Legal

Privacy Policy

Last updated: September 10, 2026

What we collect

Email address and password (hashed) at registration. The reports you generate, encrypted with AES-256-GCM.

How we use your data

Solely to provide the service. We do not sell your data, use it for advertising, or train AI models on your content.

Data storage and encryption

All report content is encrypted at the application layer before storage. Your organization has a unique key derived from a master key that never leaves our servers.

Subprocessors

  • Cloudflare D1: encrypted database storage
  • Cloudflare Workers AI: AI inference (no data retained)
  • Cloudflare Workers: application hosting

Retention

Data retained while your account is active. Delete your account anytime from Settings → Danger Zone to permanently remove all your data.

Your rights

Access, correct, or delete your data anytime. Contact hello@coravi.ai.

ITAR and classified data

This service is not approved for ITAR-controlled, classified, or export-restricted technical data.

Contact

legal@coravi.ai