Privacy Policy

1. Who We Are

Corva is a product of Flowve ("we", "us", or "our"), an independent software studio based in Ontario, Canada that builds tools for content creators and streamers.

Corva is a desktop application that finds the best moments in a creator's gameplay recordings, edits them into vertical clips, publishes them to the creator's own connected accounts on TikTok, YouTube, Instagram and Facebook, and shows how each clip performed.

For questions about this policy, contact us at corvagg@gmail.com.

2. Information Stored on Your Device

Corva runs on your computer. The following information is stored locally on your device, in folders you choose and in Corva's application data folder. We do not have access to it unless you send it to us (see Section 4).

• Your recordings and clips: the recordings Corva watches, the projects it creates, and the clips you render.
• Clip data: transcripts, clip scores, the clips you approve or reject and any reasons or notes you add, titles, captions, hashtags and your publishing schedule.
• Connected account data: for each account you connect, the platform's account identifier, display name, profile picture link, the permissions you granted, and the access and refresh tokens that let Corva act for you. Tokens are encrypted using Windows' built-in data protection.
• Performance data: for clips you publish, the post identifier and link, and the counts the platform reports, such as views, likes, comments and shares.
• Settings: your preferences, watched folders, and any API keys or platform credentials you enter.
• Logs: a publishing history of recent attempts and application logs, used to diagnose problems.

3. Information Sent to Service Providers

Some features need information to leave your device. When they do, it goes to the providers below.

AI analysis

To find moments and suggest titles and captions, Corva sends parts of your recordings to AI providers:

• Anthropic (Claude): a recording's transcript, a timeline of detected events, and a small number of still frames; and the names of games you add, so Corva can research them.
• Google (Gemini): a lower-resolution copy of a clip, including its audio, when Corva suggests its titles and captions, and a few still frames to identify the game. If you turn on full-recording analysis with your own Gemini key, a lower-resolution copy of the whole recording is sent as well. Corva asks Google to delete uploaded video files once processing finishes.

By default these requests pass through an AI gateway we operate on Cloudflare, which labels each request with a random identifier for your installation of Corva. If you enter your own API key or choose a different AI provider in Settings, the same information is sent to that provider. Speech transcription itself runs on your device. Anthropic, Google and any provider you choose process this information under their own terms and privacy policies.

Crash reports and usage analytics

• Sentry: when Corva encounters an error, a report with details of the error, your app version, your operating system and technical information about your device is sent to Sentry so we can fix it.
• PostHog: Corva records how its features are used, such as which screens you open, when processing starts and finishes, how many clips are approved or rejected, and when publishing is triggered. These events are tied to the random installation identifier, not to your name or email. You can turn usage analytics off in Corva's Settings.

Other services

• Cloudflare: delivers Corva's updates and its AI engine download, and hosts corva.gg and the page that returns you to Corva after connecting Facebook or Instagram. That page passes the one-time sign-in code to the app on your device and stores nothing.
• Hugging Face: provides the speech recognition model Corva downloads on first setup.
• Steam: Corva sends the names of games you add to Steam's public store service to fetch game artwork.

Some of these providers process information in the United States.

4. Feedback You Send Us

If you send feedback from inside Corva, we receive your message, a screenshot if you choose to include one, the random installation identifier, your app version and operating system. When you report a problem, the report also includes recent application log lines and recent activity in the app, so we can reproduce the issue.

5. Connected Social Media Accounts

You choose which accounts to connect. Corva connects through each platform's official sign-in and acts only on the accounts you connect, when you publish a clip or refresh your analytics. Access and refresh tokens are stored on your device and are never sent to our servers. Videos you publish go directly from your device to the platform.

TikTok

• user.info.basic: your TikTok account identifier, display name and avatar, to show which account is connected.
• video.publish: posts the clips you approve to your TikTok account, with the caption, privacy level, and comment, duet and stitch settings you choose.
• video.list: reads the list of your own public TikTok videos and their view, like, comment and share counts, so Corva can match each post to its clip and show how it performed in the Analytics tab. Corva reads only the connected account's own videos.

YouTube

• Upload: uploads the clips you approve to your channel, with the title, description, tags and privacy setting you choose.
• Read-only access: your channel identifier, channel name and thumbnail, and the view, like and comment counts of videos Corva published.

Corva uses YouTube API Services. By connecting YouTube, you agree to the YouTube Terms of Service, and Google's handling of your data is governed by the Google Privacy Policy. You can revoke Corva's access at any time from your Google account permissions.

Facebook

• Lists the Facebook Pages you manage so you can choose one, posts the clips you approve to that Page, and reads the view counts of videos Corva published there.

Instagram

• Identifies your Instagram professional account and its linked Facebook Page, publishes the clips you approve as Reels, and reads performance counts, such as views, likes, comments and shares, of Reels Corva published.

Disconnecting an account

Removing an account in Corva deletes its tokens from your device. It does not withdraw the permission on the platform itself; to do that, remove Corva from the connected apps in your account settings on TikTok, Google, Facebook or Instagram. Clip history and performance data already saved stay on your device until you delete them.

Each platform's own privacy policy governs how it handles the content you publish and your account data.

6. How We Use Your Information

We use information to provide Corva's features, to fix errors and improve reliability, to respond to your feedback and support requests, and to notify waitlist members about Corva.

We do not sell or rent your personal information, use it for advertising, or use your recordings, clips or connected account data to train AI models.

7. The Website and Waitlist

corva.gg sets no cookies and runs no analytics, tracking pixels or advertising. If you join the waitlist, we collect your email address and use it to tell you when the Corva beta opens and to send occasional updates about Corva.

• Loops: stores the waitlist and delivers our email. Data is held on servers in the United States.
• Google Fonts: serves the typefaces used on corva.gg. Your browser requests them directly from Google, which receives your IP address as part of that request.

8. Data Retention

Information stored on your device stays there until you delete it. Application logs rotate automatically and the publishing history keeps only recent attempts. Uninstalling Corva does not remove its application data folder; you can delete it yourself at %APPDATA%\Corva.

Crash reports, usage analytics and feedback are retained only as long as needed to diagnose problems and improve Corva. Waitlist email addresses are retained until you unsubscribe or ask us to delete them.

9. Data Security

We take reasonable measures to protect your information. Account tokens are encrypted on your device using Windows' built-in data protection, and information Corva sends over the internet travels over encrypted HTTPS connections. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

10. Your Rights

You can turn off usage analytics in Corva's Settings, disconnect any account at any time, and delete Corva's local data from your device. Every waitlist email includes an unsubscribe link.

You may also contact us at corvagg@gmail.com to access, correct, or delete the information we hold about you, including feedback, crash reports and analytics linked to your installation. We will respond within 30 days. Depending on your location, you may have additional rights under applicable privacy law, including the right to withdraw consent.

11. Children's Privacy

Corva and corva.gg are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the date above. If you are on the waitlist, we will notify you by email of significant changes.

13. Contact Us

• Email: corvagg@gmail.com
• Website: corva.gg