Corvus Network Inc.

Privacy Policy

Download PDF

1. Introduction

Corvus Network Inc. ("we", "our", "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our fiduciary intelligence platform and related services.

This policy applies to all users of our platform, including website visitors, consultation requestors, and clients with active service agreements. We operate in compliance with applicable data protection laws, including GDPR where relevant. For EU/EEA residents, please also review our GDPR Notice.

2. Information We Collect

2.1 Information You Provide

• Contact Information: Name, email address, phone number, organization name
• Financial Information: Portfolio range, jurisdiction of residence, entity type
• Account Credentials: Email and password for secure portal access
• Consultation Details: Inquiry messages, specific service requirements
• Documents: Financial statements, trust documentation, and other confidential materials you upload
• Payment Information: Processed securely through Stripe (we do not store full credit card details)

2.2 Information Collected Automatically

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on pages, navigation patterns
• Cookies and Tracking: See our Cookie Notice for details
• Session Data: Authentication tokens, session identifiers (stored securely in PostgreSQL)

3. How We Use Your Information

We process your personal information for the following purposes:

• Service Delivery: To provide consultation services, deliver intelligence packages, and fulfill contractual obligations
• Communication: To respond to inquiries, send service updates, and provide client support
• Account Management: To maintain your secure portal access and manage authentication
• Payment Processing: To process transactions and maintain billing records
• Platform Security: To protect against fraud, unauthorized access, and security threats
• Compliance: To meet legal and regulatory requirements
• Service Improvement: To analyze usage patterns and enhance platform functionality

4. Data Security Measures

We implement robust security protocols to protect your information:

• Encryption: All data transmitted over HTTPS with TLS 1.3 protocol
• Storage Security: Documents stored in Google Cloud Storage with encryption at rest
• Password Protection: Bcrypt hashing with 10 salt rounds for password security
• Session Management: Secure session storage in PostgreSQL with HTTPOnly cookies
• Access Controls: Role-based access with strict admin privilege management
• Regular Audits: Continuous monitoring and security assessments

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• Service Providers: Stripe for payment processing, Google Cloud for secure storage (under strict data processing agreements)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets (with notice to affected parties)
• Consent: When you explicitly authorize disclosure

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specific retention periods:

• Active Accounts: Duration of service relationship plus 7 years for financial records
• Consultation Requests: 5 years from submission date
• Client Documents: 10 years from service completion
• Technical Logs: 90 days for security purposes

7. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdrawal: Withdraw consent for specific processing activities

To exercise these rights, contact [email protected]. EU/EEA residents should also review our GDPR Notice for additional rights.

8. Cookies and Tracking Technologies

We use essential cookies for platform functionality and session management. For complete information about our use of cookies, tracking technologies, and your choices, please see our Cookie Notice and Information Management page.

9. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of external sites. We encourage you to review the privacy policies of any third-party services you access.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside your state, province, or country. We ensure appropriate safeguards are in place for all international transfers in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to active clients. We encourage periodic review of this page. The "Effective Date" at the top indicates when the policy was last updated.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information:

• Privacy Officer: [email protected]
• Policy Inquiries: [email protected]
• General Support: [email protected]

Please also review our related policies: Terms & Conditions, Terms of Service, Refund Policy, and GDPR Notice.