Your privacy at Cavatim

Last updated: 14 September 2026

This notice covers this Cavatim website, its example diary, limited trial and email waitlist. Cavatim is run by James Boyce trading as Cavatim, United Kingdom, who is responsible for how your personal information is used. Contact James at support@cavatim.com for privacy questions, a postal correspondence address or a rights request.

Exploring Cavatim

The example diary uses fictional entries. It does not load your personal diary and changes to the example are not saved. The marketing video and its images are served by this website; there is no embedded third-party video player or email tracking pixel.

We have not added advertising trackers or marketing analytics to this Site. OpenAI and its hosting providers process technical information, such as IP addresses and request details, to deliver and secure the website. Cavatim uses an essential, secure session cookie to keep you logged in for up to 90 days. Logging out revokes that session and clears the cookie. The signed-in diary saves your appearance preferences in your browser; these are cleared when you log out through Cavatim. You can also clear them through your browser settings.

Joining the waitlist

We collect the email address you enter, the time you join, the wording and version of your consent, your confirmation status and the status of the welcome email. With your consent, we send a founder welcome message and contact you about Cavatim’s limited trial and opening. Joining is optional and creates neither a planner account nor a paid subscription. We do not collect card details.

Your welcome message contains an email confirmation link. Until you confirm, we will not send trial or opening announcements. We do not automatically enrol existing account holders or people from an earlier waitlist into this email list.

You can withdraw your consent at any time using the unsubscribe link in an email or by contacting support@cavatim.com. This does not affect the lawfulness of earlier processing. We use a short-lived, keyed representation of your IP address and request counts to limit automated abuse, under our legitimate interest in protecting the service. The email service does not store your raw IP address in the waitlist database.

Your signed-in diary

If you have been admitted to the limited trial, you log in with your Cavatim email and password. We store a salted password hash, not the password itself, and use a separate account identifier to keep your diary separate from other accounts. Login attempts are limited using short-lived keyed representations of email addresses and IP addresses. The hosting platform may separately require ChatGPT sign-in while this site is private; that does not log you into your Cavatim diary.

We store the plans, tasks, goals, recurring rules, notes, journal entries, settings and import information you choose to save, plus revision information needed to sync changes. We use this information to provide the diary you request, on the basis of our contract with you. We process necessary security and support information under our legitimate interests in operating a reliable service and meeting legal obligations where applicable.

Please avoid entering sensitive information, such as medical records, in this limited trial. The current Site has no AI generation or transcription feature that automatically sends diary entries to a model. If you choose to connect an assistant or use its page tools, information you request can be made available to that assistant under its own terms and privacy settings.

Who helps us provide the service

• OpenAI provides ChatGPT Sites hosting and sign-in. Its hosting subprocessors, including Cloudflare, provide infrastructure and database services. OpenAI also processes information for its own account, security and service purposes under its privacy policy.
• Hostinger provides the server that holds the separate waitlist and delivers its messages through the existing Cavatim SMTP mailbox. The mail service receives your email address and the message contents, but not your diary.
• James and authorised service administrators can access information when necessary for support, maintenance, security or privacy requests. We may disclose information to advisers or authorities where legally required or justified. We do not sell your information.

Where information is processed

Our providers may process information outside the UK, including in the United States. We do not promise UK-only storage. The ChatGPT Sites data processing terms and Hostinger’s data processing terms describe their responsibilities and contractual transfer safeguards, including the applicable UK transfer provisions. Contact us for information about the safeguards relevant to your data.

How long we keep it

• Unconfirmed waitlist entries: up to 30 days after joining.
• Confirmed waitlist entries and consent/delivery records: up to 12 months after joining, or until you unsubscribe, whichever comes first.
• On unsubscribe, the live waitlist entry and pending email are removed. A keyed hash of the email is retained for up to 12 months to honour the opt-out and prevent automatic re-enrolment. Contact us if you later wish to rejoin.
• Cavatim sessions expire after 90 days and are revoked on logout. Expired session records are cleared on the next successful login; expired records never grant access. Login-attempt counters apply for 15 minutes and expired counters are cleared during later login attempts.
• Waitlist abuse counters: up to one hour. Expired waitlist records are cleared automatically by the mail service.
• Diary records: while you keep the trial account or until you request deletion. Items in “Recently deleted” remain recoverable until permanently removed. You can download a diary backup from the Account menu. Contact us to delete the account.
• Support correspondence: only for as long as needed to resolve the enquiry and any resulting legal obligation or dispute; normally reviewed for deletion within 12 months of closure. Providers’ operational logs and recovery copies follow their own service retention settings and may outlast deletion from the live database.

Your rights and choices

Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your personal information. You can object to processing based on legitimate interests, and to direct marketing at any time. Email support@cavatim.com. We may need proportionate identity checks and normally respond within one month. A lawful extension may apply to complex requests; we will explain it.

You can complain to the UK Information Commissioner’s Office, including if you are unhappy with our response. We do not use your information for automated decisions with legal or similarly significant effects.

Keeping information safe

We use encrypted connections, account-scoped access checks, restricted server credentials and input validation. Waitlist information is separate from diary records. Access is limited to people and providers who need it to deliver the service. No online service can promise absolute security.

We will update this notice when the service or its data use changes, and seek a new choice where required before adding optional uses such as marketing tracking.