Privacy Policy

1. Introduction

Korvai (“we,” “our,” or “us”) is a product of Pakruli Labs, based in Minnesota. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Korvai application and related services (collectively, the “Service”). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information that you provide directly and information collected automatically:

Account Information

• Email address (used for authentication via magic link)
• Name and role within your organization
• Organization name and details

Usage Data

• Resource allocation and planning data you create
• Timesheet entries and project assignments
• Scenario and version history data

Automatically Collected Information

• Browser type and version
• Pages visited and features used
• Date and time of access
• IP address

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate your identity and manage your account
• Send transactional emails (magic links, invitations, notifications)
• Improve and develop new features
• Monitor usage patterns and diagnose technical issues
• Comply with legal obligations

4. Data Storage and Security

Your data is stored securely using industry-standard infrastructure. We use Supabase (built on PostgreSQL) for database storage and authentication, and the application is hosted on Vercel. Both providers maintain SOC 2 compliance and implement encryption at rest and in transit. We employ row-level security policies at the database level to ensure strict data isolation between organizations.

5. Cookies and Local Storage

We use HTTP-only cookies to manage authentication sessions (JWT tokens). We also use browser local storage to persist user interface preferences such as sidebar state and zoom level. We do not use third-party tracking cookies or advertising cookies.

6. Third-Party Services

We use the following third-party services to operate Korvai:

• Supabase — database hosting and authentication
• Vercel — application hosting and deployment
• Resend — transactional email delivery

These providers process data on our behalf and are contractually obligated to protect your information. We do not sell your personal information to any third party.

7. Data Retention

We retain your account and planning data for as long as your account is active or as needed to provide the Service. If you or your organization administrator requests account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Versioned plan snapshots are retained as part of your organization's data and are deleted when the organization account is closed.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing

To exercise any of these rights, please contact us at hello@pakrulilabs.com.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: hello@pakrulilabs.com

Pakruli Labs
Minnesota, United States