1. Introduction
Corvue AS ("we," "us," or "our"), a company registered in Norway (organization number [insert]), operates the website https://corvue.ai and provides AI chat services. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services.
While we are based in Norway and comply with Norwegian and EU/EEA data protection laws, our services are available globally. This policy applies to all our users, regardless of location.
Contact Information
2. Key Terms and Definitions
- Personal Data: Any information relating to an identified or identifiable natural person
- Processing: Any operation performed on personal data
- Service: The AI chat platform provided by Corvue AS
- Chat History: The conversations between users and AI language models
- LLM: Large Language Models that power our chat services
3. Information We Collect
A. Account Information
- Email address
- Account credentials
- Authentication data when using Google or Discord sign-in
- Account preferences and settings
B. Service Usage Data
- Chat conversations and history
- Technical information about how you use our service
- Device and browser information
- IP address and basic usage statistics
C. Payment Information
When you subscribe to our paid services, we collect payment information through our payment processor, Stripe. We do not store complete payment information on our servers.
D. Customer Support Data
When you communicate with our support team through Intercom, we collect:
- Communication history
- Additional information you choose to provide
4. How We Use Your Information
A. Core Service Functionality
We use your information to:
- Provide and maintain our AI chat service
- Process and store your chat conversations
- Authenticate your access to the service
- Process your payments and manage your subscription
- Provide customer support
- Send essential service notifications
B. Service Providers
We work with trusted service providers to deliver our service:
- Infrastructure and Hosting
- Amazon Web Services (AWS) in Ireland for hosting our service and storing data
- AI Language Models We partner with various LLM providers to power our chat functionality, including:
- OpenAI
- Anthropic
- Google Gemini
- Mistral
- OpenRouter
- Groq
- zAI
- Perplexity
- Each provider processes chat inputs according to their respective privacy policies.
- Authentication
- Google OAuth
- Discord OAuth
- Payment Processing
- Stripe handles all payment processing
- Customer Support
- Intercom for customer communications and support
5. Data Storage and Security
A. Data Storage
- All data is hosted on AWS servers in Ireland
- Chat histories are stored securely and can be deleted by users at any time
- Account data is retained until you delete your account or request removal
B. Security Measures
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit and at rest
- Secure authentication mechanisms
- Regular security assessments
- Access controls and monitoring
- Secure data backup procedures
C. Data Retention
- Chat histories are retained until manually deleted by users
- Account data is retained while your account is active
- Payment information is retained as required by law
6. Your Rights and Controls
As we operate under Norwegian and EU/EEA law, you have several rights regarding your personal data:
A. Basic Rights
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Export your data
- Withdraw consent
- Object to certain data processing
B. How to Exercise Your Rights
You can exercise these rights by:
- Using the self-service features in your account settings
- Emailing us at legal@corvue.ai
- Submitting a formal request through our website
We will respond to all requests within 30 days.
C. Chat History Controls
You can:
- View your chat history
- Delete individual conversations
- Delete all conversations
- Export your chat data
7. International Data Transfers
While we store data in the EEA (Ireland), we operate globally and work with service providers outside the EEA.
A. Data Transfer Safeguards
We ensure appropriate safeguards through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
- Additional technical and organizational measures
B. International Service Providers
Our service providers (LLM providers, authentication services, etc.) may process data internationally. Each provider complies with applicable data protection laws and our data processing agreements.
8. Cookie Policy
We use cookies and similar technologies to:
- Maintain your session
- Remember your preferences
- Authenticate your access
- Ensure security
Essential Cookies
- Authentication tokens
- Session management
- Security features
Your Cookie Choices
You can:
- Accept all cookies
- Manage cookie preferences through your browser
- Disable non-essential cookies
Note: Essential cookies are required for the service to function properly.
9. Children's Privacy
- Our service is not intended for users under 18 years of age
- We do not knowingly collect data from users under 18
- If we discover we have collected data from a user under 18, we will delete this data
- Parents or guardians who believe we might have collected data from a child should contact us at legal@corvue.ai
10. Changes to This Policy
A. Updates
- We may update this policy to reflect changes in our practices or legal requirements
- Material changes will be notified to users via email or service notification
- Continued use of the service after changes constitutes acceptance of the updated policy
B. Version Control
- The current version of this policy is effective from [Current Date]
- Previous versions are available upon request
11. Contact Information
A. Primary Contact
B. Data Protection Authority
You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):
12. Additional Legal Information
A. Legal Basis for Processing
We process your personal data based on:
- Contract performance (providing our service)
- Legal obligations
- Legitimate interests
- Your consent, where applicable
B. Governing Law
- This policy is governed by Norwegian law
- For EEA users, GDPR provisions apply
- Additional local requirements may apply based on your location
C. Language
- This policy is available in English
- In case of any discrepancy between translations, the English version prevails
For questions about this Privacy Policy, please contact us at legal@corvue.ai
