Corovix ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and the choices you have. We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
1. What we collect
- Account data: name, email, business name, ABN, contact details, logo.
- Business data: customers, quotes, invoices, contracts, expenses, tasks and goals you create.
- Billing data: plan tier, subscription status. Card details are collected and stored by Stripe — we never see them.
- Usage data: pages visited, features used, device and browser info, IP address, via PostHog.
- Support data: messages you send us and feedback you submit in-app.
2. How we use it
- Provide, operate and improve the Service.
- Authenticate you and secure your account.
- Process payments and manage subscriptions.
- Send transactional emails (document deliveries, password resets, billing notices, daily digests you opt into).
- Diagnose issues and prevent abuse.
- Respond to your enquiries.
3. Subprocessors
We share limited personal information with the following providers so they can perform services on our behalf:
- Supabase — application database, authentication and file storage.
- Cloudflare — hosting and content delivery.
- Stripe — payment processing and subscription management.
- Resend — transactional email delivery.
- PostHog (EU region) — product analytics.
Each provider is bound by its own privacy and security obligations. Some may store data outside Australia; where they do, we take reasonable steps to ensure comparable protections.
4. Row-level security & isolation
Your business data is stored in a multi-tenant database with row-level security policies enforced by the database itself, scoped to your business ID. Staff access is limited to the minimum necessary for support and operations.
5. Cookies & analytics
We use first-party cookies and local storage to keep you signed in and remember preferences (e.g. theme). PostHog uses cookies to measure product usage. You can block cookies in your browser, but parts of the Service may stop working.
6. Email preferences
Transactional emails (billing, password reset, documents you send) are required to operate the Service. Optional emails such as the daily digest can be disabled in Settings, and every marketing email includes an unsubscribe link.
7. Retention
We keep your data for as long as your account is active. After you delete your account we retain data only as long as needed to meet legal, tax and accounting obligations, then delete or de-identify it.
8. Your rights
You can access, correct or export most of your data from within the app. To request deletion or ask a question about your personal information, email support@corovix.com.au. You have the right to complain to the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we have mishandled your information.
9. Security
We use TLS in transit, encryption at rest via our hosting providers, row-level security in the database, and least-privilege access controls. No system is perfectly secure — if you believe your account has been compromised, email us immediately.
10. Children
The Service is not directed to anyone under 18 and we do not knowingly collect their personal information.
11. Changes
We may update this policy from time to time. Material changes will be notified in-app or by email.
12. Contact
Privacy questions? Email support@corovix.com.au.