Korven Beta Privacy Notice
Korven is an Australian sole-trader business based in Queensland, Australia, ABN 11 787 882 139. Korven may be exempt from the Privacy Act 1988 as a small business, but chooses to handle personal information in line with the Australian Privacy Principles (APPs). Questions: support@korven.com.au.
1. What we collect
| Information | From | Why |
|---|---|---|
| Your name, work email, organisation and role | You, when you request beta access | To assess your request, send your code, and contact you about the Beta |
| Your beta code (stored scrambled, never readable) and usage counts | Korven | To control access and enforce run limits |
| A record of the documents you accepted (versions, date and time) | You, when you tick the boxes | To show what you agreed to |
| Feedback you send | You | To improve Korven |
| Program details (name, objectives, audience, cohort sizes) | You | To generate surveys and reports |
| Survey responses (each answer capped at 500 characters, no names or emails collected) | Your survey respondents | To produce the evaluation |
| Evidence files and notes you attach | You | Read in memory, used once in the analysis, and never stored |
| Anonymised analysis (themes, scores, paraphrased findings) | Generated by Korven | So you can download your report |
| Audit records (counts and timestamps only, no content) | Korven | To prove deletion happened |
| Technical data (such as IP address) | Your browser | Security and spam limits |
We do not ask for, and you must not upload, health information, other sensitive information, or information about children.
2. How participant identities are protected
Korven's Protect participant identities feature replaces names with codes (P1, P2 …) inside your browser before files are sent. Korven never receives the names or the key. Coded data is pseudonymised, not anonymous: whoever holds the key can re-identify people, so keep it safe.
3. Who we share it with
We don't sell personal information. We use these service providers to run the Beta:
| Provider | What they do | Location |
|---|---|---|
| Railway | Hosts Korven and its database | Singapore |
| Anthropic | AI analysis and survey generation | United States |
| Resend | Sends Korven emails (feedback and access requests) | United States |
| Google Workspace | Korven's email (support@, beta@) | Global [confirm] |
4. Overseas disclosure (APP 8)
Your information is stored in Singapore and sent to the United States for AI analysis. Overseas laws may not protect it in the same way as Australian law. By using the Beta, you consent to this overseas disclosure. Anthropic processes data under its commercial API terms [confirm current wording on training use and retention].
5. How long we keep it
| Data | Deleted |
|---|---|
| Raw survey responses | Immediately after a successful analysis |
| Wave 1 responses never analysed | No later than 180 days after the evaluation begins |
| Wave 2 responses never analysed | No later than 30 days after Wave 2 closes (Wave 2 closes automatically 60 days after launch) |
| Anonymised analysis | 30 days after the analysis |
| Evidence files | Never stored |
| Your access request, acceptance records, code and feedback | When the Beta ends, or [X] months after, whichever is later |
| Audit records | Kept, as proof of deletion (they contain no content) |
An automatic check runs every 6 hours to delete data that's due.
6. Security
Data is encrypted in transit (TLS) and at rest by our hosting provider. Response content is never written to logs, and no person reads individual responses. Access to the database is limited to Korven's operator. No system is perfectly secure; if a data breach is likely to cause serious harm, we will notify you and, where required, the OAIC.
7. Survey respondents
Every survey page shows respondents a collection notice explaining that responses are anonymous, analysed automatically, and deleted on the schedule above. Taking part is voluntary.
8. Access, correction and deletion
You can ask to see, correct or delete your personal information by emailing support@korven.com.au. We'll respond within 30 days. Survey responses can't be matched to a person, so we can't retrieve an individual respondent's answers.
9. Complaints
Email support@korven.com.au first and we'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.
10. Changes
We'll update this notice when Korven changes, including when hosting moves to Australia after the Beta, and tell you by email or in the product.