Privacy Policy

1. Data controller

Korvex (“Korvex”, “we”) is an AI-native company domiciled in the Republic of El Salvador, building the Generation Layer — the infrastructure that makes companies AI-native. We operate under the domain korvex.cc and deliver reservation systems, operations automation, AI agents, and digital presence for businesses across El Salvador, Latin America, the United States, and other markets.

Korvex is the data controller for the personal data it receives through this site. For any privacy inquiry or to exercise your rights, write to contacto@korvex.cc.

2. Applicable legal framework

This policy is governed, as applicable, by:

• →El Salvador’s Personal Data Protection Law (Legislative Decree No. 144, in force since November 28, 2024), supervised by the State Cybersecurity Agency (ACE).
• →El Salvador’s Cybersecurity and Information Security Law, regarding information security.
• →The Artificial Intelligence and Technologies Promotion Law (Decree No. 234), regarding processing of data via AI systems.
• →For users in the European Union: the General Data Protection Regulation (GDPR, EU 2016/679), where applicable.
• →For California (US) residents: the CCPA/CPRA, where applicable.

Law No. 144 applies to the processing of data of subjects located in El Salvador, whether processed within or outside the national territory.

3. Data we collect

We collect:

• →Contact data you provide: full name, business name, WhatsApp number or phone, email, business type and service interest, and any message you choose to include.
• →Technical usage data: IP address, browser and device type, and pages visited, collected via analytics tools to improve the site.
• →Client operational data: if you contract our services, we may process your operational data (e.g. reservations, orders or inquiries of your own customers) solely as a processor, on your behalf and under your instructions.

We do not deliberately collect sensitive data and ask you not to include it in the form. We do not direct the site to minors nor knowingly collect their data.

4. Purposes of processing

We use your information to:

• →Respond to you and coordinate the discovery call you requested
• →Provide and manage contracted services (AI-native implementation, operational systems)
• →Process payments through our payment gateway where applicable
• →Send relevant information about our services (only if requested)
• →Comply with applicable legal, accounting and tax obligations
• →Improve our products and the site experience

We do not sell, rent, or trade your personal information to third parties for their own purposes.

5. Legal basis for processing

• →Your free, informed and explicit consent when you complete and submit the contact form (by checking the box accepting this policy).
• →Performance of the service contract once you become a client.
• →Compliance with legal obligations applicable to Korvex.
• →Legitimate interest in keeping the site secure and improving the service, in a proportionate way that respects your rights.

You may withdraw consent at any time by writing to contacto@korvex.cc. Withdrawal does not affect the lawfulness of processing carried out beforehand.

6. Processors and international transfers

To operate the site and deliver our services, we use the following vendors acting as data processors under agreement and only on our behalf:

• →Supabase — database and authentication (infrastructure on AWS, US)
• →Resend — transactional email delivery
• →Cal.com — discovery call scheduling
• →Vercel — site hosting (global CDN)
• →Anthropic / Claude — AI processing for service features

Some of these providers store or process data outside El Salvador (mainly in the United States). By using the site you accept those international transfers, which we carry out by requiring each provider to maintain contractual security and confidentiality safeguards equivalent to those required by applicable law.

7. Processing via artificial intelligence

Korvex uses third-party AI models (such as Anthropic’s Claude) to power service features. In line with the AI Promotion Law (Decree No. 234), we do not use your personal data to train AI models without your consent or without prior anonymization. Our AI providers process data under agreement and do not use it to train their own models. Where a relevant decision about you is made with AI support, you may request review by a competent person.

8. Cookies and analytics

We use strictly necessary cookies for the site to function and analytics tools to understand usage in aggregate. You can configure your browser to block or delete cookies; some features may be affected.

9. Data retention

We keep your data for as long as necessary to handle your request and, if you become a client, for the duration of the business relationship plus any period required by applicable accounting, tax and data-protection law. Afterward we securely delete or anonymize it.

10. Your rights (ARCO-POL)

Under Law No. 144 you have the right to:

• →Access: know what personal data we hold about you.
• →Rectification: correct inaccurate or incomplete data.
• →Cancellation: request deletion of your data when no longer necessary.
• →Objection: object to processing in certain circumstances.
• →Portability: receive your data in a structured, machine-readable format.
• →Erasure: request removal of your data in digital environments where applicable.
• →Limitation: request temporary restriction of the use of your data.

To exercise any of these rights, write to contacto@korvex.cc with the subject “ARCO-POL Rights”. We will respond within 15 business days. If you believe your request was not properly addressed, you may file a complaint with El Salvador’s State Cybersecurity Agency (ACE).

11. Security

We apply reasonable technical and organizational measures (encryption in transit, access control, and providers with recognized security standards) to protect your data against unauthorized access, alteration or disclosure. No system is infallible; in the event of an incident affecting you, we will act in accordance with applicable law.