This policy explains how KorvenzaTech ("we", "us") handles personal data when you visit korvenzatech.com, send us an enquiry, or use the Ask Korvenza AI assistant. It does not cover software we build for clients; those projects are governed by the agreement with each client.
Who we are
KorvenzaTech is a founder-led software and AI product studio based in Islamabad, Pakistan, working with clients internationally. For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the controller of the personal data described here. Contact: info@korvenzatech.com.
What we collect
- Enquiry and project forms: your name, work email, company, country, enquiry type, the service you are interested in, budget range, preferred contact method and the project details you write. If you ask for WhatsApp or a call, we also use the number you give us.
- AI scope analysis on the project form: if you click "Analyze idea with AI scope engine", the idea you wrote is sent to our AI provider to generate a suggested scope.
- Ask Korvenza AI: the messages you type and the assistant's replies. Do not share passwords, payment details or confidential information in the chat.
- Emails and calls: what you send us when you contact us directly.
- Technical data: our hosting provider processes standard request logs (IP address, browser type, requested page, time) to deliver and protect the website.
We do not use advertising trackers or analytics cookies, and we do not buy personal data.
Why we use it and our legal basis
- To reply to your enquiry and prepare a proposal — steps taken at your request before a contract (GDPR Art. 6(1)(b)).
- To answer questions in the AI assistant — our legitimate interest in helping visitors understand our services (Art. 6(1)(f)), and your request.
- To keep the website secure and working — legitimate interest (Art. 6(1)(f)).
- To meet legal, tax and accounting obligations once we work together (Art. 6(1)(c)).
We only send marketing emails if you ask for them, and every such email lets you unsubscribe.
Who processes data for us
We use a small number of service providers ("processors") who handle data on our behalf under their own data protection terms:
- Vercel — website hosting and serverless functions (request logs, form and chat requests in transit).
- Google — Google Workspace (email and storage of enquiries) and the Google Gemini API, which generates the AI assistant's replies from the messages you send.
- Google Fonts — delivers the website's fonts; your browser requests them from Google's servers.
We never sell, rent or trade your personal data. We share it with others only if the law requires it or with your permission.
International transfers
We are based in Pakistan and our providers operate globally, including in the United States. When personal data from the EU or UK is transferred, we rely on our providers' transfer safeguards (such as the European Commission's Standard Contractual Clauses and the UK addendum) and limit what is transferred to what is needed.
How long we keep it
- Enquiries that do not lead to a project: up to 24 months after our last contact, then deleted.
- Client project correspondence and records: for the duration of the engagement and as long as required by law afterwards.
- AI assistant: our server does not keep a transcript database. Your conversation is stored in your own browser (local storage) so it survives a page reload; you can clear it at any time with the assistant's reset option or by clearing site data. Requests pass through our hosting and AI providers, which keep limited logs under their own retention policies.
- Hosting request logs: kept by Vercel for a short period under its retention policy.
Security
The website is served only over HTTPS. Our API keys stay on the server and are never sent to your browser. Access to enquiries is limited to the KorvenzaTech team. No system is perfectly secure, but we review our setup regularly and fix issues promptly.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct inaccurate data;
- delete your data;
- restrict or object to certain processing;
- transfer your data to you or another provider in a portable format;
- withdraw consent where we rely on it.
Email info@korvenzatech.com and we will respond within one month. If you are in the EU or UK and are unhappy with our response, you can complain to your local data protection authority (in the UK, the Information Commissioner's Office).
Children
Our website and services are intended for businesses and adults. We do not knowingly collect data from children under 16.
Changes
We will update this page when our practices change and show the date of the latest version at the top.