Privacy

Your details, and what we do with them.

Plain version. We collect the few things we need to build and send your free preview, we use a small set of service providers to deliver it and run the product, and we do not sell your information. The longer version is below.

What we collect

When you use the preview form, we collect your business name or website, your email address, your phone number if you choose to give it, and any free-text you add about what you’d want improved. That’s it.

Why we collect it

To build and send your free preview, and to reply to you. We don’t use it for anything else.

Who processes it

We use a few service providers to make the form work and to run the product. They are service providers, not buyers of your data:

  • Cloudflare: hosts this site and runs the first-party worker that receives the preview form (at /api/preview), so a real person on our team can reply. Cloudflare also handles spam protection and the email routing that delivers your message to our inbox.
  • Cloudflare Turnstile: keeps the form free of spam; it may transmit your IP address to a filtering service for that purpose.
  • Supabase: the database where the details you submit are stored so we can follow up about your preview.
  • Clerk: handles sign-in and authentication for the customer portal (the signed-in area), if you become a customer.
  • Stripe: processes payments in the customer portal. We never see or store your card details; those are handled entirely by Stripe. How billing itself works is in our Subscription and Billing Terms.
  • Resend: sends our transactional email, such as your preview-ready notice and billing confirmations. It processes your email address and the message content in order to deliver them.
  • SignWell: handles e-signatures when you sign a service agreement with us. It processes your name as the signer, your email address, and the signing events (when the document was viewed and signed). Signed agreements are archived in our private storage.
  • PostHog: product analytics, served first-party through our own domain. See “Analytics and session recording” below for exactly what we do and don’t capture.

How long we keep it

If we don’t end up working together, we delete or anonymize your details after a set period of inactivity. We keep them only as long as we need to follow up about your preview.

We don’t sell it

We do not sell your information, and we do not share it with anyone except the service providers above that deliver your preview, keep this form spam-free, and run the product.

Requesting deletion

Want us to delete your details, or have a question about your data? You can request deletion or reach us any time at support@koravu.com and we’ll take care of it.

Cookies

We set no non-essential cookies; Turnstile is privacy-preserving. Our analytics on the marketing site are cookieless. See below.

Analytics and session recording

We use PostHog for product analytics. It is served first-party through our own domain (koravu.com) rather than loaded from a third-party analytics domain, which means your browser never makes a request to an external tracking server.

  • Marketing site (koravu.com public pages): analytics are cookieless. No analytics cookies are set, which is why you don’t see a cookie banner. We use in-memory, session-scoped storage only.
  • Customer portal (signed-in area): we record session replays to help us improve the product. All form inputs, free-text fields, payment amounts, and email addresses are masked and excluded from recordings. We never capture your card details (those are handled entirely by Stripe in a separate secure frame that we cannot access), and your billing figures are likewise excluded.
  • IP addresses: used only for coarse, approximate geolocation (for example, country-level). IP addresses are not stored for tracking purposes.
  • No advertising: we use no third-party advertising cookies and we do not sell or share your data with advertisers.

Current as of June 2026. Reviewed by counsel before our first client signs.