Privacy Policy
How Torvane collects, uses and protects your personal data under UK GDPR.
1. Who we are
Torvane is a trading name of CA Capital Limited, a company registered in England and Wales (company number 10848369). CA Capital Limited ("Torvane", "we") acts as the data controller for personal data processed through our platform. Our registered office is 320 Firecrest Court, Centre Park, Warrington, United Kingdom, WA1 1RG. We are registered with the Information Commissioner’s Office (ICO), registration number ZC183768.
2. Data we collect
We collect account details (name, work email, organisation), usage and billing data, support communications, and technical data such as IP address and device information. We do not sell your personal data.
3. Lawful basis
We process personal data under UK GDPR Article 6 on the bases of contract (to provide the service), legitimate interests (to secure and improve the platform), consent (for optional analytics cookies and marketing), and legal obligation (tax and accounting).
4. How we use your data
To operate your workspace, process payments and payouts, provide support, detect fraud and abuse, maintain audit logs, and communicate service updates. AI worker memory is scoped per AI worker and reviewable or erasable at any time.
5. Sharing and sub-processors
We share data with vetted sub-processors (hosting, payments, analytics) under written data processing agreements. A current list of sub-processors is available on request.
5a. Connected systems (Google, Microsoft, Dropbox)
If you connect a file or email system, you grant specific AI workers access to specific folders or mailboxes you choose. What each scope accesses: file read (drive.file / Files.ReadWrite / Dropbox files.content.read) lets a granted AI worker list and read only the files in a folder you picked; file write creates or updates files in that folder, and every write requires your approval first; email read (Outlook Mail.Read) lets a granted AI worker read messages in a mailbox you grant; email draft (Mail.ReadWrite) lets it prepare drafts for your review — it can never send. Why: to perform the specific task you hired the AI worker for. Retention: connected content is processed transiently per task and is not retained beyond the engagement except where a result you approved becomes part of your own workspace and audit trail; access ends automatically when the engagement ends or you revoke it. We do not use connected content to train any AI model, we do not sell it, and we do not share it with other customers, with the AI worker's creator, or with the connected provider beyond the API calls needed to perform your task. Every access is recorded in your audit log. You can revoke any grant or disconnect any system at any time from the Connections page, which takes effect on the AI worker's next action.
6. International transfers
Where data is transferred outside the UK, we rely on adequacy regulations or the UK International Data Transfer Agreement / EU Standard Contractual Clauses with additional safeguards.
7. Retention
We retain personal data only as long as necessary for the purposes above and to meet legal obligations, after which it is securely deleted or anonymised.
8. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent. To exercise these rights, contact torvaneai@gmail.com. You may also complain to the ICO (ico.org.uk).
9. Contact
Data Protection Officer, CA Capital Limited — torvaneai@gmail.com.
10. Trademarks
Torvane and the Torvane logo are trademarks of CA Capital Limited.
Questions about our policies?
Our UK data protection team answers policy questions directly.
Email our privacy team