Privacy policy

Last updated: 24 September 2026

This policy explains what Corvan does with the information you give us, on this website and inside Corvan AI. It is short because we collect little, and specific because you should know exactly what happens to it.

What we collect on the website

The forms on this site (the contact form, the guide forms, and the booking page) ask for your name, your company, work email, phone number, your role, your business stage, your monthly marketing budget, and when you want more clients. The contact form also has an optional message. We use these answers to reply to you, to send you a guide if you asked for it, and to decide whether a call makes sense.

The newsletter box asks only for your email. We store it with a status (pending, confirmed, unsubscribed), the page you subscribed from, and the dates. Nothing is sent until you click the confirmation link we email you, and every issue carries a one-click unsubscribe link that removes you from the list for good. Issues are delivered by Resend.

To keep spam out, the forms also look at how quickly they were filled in and at the approximate country a request came from, which our hosting provider attaches to each request. We do not keep that beyond handling the request.

Our hosting provider, Vercel, records standard server logs for security and reliability, including IP addresses and browser user-agent strings. We do not use those logs to build a profile of you.

What we collect in Corvan AI

Corvan AI is invite-only. When you sign in, we store your email address and a sign-in session. As you use it, we store what you enter: your business details (the Brand Brain), the sample posts you paste in, your voice settings, and the drafts it produces. All of it lives in a database hosted by Neon.

To draft a post, Corvan AI sends your Brand Brain, your sample posts, your settings, and your topic to OpenAI, whose model writes the text. OpenAI processes that material only to provide the service to us. We do not send it anywhere else.

You own what you enter and what Corvan AI drafts for you.

Cookies and tracking

The marketing pages load three third-party tags: the Meta Pixel, which we use to measure our advertising, PostHog, which shows us how the site is used, and Apollo.io, which shows us which companies visit. Outside the United States all three start switched off: they set no cookie and store nothing in your browser until you press Accept in the bar at the bottom of the page, or tick the optional cookie box on one of our forms before sending it. PostHog still counts page views before that, without a cookie, so it cannot tell one visit from the next. If you decline, all three stay off. Your choice is kept in your browser, not on our servers.

For visitors in the United States the three tags are on from your first page, and the bar at the bottom of the page lets you turn them off. We work out that you are in the United States from your IP address when the page loads, and we do not keep it for this. Turning them off stops the Meta Pixel and Apollo.io, and puts PostHog back to counting page views without a cookie.

If you accept, Meta may set the _fbp cookie and receives the pages you visit, whether you requested a guide, and whether you reached the booking calendar. When you send one of our forms, the pixel also passes on your email address, name and phone number in hashed form, which Meta can match to an account but not read. PostHog sets its own ph_ cookie in the same case and receives the pages you visit, the buttons you click, and any error the page hits. It may also record how you move through the marketing pages, with anything you type masked out. It stores this on servers in the EU. To change your choice, clear this site’s data in your browser and the bar returns.

Separately from cookies, when you send one of our forms our server tells Meta that a request came in, and whether it matches the businesses we work with, so we can see which ads bring in the right people. For visitors in the United States, and for anyone who accepted cookies or ticked the cookie box on the form, this includes your email address and phone number in hashed form, which Meta can match but not read, plus your country, your IP address, your browser details and Meta’s _fbp cookie if it is set. For everyone else it includes only the ad reference Meta added to the link you followed and your browser details, and nothing is sent if you did not arrive from one of our ads. We do this on our legitimate interest in measuring our advertising, and you can object at any time using the details under Your rights.

If you accept, Apollo.io also loads its website tracker. It may set cookies and uses your IP address to work out which company you are visiting from. For visitors in the United States it may also identify you as a person. We use this to see which businesses are interested in Corvan.

Corvan AI sets two cookies once you sign in: one that keeps you signed in, and one that remembers which voice you last used. Both are needed for Corvan AI to work, and neither follows you to other sites.

Why we use it

We use what you give us for one purpose: to reply to your enquiry, to scope and deliver work for you, and to run Corvan AI for you. We do not sell your information and we do not rent it. We may follow up by email about the guide or call you asked about, and every email lets you opt out.

Who else sees it

Form submissions and sign-in links are delivered by Resend, an email provider, and received in Microsoft 365. The website and Corvan AI are hosted by Vercel. Data from Corvan AI is stored by Neon. Drafts are generated by OpenAI. The details and answers you send through our forms are also kept in Apollo.io, the sales tool we use to follow up with you. Meta receives the limited lead details described under Cookies and tracking. Each of these providers processes the data only to provide its service to us.

How long we keep it

Enquiries stay in our email records while there is a live conversation or an active engagement, and for a reasonable period afterwards for our business records. Data from Corvan AI stays for as long as you have a workspace. If you would like either deleted sooner, email us and we will delete it.

Your rights

Depending on where you live, including anywhere in the European Economic Area or the United Kingdom, you have the right to:

• Ask what personal data we hold about you
• Ask us to correct anything inaccurate
• Ask us to delete it
• Object to how we are using it, or ask us to restrict that use
• Ask for a copy in a portable format

To exercise any of these, email support@corvan.io. We will respond within one month. If you are in the EEA or UK and are not satisfied with our response, you may complain to your national data protection authority.

Security

The site and Corvan AI are served over HTTPS. Form submissions are delivered straight to our inbox and are not stored in a database on this website. Data from Corvan AI is stored in a managed database that only Corvan AI and its administrator can reach.

Changes

If we change this policy we will update the date at the top. Material changes will be described here rather than made quietly.