Privacy policy

1. The short version

2. What we collect

Account and sign in. Depending on how you sign in: your Telegram id and handle, your email address and the one time codes used to verify it, or the wallet address you connect. If you signed in with X in the past, we also keep your X handle or id. We also store the wallet addresses linked to your account and any names you give them.

What you do in the app. Your chat messages and the assistant's replies, the assistant's saved notes about your preferences, orders and alerts you create, watchlists, scheduled or automated actions, transaction instructions and a record of transactions you prepare or sign, notification settings, rewards and referral records, and support tickets you send.

If you add your own API key. If you give Corvo a key for another service, it is stored encrypted and used to make requests you ask for.

Technical data. Your IP address and request details, used for security and rate limits, your device and browser type, error reports from the app, and basic usage data.

Cookies and local storage. Corvo uses a session cookie to keep you signed in, a short lived cookie during X login, a small cookie that remembers you have seen the intro, and browser storage for settings such as theme and watchlist. We do not use advertising cookies.

What we do not collect. Private keys, seed phrases and wallet passwords.

3. Why we use it

To sign you in and keep your account secure, to answer your questions and prepare the actions you ask for, to show your balances, orders and history, to send alerts and notifications you asked for, to prevent abuse and fraud, to fix bugs and improve the service, to answer support requests, and to meet legal duties.

4. Who sees it

We do not sell your personal data. We share it only as needed:

• AI model providers. What you type to the assistant, and the context needed to answer, is sent to the model provider that handles the request.
• Wallet provider. If you use an embedded wallet, the wallet provider processes the data needed to create and operate it.
• Login providers. Telegram, and X for accounts that used it before, receive the sign in requests you make with them.
• Market, routing and safety services. To quote a swap or check a token, Corvo sends token addresses, amounts and the networks involved to routers, data providers and token safety services.
• Hosting and infrastructure. Our servers and backups.
• Legal and safety. If the law requires it, or to protect Corvo and its users.

5. Blockchain data is public

Transactions you send are recorded on public blockchains. Anyone can see them, and Corvo cannot edit or delete them. Corvo does not make your on-chain activity private.

6. How long we keep it

We keep account data while your account exists, and keep some records for as long as needed for security, legal and backup purposes.

7. Security

Corvo uses access controls, encrypted storage for sensitive items and monitoring. No system is perfectly secure. Protect your own accounts, and never share a seed phrase.

8. Your choices

You can ask us to show, correct or delete the data we hold about you, and to close your account. Use Support inside the app to ask. Deleting an account does not erase blockchain records. You can clear browser storage and cookies at any time, though you may be signed out.

9. Children

Corvo is not for anyone under 18. We do not knowingly collect data from children.

10. Where data is processed

Corvo and its providers may process data in countries other than yours.

11. Changes

We may update this policy. The date at the top shows the latest version.

12. Contact

Questions about this policy: use Support inside the app.