Website

Privacy Policy

How this website handles visitor data.

Last updated: September 1, 2026

Scope

This policy covers corveil.com — the marketing website you are reading right now. That includes our documentation at /docs, which is built separately from the main site and loads a different set of third-party resources. Where they differ, this policy says so.

It does not describe the Corveil gateway product. Corveil is deployed inside your own environment or as managed SaaS, and the analytics described below are not part of it — the product does not load Google Analytics. For how the product handles customer data, including its subprocessors, see the Trust Center.

Website Analytics

We use Google Analytics 4 to measure how this website is used.

This site loads Google Analytics 4 (measurement ID G-2MHZK8EQLN) on the marketing pages: the rebuilt public pages (/, /corvus, /getting-started, and the rest of the product site), this policy, and the Trust Center. We use it to understand which pages are working. We do not sell visitor data.

Our documentation at /docs does not load Google Analytics. It loads no external resources at all.

What Is Sent	When	Data Processed
Page views	On each marketing page you open	The page viewed and your navigation within the site, the referring URL, approximate location derived from your IP address, and device/browser characteristics reported by your browser.
Form submissions	When you submit the Alpha Program form	An event recording that a submission happened (`waitlist_signup`) and which page it came from. Your email address is not sent to Google.

Loading Google Analytics means your browser contacts Google-operated hosts. The following are permitted by this site’s Content Security Policy for analytics:

www.googletagmanager.com
www.google-analytics.com
region1.google-analytics.com
analytics.google.com
www.google.com
stats.g.doubleclick.net

One of these, stats.g.doubleclick.net, belongs to Google’s advertising network rather than its measurement infrastructure. Your browser contacts it when Google Analytics’ advertising features are enabled on our property. The opt-out and blocking options below apply to it as they do to the rest.

Google processes this data as described in Google’s Privacy Policy. You can opt out of Google Analytics across all sites by installing the Google Analytics Opt-out Browser Add-on, or by blocking the hosts listed above with your browser or an extension. Blocking them does not affect your ability to use this website.

Fonts & Other Third-Party Content

Requests your browser makes to other companies while loading this site.

Google Fonts. The marketing pages load a stylesheet from fonts.googleapis.com and font files from fonts.gstatic.com. Both are operated by Google and are separate from Google Analytics: they receive your IP address and browser user agent when the page loads, before you interact with anything, and blocking Analytics does not stop them. This data is handled under Google’s Privacy Policy. Our documentation at /docs serves its fonts from our own servers and makes no request to Google.

Video. Videos on this site are served from our own servers. We do not currently embed a third-party video player, so no video provider receives your data.

Links to other sites. Some pages link out to services we do not run — for example, our demo booking page is hosted by Google Calendar. Those sites receive your data only if you choose to follow the link, and their own privacy policies apply once you do.

Information You Submit

What we store when you use a form on this site.

The Alpha Program form at /getting-started asks for your email address, name, and company. When you submit it, we record the following:

Data	Why We Collect It
Email address	To reply to you and so the product waitlist on corveil.io has the same details.
Name and company	So we can consider the request and so the product waitlist on corveil.io has the same details.
Which form you used	To know the submission came from the Alpha Program page.
Submission time	To order and de-duplicate submissions.

Form submissions are handled on our behalf by our internal customer relationship management system, which records your submission so we can follow up; by WorkOS, which holds the signup waitlist that gates access to the product at corveil.io and sends you the waitlist confirmation; and by Resend, which notifies our team of the submission. Our customer relationship management system may in turn post a notification of your submission, including your email address, to our internal Slack workspace. We pass on the fields you typed (email, name, and company) plus which form you used and the submission time. We do not store a copy of the submission on this website’s servers, and we do not sell this information or share it with advertisers.

How long we keep it. This website does not keep a local file of form submissions. WorkOS, our customer relationship management system, and the internal notification email retain what they receive under their own retention. If you want your information deleted, ask us using the address below and we will act on the request with those processors.

Cookies & Local Storage

On the marketing pages, Google Analytics sets two cookies to distinguish visitors and sessions: _ga and _ga_2MHZK8EQLN, each with roughly a two-year expiry. Blocking Analytics or installing the opt-out add-on prevents further collection but does not delete cookies already stored in your browser — you can clear those through your browser settings. Google describes both in its Analytics cookie usage documentation. We set no advertising cookies of our own. Google Fonts only serves static assets and does not set cookies through this site.

This site also uses your browser’s local storage for one interface preference. It does not contain information about you, is not transmitted to us, and can be cleared through your browser settings:

vitepress-theme-appearance — on the documentation pages at /docs, remembers whether you chose the light or dark theme.

Your Choices

Analytics: opt out using the browser add-on or host blocking described above. The site works normally either way.
Fonts: blocking Analytics does not stop the Google Fonts requests. You can block fonts.googleapis.com and fonts.gstatic.com separately; pages stay readable and fall back to your system fonts.
Forms: submitting a form is entirely optional — you can read every page on this site without giving us any information.
Access or deletion: to ask what we hold about you, or to have it deleted, email us at the address below and we will act on the request.

Privacy Questions

Questions about this policy, or requests to access or delete information we hold about you.

security@corveil.com