Effective: June 9, 2026
Korvai (“we”, “our”, “us”) operates the website at korvai.com and the Korvai Chrome Extension. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your data.
When you sign up, we collect your email address and store a hashed password credential managed by Supabase Auth. We do not store plain-text passwords.
We store the context documents, prompt templates, and skills you create in the Korvai web app. This content is associated with your account and is never shared with other users or third parties.
The Chrome extension stores your Korvai authentication token (JWT) locally inchrome.storage.localon your device. This token is used solely to authenticate requests to korvai.com API endpoints. It is never sent to any third-party service.
When you click “Activate sidebar on this page” on a site not natively supported by Korvai, the hostname of that site (e.g. “meta.ai”) is sent to our server and stored against your account. We use this to understand which AI platforms our users want supported next. No page content, URLs beyond the hostname, or browsing history is collected.
The list of sites you activate the sidebar on is stored locally inchrome.storage.localon your device so the sidebar persists across visits. This list is not synced to our servers beyond the hostname telemetry described above.
The Korvai extension injects a sidebar UI into supported AI chat platforms (claude.ai, chatgpt.com, gemini.google.com, perplexity.ai, copilot.microsoft.com, grok.com) and any additional sites you choose to activate it on. The extension writes your selected context and prompts into the chat input field when you click Inject or copies them to your clipboard when you click Copy. The extension does not read, record, or transmit the existing content of any web page or chat conversation.
We do not use your data for advertising, profiling, or sale to third parties.
We use the following sub-processors to operate the service. Each receives only the minimum data necessary to perform their function:
Your account data and content are retained for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days. Authentication tokens stored locally by the Chrome extension are removed when you sign out or uninstall the extension.
You can access, export, or delete your data at any time from your account Settings page. To request data deletion or a data export, email privacy@korvai.com. We will respond within 30 days.
All data is encrypted in transit via HTTPS. Authentication tokens are stored only inchrome.storage.localand never in cookies or localStorage. Database access is protected by row-level security policies — each user can only access their own data.
We may update this policy from time to time. Material changes will be communicated via email or a notice in the app. Continued use of Korvai after changes constitutes acceptance of the updated policy.
Questions about this policy? Email privacy@korvai.com.