Privacy Policy

Who this covers

Tiruvi (“we”) is responsible for the personal data described here when you visit this website, talk to the assistant on it, ask for a demo, or create a Corva account.

Businesses that use Corva keep their own customers’ conversations and records in Corva. For that data the business is responsible: it decides what is collected and why, and Tiruvi processes it on the business’s behalf and only on its instructions. If you are a customer of such a business, ask the business about your data; it can see, correct, export and erase your record in Corva. If you cannot reach it, use our data request form and we will pass your request on.

What we collect, and why

• What you tell us. Messages you type or say to the assistant, the transcript of any call, and the details you share (name, email, phone, your business and what it does) or put into the demo or sign-up forms. We use them to answer you, follow up, and set up your account.
• Account details. If you sign up: your name, email address, your business’s details and the people you invite to your team, so you can sign in and use Corva.
• Payments. Paid plans, and payment links a business sends its customers, are handled by Razorpay. We receive the status, amount and reference of a payment, not your card, bank or UPI details.
• Technical data. Your network address and browser, kept briefly to apply fair-use limits and to keep the service secure.
• Usage counts. Which pages are read and a few steps on this page, as described below. No profile of you is built.

What we store in your browser

Only essential cookies, the ones the site cannot work without. We don’t add advertising or tracking cookies, so there is nothing to accept. The same list is on the Cookie Policy.

Clerk also keeps its settings in your browser’s local storage. The assistant runs Vercel BotID, an invisible check, inside the page, that a person rather than a script is using it, so it stays available and its cost stays fair. It left nothing in the browser when we checked.

What we count

We use Vercel Web Analytics to see which pages are read, where visitors come from (a search engine, a link, a campaign tag), and their country, device and browser. It stores nothing in your browser and does not follow you to other sites; a visitor is told apart only within a day, by a value that is then thrown away. The Corva app, the admin and private links are never counted.

We also count a few steps on this page, the assistant opened, a chat or call started, a demo requested, as totals, without what was said.

When you talk to the assistant

The assistant on this site is Corva itself, run by Tiruvi. What you type or say, and a transcript of any call, is kept as a conversation in Tiruvi’s Corva workspace so the team can follow up. If you share your name, email or phone, the team uses them to get back to you, nothing else. Voice calls are only heard while you hold the button. The assistant is an AI: its replies are generated, and a person on the team may read the conversation and step in.

To keep the assistant fair to everyone, we keep counts per browser and per network address for a day, and we may pause it for a browser or address that behaves like a script. Those counts are deleted within a few days.

Who helps us process data

We do not sell personal data. We use these providers to run Corva, each only for the purpose named: Vercel (hosting and analytics), Neon (database), Clerk (sign-in), Google (the AI models that write the assistant’s replies and understand speech), Razorpay (payments) and Resend (email). Cloudflare protects Clerk’s sign-in domain. When a business connects its WhatsApp number, messages pass through Meta’s WhatsApp Business Platform; when it switches on orders, billing or deliveries, the details those need go to Orbo, Tiruvi’s operations product. We may also disclose data where the law requires it.

These providers may process data outside India. Where they do, we rely on their contractual and security commitments.

How long we keep it

Each business chooses how long the words of its conversations are kept (from one year, the legal minimum, to ten years; a year unless it changes it), after which they are deleted. Customer records are kept while the workspace is active. When an Owner closes a workspace, everything in it is deleted at once; copies in our database backups are gone within 30 days. Fair-use counters are deleted within a few days. Invoices and payment records we must keep for tax or accounting are kept for the period the law requires, and nothing else. When you sign up, ask for a demo or make a data request, we also note which version of this policy you were shown, and when, as the law asks us to be able to prove.

Your choices and rights

You can ask to see, correct or delete the personal data we hold about you, to withdraw consent you have given, to object to how we use it, or to name someone who may exercise these rights for you if you cannot. Use the data request form; a person answers within 30 days, and tells you what was found and done.

Deleting your account. Anyone with a Corva login can delete it themselves: picture at the top right, then Your account, then Delete my login. An Owner closes a whole workspace from Settings, under Data & trust; it deletes the workspace’s brands, customers, conversations and team. A business erases one of its customers from that customer’s record.

Questions and complaints

Questions about this policy or how we handle your data go to us through the data request form; a person answers. If you are not satisfied with our answer, you may complain to the Data Protection Board of India, or to the data protection authority where you live.

Security and children

Data is encrypted in transit and at rest, the passwords and keys businesses give Corva are sealed with a key only the service holds, access to workspaces is limited to the people invited to them, who opens a customer’s record or a conversation is logged and kept for a year, and we review what each service can reach. No system is perfectly secure, so we also tell affected people and businesses if something goes wrong. Corva is for businesses and is not directed at children under 18.

Changes to this policy

When we change this page we change the date below, and for a material change we tell account holders by email or in the app. See also our Terms and Conditions.