Privacy Policy

Corvanix Technologies ("Corvanix", "we", "us") provides an AI-powered engineering assistant, available as a website and a Windows desktop application. This policy explains what personal data we collect, why, and the rights you have over it, in line with the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) for residents those laws apply to.

Account data: email address, display name, and password (stored as a salted hash — we never see or store your plain-text password). If you sign in with Google, we receive your name, email, and profile picture from Google.

Billing data: we do not collect or store your card number. Payments are handled entirely by our payment processor and Merchant of Record, Polar.sh, who shares with us only the minimum needed to run your account: subscription status, plan tier, and credit-pack purchase history.

Usage & product data: AI credit balance and consumption, generated report metadata, and desktop-app diagnostic logs when you contact support.

Content you submit for analysis: simulation results, engineering drawings, screenshots, or text you submit to generate an AI report, chat response, or engineering commentary. See "AI processing" below for how this is handled.

To provide and bill for the service, authenticate you, generate the AI-powered reports and commentary you request, respond to support requests, detect abuse and fraud, and meet legal obligations (e.g. tax and accounting records for payments). We do not sell your personal data, and we do not use your engineering content to train our own models.

When you request AI commentary, a chat response, or an AI-generated report, the relevant content (e.g. simulation results, your prompt) is sent to a third-party AI model provider to generate the response. Depending on the feature and plan, this may be Anthropic (Claude), Google (Gemini), DeepSeek, or another provider routed through OpenRouter. Each provider processes the request under its own data-processing terms and, for providers outside the EU/EEA, may process data outside the EU/EEA. We select providers based on quality and cost, and do not share more of your content than is needed to generate the requested output.

Your account and application data is stored with Supabase, our database and authentication provider, hosted in the EU (Frankfurt, Germany region). Our website is served via Cloudflare. Backups and logs may be retained in the same region for operational and security purposes.

We share the minimum necessary data with: Supabase (hosting, database, authentication), Polar.sh (payment processing, Merchant of Record), Cloudflare (hosting/CDN), and the AI providers listed above (Anthropic, Google, DeepSeek, and OpenRouter-routed models) for the sole purpose of generating the AI output you requested.

We use only the essential session cookies/local storage needed to keep you signed in. Corvanix does not currently use third-party advertising or analytics trackers on the website.

We retain your account data for as long as your account is active. If you delete your account, your profile, credit balance, and stored report history are permanently deleted; this cannot be undone. We may retain minimal billing records where required by tax/accounting law, decoupled from your account profile where possible.

If the GDPR applies to you, you have the right to: access the personal data we hold about you, correct inaccurate data, request erasure ("right to be forgotten"), request a portable copy of your data, object to or restrict certain processing, and withdraw consent at any time where processing is based on consent. You can also lodge a complaint with your local data protection authority.

If the CCPA applies to you, you have the right to know what personal information we collect, request its deletion, and opt out of the "sale" or "sharing" of personal information — we do not sell or share personal information as those terms are defined by the CCPA.

You can exercise most of these rights yourself at any time from your account settings (edit your name, change your password, or permanently delete your account). For anything else, email support@corvanix.app and we will respond within 30 days.

Corvanix is a professional engineering tool and is not directed at, or intended for use by, anyone under 16. We do not knowingly collect personal data from children.

We may update this policy as the product changes. Material changes will be reflected by updating the "Last updated" date above; significant changes affecting your rights will be communicated by email where practical.

For any privacy question or to exercise a data-subject right, email support@corvanix.app.