Corvio privacy & data

Depending on the context, NeoFlux may process personal data as a controller (e.g., when you create an Account, purchase a Subscription, or interact with our marketing sites) and/or as a processor

Account and identity data, such as name, username, email, phone number, and organization details

billing and transaction data, such as payment method identifiers, billing address, invoices, and tax information

usage and device data, such as IP address, device identifiers, browser type, operating system, timestamps, feature usage metrics, and diagnostic logs

support and communications data, such as messages sent to support, feedback, and survey responses

Content data to the extent it includes personal data, including personal data contained in documents, prompts, notes, messages, or attachments you upload

security and compliance data, such as authentication logs, access records, and abuse signals

We process personal data to provide and operate the Service, including account creation, authentication, hosting content, generating Output, providing search/retrieval, enabling collaboration, and delivering customer support

to administer subscriptions, billing, and payments

to secure the Service, prevent fraud, detect abuse, and enforce policies

to improve and develop the Service, including debugging and performance monitoring

We retain personal data for as long as necessary to provide the Service, to fulfill the purposes described herein, to comply with legal obligations, to resolve disputes, and to enforce agreements

we may retain certain logs and backups for a limited period even after deletion requests

where required, we implement appropriate safeguards, which may include contractual protections, such as standard contractual clauses

we require AI inference providers not to train their foundation models on Corvio inputs or outputs

where NeoFlux acts as a processor, the applicable Data Processing Addendum (“DPA”) governs

we may retain certain logs and backups for a limited period even after deletion requests

you may have rights to access, correct, delete, or port your personal data

to withdraw consent (where processing is based on consent)

and to object to certain processing

we do not sell personal data in the ordinary meaning of “sell” under common privacy statutes