← Back to home

Privacy Policy

Last updated: 10 October 2026

This policy explains what personal data Korvify collects, why, and what rights you have over it. Korvify is operated by Sandeep Sanjay Kamtam, Autónomo, based in Tenerife, Spain, and is the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

1. Who we are

Data controller: Sandeep Sanjay Kamtam (Korvify), Tenerife, Spain.
Contact: info@korvify.com

2. What data we collect

When you use the contact form or the free business enquiry form on this site: the details you provide — business name and type, contact name, email address, and optionally a WhatsApp number, Google Maps link or business address, the service you are interested in and any notes — sent to us so we can reply to your enquiry by email or WhatsApp. Submitting an enquiry is free and does not create an account or a paid subscription.

When you sign up for a Korvify plan: your business name, business type/vertical, email address, and account password (stored securely via our authentication provider, Supabase — we never see or store your password in plain text). Once you're a customer, we also collect the business profile and campaign details you provide (location, contact info, branding, offer, target audience) in order to run your advertising campaigns.

Payment information: handled entirely by Stripe, our payment processor. Korvify does not store your card details.

Automatically collected data: standard analytics data (pages visited, general location at country/region level, device/browser type) via Google Analytics and Google Ads, used to understand site traffic and measure ad performance. This only happens if you accept analytics cookies via the cookie banner.

AI concierge chat widget: if you use the chat widget on this site, your messages are sent to Anthropic (the provider of the Claude AI model) solely to generate a reply. We don't use chat content for any other purpose.

3. Why we process your data (legal basis)

4. Who we share data with

We use the following third-party processors to run Korvify. Each only receives the data it needs to perform its specific function:

Some of these providers may process data outside the EU/EEA (for example, in the United States). Where that happens, we rely on the safeguards those providers offer, such as Standard Contractual Clauses, to keep your data protected to an equivalent standard.

We never sell your personal data to third parties.

5. Google Business Profile Review Automation

With the account holder’s authorization, our review automation accesses the connected Google Business Profile accounts, business locations, and customer reviews, including reviewer display names, review text, star ratings, and review dates.

We use this information to identify eligible reviews and publish replies on behalf of the authorized businesses. The current automation replies to new four- and five-star reviews using predefined messages. One-, two-, and three-star reviews remain for manual handling, and reviews with existing replies are skipped.

The automation runs within Google Apps Script. Business location identifiers and automation settings are stored in the script. Review information is processed during each run, and execution logs may contain review identifiers and processing errors. This automation does not send review information to an external AI service.

Google user data is not sold, used for advertising, or shared with third parties outside what is necessary to operate the automation through Google’s services.

Korvify’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

You can stop the automation and revoke its access through your Google Account’s third-party connections settings. For questions or requests concerning stored automation settings or logs, contact info@korvify.com.

6. How long we keep your data

We keep account and business data for as long as your account is active, plus a reasonable period afterward to comply with tax/accounting obligations (typically up to the period required under Spanish law). Contact-form submissions that don't turn into a customer relationship are kept only as long as needed to follow up, and deleted after a reasonable period of inactivity.

7. Your rights

Under GDPR, you have the right to:

To exercise any of these rights, email info@korvify.com. You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD).

8. Cookies

This site uses a cookie consent banner that lets you accept or decline non-essential (analytics/advertising) cookies. Strictly necessary cookies required for the site to function are used regardless, as permitted under EU cookie law.

9. Children's data

Korvify is a business-to-business service intended for business owners and is not directed at, or knowingly used to collect data from, children.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will always reflect the most recent version.

11. Contact

Questions about this policy or your data: info@korvify.com.