Privacy Policy

Last updated: 29 July 2026

This policy explains what personal data Korvify collects, why, and what rights you have over it. Korvify is operated by Sandeep Sanjay Kamtam, Autónomo, based in Tenerife, Spain, and is the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

1. Who we are

Data controller: Sandeep Sanjay Kamtam (Korvify), Tenerife, Spain.
Contact: info@korvify.com

2. What data we collect

When you use the contact form on this site: the business type, goal, and email address you provide, sent to us so we can reply to your inquiry.

When you sign up for a Korvify plan: your business name, business type/vertical, email address, and account password (stored securely via our authentication provider, Supabase — we never see or store your password in plain text). Once you're a customer, we also collect the business profile and campaign details you provide (location, contact info, branding, offer, target audience) in order to run your advertising campaigns.

Payment information: handled entirely by Stripe, our payment processor. Korvify does not store your card details.

Automatically collected data: standard analytics data (pages visited, general location at country/region level, device/browser type) via Google Analytics and Google Ads, used to understand site traffic and measure ad performance. This only happens if you accept analytics cookies via the cookie banner.

AI concierge chat widget: if you use the chat widget on this site, your messages are sent to Anthropic (the provider of the Claude AI model) solely to generate a reply. We don't use chat content for any other purpose.

3. Why we process your data (legal basis)

• Contract: to provide the service you've signed up for and to respond to your inquiries.
• Legitimate interest: to understand how our site is used and improve it, and to run the AI chat assistant.
• Consent: for non-essential analytics cookies (you can decline these via the cookie banner at any time).
• Legal obligation: where we're required to keep certain records (e.g. invoicing) under Spanish tax law.

4. Who we share data with

We use the following third-party processors to run Korvify. Each only receives the data it needs to perform its specific function:

• Supabase — account authentication and database hosting (EU region).
• Stripe — payment processing and subscription billing.
• Resend — delivering contact-form submissions to our inbox.
• Anthropic — powers the AI concierge chat widget.
• Google (Analytics, Ads, Tag Manager) — site analytics and ad performance measurement.
• Cloudflare — hosting and content delivery for this website.

Some of these providers may process data outside the EU/EEA (for example, in the United States). Where that happens, we rely on the safeguards those providers offer, such as Standard Contractual Clauses, to keep your data protected to an equivalent standard.

We never sell your personal data to third parties.

5. How long we keep your data

We keep account and business data for as long as your account is active, plus a reasonable period afterward to comply with tax/accounting obligations (typically up to the period required under Spanish law). Contact-form submissions that don't turn into a customer relationship are kept only as long as needed to follow up, and deleted after a reasonable period of inactivity.

6. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time (for anything based on consent, like analytics cookies)

To exercise any of these rights, email info@korvify.com. You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD).

7. Cookies

This site uses a cookie consent banner that lets you accept or decline non-essential (analytics/advertising) cookies. Strictly necessary cookies required for the site to function are used regardless, as permitted under EU cookie law.

8. Children's data

Korvify is a business-to-business service intended for business owners and is not directed at, or knowingly used to collect data from, children.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will always reflect the most recent version.

10. Contact

Questions about this policy or your data: info@korvify.com.