How your data is handled

Curade Mini keeps what it needs to run your account: your details, your settings and the parts of the app that are yours. The monitoring data it shows stays in your organisation's monitoring platform: the app reads it as you look, and keeps none of it apart from what your own alerts and chats hold. The privacy policy, under About in Settings, sets all of it out in full.

What is kept

• Accounts: your name, email address, username, company, role and the environments you can open.
• Your agreement to the privacy policy and the terms of use, and your permission for CLEO's AI provider.
• Your preferences, such as your language.
• Your dashboard widgets and your monitoring alerts, with the alerts raised for you.
• Your chats with CLEO and the files you attach to them.
• Your notifications, and the push registration of the device you sign in on.
• Records that keep the service secure, such as failed sign in attempts, which never contain your password.

The app collects no location, no contacts and no advertising identifiers, and contains no advertising or analytics software.

Who can see it

• What you see depends on your role and on your environments (Roles and permissions).
• A dashboard shows to you alone, and so do your monitoring alerts (Dashboard).
• A chat with CLEO shows to the rest of its environment as its visibility allows, and a new one starts Private. The admins of your environments, and Core Consulting staff who run the service, can read the chats in the environments they look after, private ones included (CLEO).
• What you send CLEO goes to the AI provider chosen for the environment, once you have allowed it (What CLEO sends).
• Core Consulting shares data only with the services that run the app, such as its cloud hosting provider and its email and push delivery services, and never sells it or uses it for advertising.

What CLEO sends

To answer, CLEO sends what you type and attach, what is on screen and the monitoring data it looks up to the AI provider chosen for the environment. CLEO only reads: it cannot change anything in the app or in monitoring. The provider may handle what CLEO sends outside Malaysia, and nothing goes until you allow it (CLEO).

How it is protected

Access controls let each account see only what its role and environments allow. Your password is never stored in readable form, and the credentials the app uses to reach other services are kept encrypted. Your data is encrypted in transit and when stored.

How long it is kept

Most of what Curade Mini keeps stays until someone deletes it: deleting your account deletes what is yours, apart from a few records kept for a short while (Delete your account). Some things go sooner on their own:

• an in-app notification, after 2 months;
• a monitoring alert in your inbox, after 30 days;
• an account nobody has used for 12 months, with everything in it.

Your choices

You decide who else sees your chats with CLEO through their visibility, and you can delete the ones you own. You can also change your username and full name in Settings, switch off push notifications and monitoring alerts, and leave CLEO's chats and attachments out entirely. You can ask for a copy of your data, a correction, or for it to be sent to another organisation, by email to platformeng@curade.ai. You can have your account deleted, or withdraw your consent at once (Delete your account).