Privacy Policy

We collect account data you provide (name, email, password hash, company, job title, phone) and project data you upload or generate in Corvevo (drawing files such as PDF/DXF/DWG, specifications, schedules, annotations, chat questions, review findings, estimates, and related metadata).

We also collect technical logs needed to run the service (IP address, timestamps, browser/user-agent, error traces, and feature usage events).

If you contact us by email, we process the contents of that correspondence.

Corvevo uses AI systems to read drawings, extract quantities, draft compliance and clash findings, answer Ask/chat questions, and assist with estimates. Outputs can be wrong, incomplete, or outdated. They are decision-support only — not stamped professional advice, not a code certification, and not a substitute for licensed design professionals of record.

When you use Ask or other AI features, prompts, sheet snapshots you attach, and relevant project context may be sent to AI providers to generate a response.

We use third-party services to operate Corvevo. Depending on the feature, that can include: OpenAI and/or Anthropic and/or Google Gemini (AI inference), Amazon Web Services S3 or compatible object storage (file storage), MongoDB Atlas (database), Vercel (frontend hosting), and Railway (API hosting).

Those providers process data on our instructions to deliver the product. They are not a public data dump: access is via our application credentials and, for files, time-limited signed URLs.

We do not sell your personal information.

Uploaded drawings and derived artifacts are stored in a private object-storage bucket. Objects are not configured as publicly listable or anonymously readable. Authorized clients receive short-lived presigned download URLs.

Saying the bucket is “private” does not mean zero risk: anyone with a valid signed URL or compromised credentials can access an object until the URL expires or access is revoked.

We retain account data and project uploads for as long as your account and projects exist so the product can function (re-open sheets, re-run reviews, cite sources).

When you delete a project, we delete associated database records and attempt to delete associated object-storage keys and local working copies. Backups and logs may persist for a limited operational window.

If you want an account closed, email us at the contact below. We will delete or anonymize personal account data except where we must keep records for security, dispute, or legal obligations.

You may access and update profile fields in Settings, change your password, delete projects you control, and request account closure by emailing us.

Depending on your location, privacy laws may give you additional rights (access, correction, deletion, portability, objection). Contact us to exercise them.

We use industry-standard controls appropriate to a construction SaaS product (TLS in transit, access-controlled storage, hashed passwords). No method of transmission or storage is 100% secure.

Corvevo is a business tool for construction professionals. It is not directed at children under 16, and we do not knowingly collect their personal information.

We may update this Privacy Policy. The effective date at the top of the page will change. Material changes will be posted here; continued use after the effective date means you accept the updated policy.

Privacy questions: info@corvevo.com