Privacy Policy

Corvane Systems, Inc. ("Corvane", "we", "us") provides supply chain visibility software to business customers. This policy explains what personal data we collect, why we collect it, and how it is handled. It applies to corvane.de5.net and to the Corvane Signal platform.

1. Data we collect

Information you give us

• Contact details submitted through our website forms (name, work email, company, enquiry text).
• Account details for platform users: name, work email, role, and authentication identifiers issued by your organisation's identity provider.
• Support correspondence and any files you choose to attach.

Information generated by using the platform

• Operational records your organisation connects to the platform, which may incidentally contain names of your employees or counterparties (for example a shipment contact or a receiving clerk).
• Technical logs: IP address, browser type, session identifiers, audit events, and API request metadata.

2. How we use personal data

• To provide, secure and support the platform.
• To respond to enquiries and manage customer relationships.
• To meet legal, tax and contractual obligations.
• To improve reliability and diagnose faults, using aggregated and de-identified telemetry.

We do not sell personal data. We do not use customer data to train third-party artificial intelligence models.

3. Use of third-party AI model providers

Some internal Corvane tooling uses large language models accessed through contracted cloud providers. These uses are limited to:

• software development assistance for our own engineering team (code completion, review and test generation on internal repositories);
• summarisation and translation of internal business documents and supplier correspondence;
• internal question answering over our own engineering and product documentation.

These tools are available only to authenticated Corvane employees, behind corporate single sign-on, with per-user quotas and full audit logging. Inputs and outputs are retained in our cloud project logs for a maximum of 30 days for security review, are not used to train or fine-tune any model, and are not shared with third parties beyond the contracted model provider acting as our processor. No consumer-facing or public-facing chat interface is operated by Corvane.

Our model providers are bound by data processing terms that prohibit training on our inputs and require equivalent security controls.

4. Security

• SOC 2 Type II, audited annually by an independent firm.
• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Least-privilege access, mandatory MFA for all personnel, and role-based authorisation in the platform.
• Immutable audit logs of administrative and data-export actions.
• Annual penetration testing and a documented incident response plan with 72-hour customer notification.

To report a vulnerability, contact security@v.cd.

5. Subprocessors

We use a limited set of infrastructure and service providers. The current list, with purpose and location, is available on request from platform@v.cd. Customers are notified at least 30 days before a new subprocessor begins processing customer data.

6. Retention

Website enquiry data is retained for 24 months. Customer platform data is retained for the term of the agreement and deleted within 30 days of termination, unless a longer period is required by law. Security and audit logs are retained for 12 months.

7. Your rights

Depending on your jurisdiction you may have the right to access, correct, delete, restrict or port your personal data, and to object to processing. Requests can be sent to privacy@v.cd. We respond within 30 days. Where we process data on behalf of a customer, requests should be directed to that customer, who is the controller.

8. International transfers

Corvane is based in the United States. Where personal data of individuals in the EEA or UK is transferred to us, we rely on Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum.

9. Changes

We will post any material change to this policy on this page and update the date above. Customers with an active agreement receive notice by email.

10. Contact

Corvane Systems, Inc.
1408 West 6th Street, Suite 300, Austin, TX 78703, United States
privacy@v.cd