Privacy Policy

The Short Version

Most websites track every click, fingerprint your browser, and sell your data to advertisers. We don't do any of that. We don't even have analytics.

What We Collect

When you submit our contact form, we collect:

• • Your name
• • Your email address
• • Your message and project details

That's it. Nothing else. This information is used solely to reach out to you and respond to your inquiry — nothing more.

What We Don't Collect

• • No tracking cookies (our contact form uses Cloudflare Turnstile for spam protection, which may set a functional cookie — see Third-Party Services below)
• • No tracking pixels
• • No analytics scripts
• • No browser fingerprinting
• • No advertising identifiers

We don't have a database of visitors. Zero surveillance. This isn't a legal obligation we're grudgingly meeting. It's how we believe software should work.

How We Use Your Data

Contact form submissions are used exclusively to respond to your inquiry and discuss potential projects. We do not:

• • Sell your data to anyone
• • Share your data with third parties, except as needed to provide services you request
• • Add you to marketing lists
• • Contact you without your explicit consent

Data Retention

Contact form submissions are retained only as long as needed to respond to your inquiry and complete any resulting project engagement. You can request deletion of your data at any time by emailing [email protected].

Your Rights

These rights apply to the data you submit through our contact form — that is the only personal data we collect. You have the right to:

• • Access any personal data we hold about you
• • Correct inaccurate personal data
• • Delete your personal data (right to erasure)
• • Export your data in a portable format
• • Object to processing of your personal data

To exercise any of these rights, email [email protected]. We'll respond within 30 days.

As we onboard clients, we extend invites to Corvalis Admin — our client portal where you can view, manage, and request deletion of any data associated with your account.

Third-Party Services

This website is hosted on Vercel. Vercel may collect basic server access logs (IP address, request timestamp, page visited) as part of standard web hosting. We do not access or use these logs for tracking purposes. See Vercel's privacy policy for details.

Our contact form uses Cloudflare Turnstile for spam protection. Turnstile may set a functional cookie to verify you are a real person. It does not track you across sites, build an advertising profile, or collect personal information. It runs only on the contact page when you submit the form.

All fonts are self-hosted. No external font services are loaded, and no requests are made to third-party font providers.

Changes to This Policy

We may update this policy as our practices evolve. The "Last Updated" date at the top of this page reflects the most recent revision. Significant changes will be noted here.

For Our International Clients

Corvalis LLC is based in the United States. If you are located outside the United States — including in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws — the following applies to you:

Data Controller

Corvalis LLC is the data controller responsible for your personal data. You can reach us at [email protected].

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation, we process your data on the following legal bases:

• • Legitimate Interest — Processing contact form submissions to respond to your inquiry and evaluate a potential business relationship (Article 6(1)(f)).
• • Contractual Necessity — Processing data required to perform services under a project agreement (Article 6(1)(b)).
• • Consent — When you request an NDA or voluntarily provide additional information (Article 6(1)(a)). You may withdraw consent at any time.

International Data Transfers

When you submit the contact form, your data is transferred to and processed in the United States, where Corvalis LLC is located. The United States may not provide the same level of data protection as your home jurisdiction. By submitting the form, you acknowledge this transfer. We protect your data using the same security measures and commitments described throughout this policy, regardless of where you are located.

Children's Data

Our services are intended for businesses and individuals of legal contracting age. This website is not directed at children under 16 years of age, and we do not knowingly collect personal data from children. If you believe a child has submitted data through our contact form, please email us at [email protected] and we will delete it promptly.

Supervisory Authority

If you are in the EEA or UK and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Your Agreement

By submitting the contact form or using this website, you acknowledge that you have read and understood this Privacy Policy. Use of our services is also governed by our Terms of Service.

Contact

Questions about this privacy policy or your data? Email us at [email protected].