Privacy Policy
Effective June 14, 2026
This Privacy Policy explains how Cintrova LLC, operating as Cintrova (“we,” “us”), handles information when you use our website and platform (the “Service”). We keep it short and we don’t sell your data.
1. What we collect
Account information. Your name, email and the workspace details you provide when you sign up.
Payment information. Subscriptions are processed by Stripe. We receive billing status and limited details (such as the card brand and last four digits); we never see or store full card numbers.
Content you submit. Briefs, references, brand materials and any files you upload for production.
Usage and device data. Basic, privacy-respecting analytics about how the site is used (pages viewed, approximate region, device type), collected without cross-site tracking cookies.
2. How we use it
To provide and operate the Service, produce and deliver your requested work, process payments, send service-related messages and notifications, provide support, keep the platform secure, and improve what we offer.
3. Who we share it with
We share information only with service providers that help us run the Service, under agreements that protect it: payment processing (Stripe), database and authentication hosting (Supabase), site hosting and analytics (Cloudflare), and email delivery. We may disclose information if required by law or to protect our rights. We do not sell your personal information.
AI processing on Coveboard. When you generate images or video, your prompt and any reference media are sent to fal.ai, the infrastructure that runs the generation models. We instruct fal to store nothing: your prompts and outputs are processed, returned to us, and not retained on their systems. When you talk to Cove, the built-in assistant, your conversation and any board content you show it are sent to Anthropic (the maker of Claude) to produce the response. Anthropic does not use content sent through its API to train its models.
Connected social accounts. If you link a Facebook Page or Instagram account so we can publish the content you have approved, we receive an access token from Meta and the name and id of the Page or account you chose. We store the token encrypted and use it for one purpose: publishing the posts you approved, on the dates you approved them. We do not read your inbox or your direct messages, we do not post anything you have not approved, and we do not share this access with anyone. You can disconnect at any time from the Connections page in your dashboard, which deletes the token immediately, and you can also revoke our access from your own Facebook or Instagram settings.
4. Retention
We keep account and project information for as long as your account is active and as needed to provide the Service, then for a reasonable period afterward to meet legal, accounting and dispute-resolution needs. You can ask us to delete your data, subject to those obligations.
5. Security
We use industry-standard measures, including encryption in transit and access controls, to protect your information. No method is perfectly secure, but we work to keep your data safe and to respond quickly if something goes wrong.
6. Your rights
You can access, correct, export or delete your personal information by emailing hello@cintrova.com. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honor applicable requests. To remove data we hold from a connected Facebook or Instagram account, see Data deletion.
7. Cookies and analytics
We use the minimum cookies needed to keep you logged in and the Service working. For analytics we use privacy-friendly measurement that doesn’t build cross-site advertising profiles of you.
8. Children
The Service is for users 18 and older and isn’t directed to children.
9. Changes
We may update this policy. We’ll revise the effective date above and, for material changes, take reasonable steps to let you know.
10. Contact
Questions or requests: hello@cintrova.com. Governing law: State of Colorado.