Privacy Policy

Welcome to Corvexa (hereinafter referred to as “the Company,” “we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines our practices regarding the collection, use, processing, and disclosure of your information when you use our website, SaaS platform, AI Chatbot Widget, and related services (collectively, the “Services”).

This policy has been designed to comply with applicable data protection laws (including the GDPR, Indian IT Act 2000, and DPDP Act 2023) and meets the compliance and verification requirements of Razorpay and other payment gateways.

1. Who We Are & Our Role

Corvexa provides an AI sales assistant for business websites. For data collected through our own website and platform (for example, your account details), Corvexa acts as the data controller. For visitor conversations and lead data collected through the Corvexa widget deployed on our customers’ websites, the customer is the data controller and Corvexa acts as a data processor on their behalf.

2. Information We Collect

We only collect the information necessary to provide and improve our Services.

A. Information You Provide to Us

• Account Registration Data: Name, email address, password, and phone number when you create an account.
• Request & Contact Data: When you request a demo, sign up for a trial, or contact support, we collect the content of your message, your name, and your contact details.
• Lead Capture Data: During chatbot conversations on our customers’ websites, we collect the information visitors actively type or select, such as names, work emails, phone numbers, and their responses. Intent detection is based on this active input; we do not use covert behavioral monitoring.

B. Automatically Collected Information

• Device & Connection Information: IP address, device type, operating system, browser type, referral URLs, and connection status.
• Usage Data: Pages visited, features used, time spent on the Services, and actions within the app dashboard.
• Cookies & Local Storage: We use cookies and browser storage to persist session tokens, user preferences, and performance metrics.

C. Payment Information

We do not store credit card or bank account details. All transactions are securely processed through Razorpay, a PCI-DSS compliant payment gateway.

3. How We Use Your Information

We process your personal data for the following business and commercial purposes:

• Service Delivery: To set up, operate, maintain, and support your Corvexa instance.
• AI Processing & Chatbot Functionality: To detect visitor intent from what visitors actively select or type, answer questions, and route high-intent buyers in real time.
• Customer Support: To troubleshoot issues, respond to support tickets, and contact you with updates.
• Lead Capture & Handoff: To qualify leads, push lead profiles to the CRM you connect, and trigger notifications to your sales team.
• Analytics & Service Improvement: To monitor system performance, track conversion rates, and improve conversation quality.
• Security & Abuse Prevention: To monitor for fraudulent activity, unauthorized access, and policy violations.

4. AI Transparency

Corvexa is always disclosed as an AI assistant in conversations. Visitors are not led to believe they are chatting with a human.

5. Data Sharing & Third-Party Processors

We do not sell, rent, or trade your personal data. We only share information with trusted third-party services that help us run our platform:

• CRM & Communication Platforms: We push captured lead details to the CRM and communication tools you choose to connect (such as HubSpot, email, and messaging services), according to your configuration.
• Payment Processors: We share transaction information with Razorpay to process recurring subscriptions and billing.
• Hosting & Infrastructure: Our servers are hosted with established cloud infrastructure providers.
• Legal Compliance: We may disclose data if required by law, subpoena, or to protect the safety and rights of the Company and its users.

6. Data Security

We implement appropriate technical and organisational measures to protect the data we handle:

• Encryption: Data is encrypted in transit using SSL/TLS protocols and at rest using AES-256 standard encryption.
• Access Controls: Administrative access is restricted to essential personnel with strict identity verification.
• Infrastructure: Databases and hosting environments are operated with established cloud providers using industry-standard security practices.

7. Data Retention

We keep personal data only for as long as necessary to provide the Services:

• Active Customer Data: Kept for the duration of the subscription to fulfill account functions.
• Visitor Conversation Logs: Chat history and conversation logs are deleted after 90 days if the visitor does not convert into a lead.
• Payment Records: Payment logs and billing details are retained as required by financial and tax regulations.

8. Your Privacy Rights

Depending on your jurisdiction (e.g. GDPR, CCPA, DPDP Act), you possess certain rights regarding your personal information:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we update or correct inaccurate details.
• Right to Erasure: You can request deletion of your personal data from our databases.
• Right to Portability: You can request that we export your data in a structured, machine-readable format.
• Right to Object or Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. If you are a visitor whose data was captured on a customer’s website, you may also contact that website’s operator, and we will assist them in fulfilling your request.

9. Cookies & Tracking Technologies

We use cookies and browser storage to operate and improve the Services:

• Essential Storage: Used to maintain chat sessions, visitor ID consistency, and UI settings.
• Analytics Cookies: Used to analyze traffic sources, session duration, and feature engagement.

Where required by law, non-essential cookies are only used with your consent. You can also adjust or disable cookies in your browser settings at any time.

10. Children’s Privacy

Our Services are intended for business use and are not directed to individuals under 18. We do not knowingly collect personal data from children.

11. Changes to This Privacy Policy

We may modify this policy at any time. If we make material updates, we will update the dates at the top of this document and notify registered customers via dashboard alerts.

12. Contact Information

If you have any questions or complaints regarding this Privacy Policy, please contact us:

• Company Name: Corvexa
• Email Address: [email protected]