Privacy Policy

This policy explains what Covsy collects, why, and who else handles it. It applies to the Covsy web app.

What we collect

• Account details: your name, email address, and a scrambled (hashed) version of your password. Optionally, the brokerage and phone number you add to your profile.
• Documents you upload: the PDF files, the text we read from them, and images of their pages.
• What you do in Covsy: the questions you ask, the answers and reports produced, client profiles you save for fit checks, and the links you share.
• Basic technical data: your IP address and request logs, used to keep the service secure and prevent abuse.

How we use it

• To run Covsy for you: reading documents, answering questions, and building reports.
• To email you account messages, such as confirming your address or resetting your password.
• To enforce plan limits, prevent abuse, and fix problems.

We do not sell your personal information or your documents.

Who else handles your data

• OpenAI. Images of scanned pages, the text of your documents, and your questions are sent to OpenAI's API to read the pages, produce search indexes, and answer questions. They are processed under OpenAI's API terms.
• Our hosting and email providers, which store the app's data and deliver account emails on our behalf.
• People you share with. Anyone with a share link you create can see that summary, the source pages it cites, and your profile name, brokerage, and phone number.

We may disclose information if the law requires it.

Cookies

Covsy uses one cookie, to keep you signed in. We do not use advertising or cross-site tracking cookies.

How long we keep it

We keep your account and documents until you delete them or ask us to. Deleting a document in the app removes its file, page images, and search index. Share links stay active until you turn them off.

Your choices

• Delete documents and turn off share links in the app at any time.
• Update your profile details in Settings.
• Ask for a copy of your data or for your account to be deleted by emailing support@covsy.com from the address on the account.

Client information

If you enter information about your clients, such as a name on a saved fit-check profile, you are responsible for having the right to do so. Avoid entering sensitive personal details that Covsy does not need.

Security

Passwords are stored hashed, documents are only available to the account that uploaded them and to holders of share links for the specific pages cited, and connections are encrypted in transit. No system is perfectly secure; tell us right away if you suspect a problem.

Children

Covsy is for adults in a professional setting and is not directed to children.

Changes and contact

We will update this page and its date when our practices change. Questions: support@covsy.com.