Privacy Policy

Who we are

Covalence (usecovalence.com) provides AI-assisted post-acquisition integration analysis. The service reads the work documents, communications, meetings and project trackers a customer explicitly connects, and produces integration briefs, contradiction flags and decisions for that customer.

Data we collect

Account data: your email address, used for sign-in (password or SSO) and service delivery.

Connection metadata: which tools you connect (e.g. SharePoint, Google Drive, Slack, Zoom, Asana, Jira, Notion), workspace or site identifiers, and verification status.

Connected content: documents, messages, meeting recordings and transcripts, and project items that your connected tools expose to Covalence — read-only, and only after you explicitly authorize each connection.

Delivery preferences: where you want Covalence to reach you (email address, Slack DM) and your weekly readout schedule.

Correction requests and saved preferences: when you ask Covalence to change a specific project item, we store your instruction, the targeted item, who submitted it and when. Memory is enabled by default in the correction form, so we also create a separate account Memory record unless you opt out before submitting. Retiring that preference disables its future use but preserves the immutable record until the associated account or data is deleted.

Service diagnostics: error category, application stack trace, page or API route, deployment version, timing data, and pseudonymous user, project, request and workflow identifiers needed to diagnose a failure. Covalence configures this telemetry not to collect connected content, form values, request bodies, cookies, email addresses, IP addresses or session recordings.

How we use it

Connected content is used for one purpose: producing the integration analysis you asked for — briefs, source-linked findings, contradiction flags and decision requests delivered to you.

Correction requests are used to record and support authorized review or processing of the changes you ask for. A request does not itself rewrite a generated artifact. The separate Memory preference record is scoped to your account, while its originating correction remains part of the authorized project's operational record. Preferences are not automatically applied unless that behavior is explicitly enabled in the product.

Service diagnostics are used only to detect outages, identify the deployed code responsible for an error, assist the affected customer and improve the reliability and security of the Service.

We do not sell your data. We do not use your data for advertising. We do not use connected content, correction requests or saved preferences to train any model.

Storage and security

Access credentials for connected tools (OAuth tokens, storage keys) are encrypted at the application layer with AES-256-GCM before being stored, in a database table that is inaccessible to client-side code. All traffic is encrypted in transit (TLS).

Infrastructure subprocessors: Vercel (hosting and runtime logs), Supabase (database and authentication), and, when production diagnostics are enabled, Sentry (error monitoring and tracing, with diagnostic event storage selected in the United States).

Your control and deletion

You can disconnect any tool at any time from the workspace. Disconnecting revokes Covalence's access where the provider supports revocation and deletes the stored credentials immediately.

You can request deletion of your account and all associated data by writing to the contact address below. We respond within 30 days.

Google API Services — Limited Use disclosure

Covalence's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: Google user data (Drive files, Chat messages, Meet recordings and transcripts) is only used to provide the integration analysis features you requested, is never sold, is never used for advertising, and is never used to train generalized AI or machine-learning models.

Contact

Questions, access requests or deletion requests: remi@usecovalence.com.