosed form in a future update.

This Site uses one piece of client-side storage: a localStorage entry named “fenvo-cookie-consent” that remembers whether you have dismissed this cookie notice. Its value is either the literal string “accepted” or “rejected” and nothing else. We treat this entry as strictly necessary under EDPB Guidelines 01/2020 because it serves only to prevent the notice from reappearing on every page load; it does not track you, is never sent to any server, and does not itself require consent.

Beyond that single entry, this Site does not set any cookies, does not use sessionStorage, and does not fingerprint your browser. We do not run analytics, advertising, or marketing trackers. If we add any non-essential storage in the future, we will replace this notice with a functional consent tool and update this policy.

Third-party sites you reach from our links (such as cal.com) may set their own cookies and storage under their own policies.

We rely on the following legal bases under GDPR Art. 6(1):

• Legitimate interests (Art. 6(1)(f)) — for Vercel server logs, to operate and secure the Site. Our interest is running a reliable website; we weigh this against your interest in not having routine log data collected, and conclude the limited, short-retention logs are proportionate.

• Performance of a contract or pre-contractual steps (Art. 6(1)(b)) — when you click a “Book a call” link, data is transferred to cal.com at your initiative to schedule a call with us.

• Consent (Art. 6(1)(a)) — we will rely on consent for any future non-essential cookies or marketing communications; currently nothing on this Site requires your consent.

We are based in the United States. Our processors (Vercel Inc., Cal.com, Inc.) are also US-based. When you interact with this Site from the EU/EEA, your personal data may be transferred to and processed in the United States.

These transfers are safeguarded by the EU Standard Contractual Clauses (SCCs) with each processor and, where applicable, by their certification under the EU-U.S. Data Privacy Framework. You can request a copy of the applicable SCCs by emailing [TODO: privacy contact - e.g. privacy@fenvo.ai].

If you are located in the EU/EEA, the UK, or Switzerland, you have the following rights regarding your personal data:

• Right of access (Art. 15) — to know what data we hold about you. • Right to rectification (Art. 16) — to correct inaccurate or incomplete data. • Right to erasure / “right to be forgotten” (Art. 17) — to request deletion of your data. • Right to restriction of processing (Art. 18) — to limit how we use your data. • Right to data portability (Art. 20) — to receive your data in a structured, machine-readable format. • Right to object (Art. 21) — to object to processing based on legitimate interests. • Right to withdraw consent (Art. 7(3)) — where processing is based on consent, to withdraw it at any time. • Right to lodge a complaint with a supervisory authority (Art. 77) — you can contact your local EU data protection authority; a list is available at edpb.europa.eu.

To exercise any of these rights, email [TODO: privacy contact - e.g. privacy@fenvo.ai] or contact our EU Representative (section 3). We will respond within one month per GDPR Art. 12(3).

We do not collect or store personal data ourselves. Vercel server logs are retained per Vercel’s Data Processing Agreement (typically under 30 days rolling). If you book a call via cal.com, retention of that data is governed by Cal.com’s own privacy policy.

Our Site is served exclusively over HTTPS with TLS 1.3. We rely on Vercel’s infrastructure for transport security, DDoS protection, and platform-level hardening. Our processors operate under industry-standard security frameworks (ISO 27001, SOC 2 Type II).

As noted in section 4, we do not currently store personal data on systems under our direct control, which materially reduces the attack surface for personal data exposure.

We may update this Privacy Policy when our processing activities or legal obligations change. The “Last updated” date at the top of this page reflects the most recent substantive change. For material changes, we will provide notice on the Site homepage and, where possible, give affected users a reasonable period to review the changes before they take effect.

For any privacy-related question, request, or complaint, contact:

[TODO: Fenvo legal entity name - e.g. Fenvo AI, Inc. or Fenvo AI LLC] Email: [TODO: privacy contact - e.g. privacy@fenvo.ai] Managing representative: [TODO: Name of managing director / founder]

Or contact our EU Representative (section 3). You may also, at any time, lodge a complaint with your local EU data protection authority.