Privacy Policy for Korva

Overview

Korva is committed to protecting the confidentiality and security of your engineering proposals and RFP data. This privacy policy explains how we handle your information and complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What Data We Collect

When you use Korva, we collect:

• RFP Documents:Documents you upload for proposal generation
• Project Data:Project details, scope, timelines, costs, and technical specifications
• Team Information:Names, email addresses, and roles of your team members
• Usage Data:How you use Korva (proposal generation, collaboration, approvals)

How We Use Your Data

For Service Delivery

Your RFPs and project data are processed to:

1. Extract project information using AI analysis
2. Generate proposal drafts
3. Enable team collaboration and version control

We Do Not Train on Your Content

Korva does not use your uploaded content or generated proposals to train, fine-tune, or otherwise improve any AI model — our own, a shared Korva model, or any third-party model. Our AI inference providers are contractually prohibited from using your content for model training. See our Terms of Service for the full commitment.

We improve Korva through code changes, prompt engineering, evaluation on synthetic or public data, and operational telemetry — for example, request latency, error rates, and feature usage — that does not include the text of your proposals or uploads.

AI Processing

Korva uses AI to generate proposals. Here's how it works:

What Happens to Your Data

When you upload an RFP:

1. Your document is sent to our system servers (encrypted in transit)
2. The AI analyzes the document to extract project details
3. A proposal draft is generated based on your templates and firm data
4. The document is returned to Korva
5. Your RFP is stored in Korva's database (encrypted at rest)

Our AI Data Policy

• Korva does not use your content to train or fine-tune any AI model
• Third-party AI inference providers are contractually prohibited from using your data for their own model training or retention beyond what is needed to serve the request
• Built on infrastructure from providers that maintain SOC 2 certification
• Proposals you generate remain your intellectual property

Your Control

• You can delete proposals at any time (see "Data Deletion" below)
• Your firm's templates and rate cards are stored only in Korva
• RFPs are deleted when you remove them from your Korva account

Data Storage & Security

Encryption

• In Transit: All data is encrypted using TLS 1.3
• At Rest: Databases use AES-256 encryption

Access Control

• Only authorized Korva team members can access data
• Team members are authenticated and have role-based access
• Client data is never accessible to other firms

Data Deletion

You have full control over your data:

Delete Individual Proposals

You can delete any proposal from your Korva account at any time. Deleted proposals are permanently removed within 30 days.

Delete Your Account & All Data

You can request complete account deletion. All your data (RFPs, proposals, team information) will be permanently deleted within 30 days of your request.

Deletion of Past Projects

If you want to delete old/sensitive proposals:

1. Log in to Korva
2. Go to Projects → Select proposals → Delete
3. Projects are permanently removed after 30 days
4. No copies are retained

Request Deletion via Email

Contact privacy@korvatech.ca to request bulk deletion or account termination.

Your Rights

You have the right to:

• Access your data anytime
• Correct inaccurate information
• Delete your data
• Opt out of non-essential communications
• Request a copy of all data we hold

Contact us to exercise any of these rights.

Changes to This Policy

We may update this privacy policy to reflect:

• Changes to Canadian privacy laws
• New features in Korva
• Updated third-party services

We'll notify you of material changes via email.