Legal & Compliance

Welcome to Corvus Analytics' legal and compliance documentation. All customers and users are required to review and accept the applicable agreements before using our platform.

1. Privacy Policy

What it covers:
How Corvus collects, uses, stores, and protects your personal information and club member data. This includes details about:
- Data collection practices (account info, member data, usage metrics)
- AI and third-party service providers (Anthropic Claude, AWS, payment processors)
- Your rights under GDPR, UK GDPR, CCPA, and other privacy laws
- How to request data access, deletion, or correction
- Cookie usage and tracking technologies

Who needs to read it:
All users and club customers.

Key highlights:
- We do NOT sell member data or personal information
- Member data is processed on your instructions (you remain the controller)
- EU/UK users have specific rights including access, erasure, portability, and the right to lodge complaints with data protection authorities
- California residents have CCPA rights (access, deletion, correction, opt-out)
- Minors: Corvus accounts are for users 18+; for member data containing minors, you are responsible for parental/guardian consent

Last updated: January 6, 2026
Read Full Privacy Policy

2. Terms of Service

What it covers:
The binding agreement governing your use of Corvus Analytics, including:
- Account creation and eligibility requirements
- Service description and AI analytics limitations
- Acceptable use policies and prohibited conduct
- Intellectual property and licensing
- Limitation of liability and indemnification
- Payment terms, refunds, and cancellation policies
- Termination rights and consequences
- Dispute resolution and arbitration

Who needs to read it:
All users must accept these Terms before signing up or using the Service.

Key highlights:
- Service is provided "as-is"; analytics are probabilistic estimates, not guarantees
- Churn predictions are analytical tools for decision-making; you are responsible for verifying recommendations
- Liability is limited to fees paid in the past 12 months (or $1,000, whichever is greater)
- Class action waivers; disputes resolved through arbitration in Delaware
- You cannot share member data or use Corvus to develop competing services
- Monthly subscriptions can be cancelled with one month's notice for a refund; annual subscriptions are non-refundable

Last updated: January 6, 2026
Read Full Terms of Service

3. GDPR & Data Protection Addendum

What it covers:
Supplementary agreement for EU, UK, EEA, and Swiss customers covering data protection under GDPR and equivalent laws, including:
- Controller and processor roles
- Categories of personal data processed
- Sub-processor information and authorization
- International data transfer mechanisms (Standard Contractual Clauses, UK IDTA)
- Data subject rights assistance
- Breach notification procedures
- Data retention and deletion obligations
- Audit and compliance documentation

Who needs to read it:
Required for all customers in the EU, UK, EEA, or Switzerland.

Key highlights:
- Corvus acts as a data processor; your club is the data controller
- You must obtain appropriate consents before uploading member data
- We use Standard Contractual Clauses (SCCs) and UK IDTA for international transfers
- Sub-processors: AWS, Anthropic, analytics tools (general authorization provided; you may object)
- Data Subject Requests: we assist with access, deletion, portability, and other rights
- Data breach notification: Corvus notifies you without undue delay; you are responsible for regulatory notifications
- Data deletion: 90 days post-termination unless legally required to retain

Last updated: January 6, 2026
Read Full GDPR & Data Protection Addendum

Additional Resources

Data Processing Agreement (DPA)

For customers in GDPR-compliant jurisdictions requiring a formal Data Processing Agreement, contact:
Email: [email protected]
Subject: "DPA Request"

We will provide a signed DPA outlining specific processing obligations, sub-processor details, data security requirements, and data subject rights procedures.

Security & Compliance Questions

Security inquiries:
[email protected]

Data Protection & Privacy inquiries:
[email protected]

Data Protection Officer (DPO):
[email protected]

General legal inquiries:
[email protected]

Sign-Up and Acceptance Workflow

For All New Users (Signup Page)

  1. Privacy Policy Acknowledgment (checkbox)
  2. "I have read and agree to the Privacy Policy"

  3. Required: Yes

  4. Terms of Service Acknowledgment (checkbox)

  5. "I have read and agree to the Terms of Service"

  6. Required: Yes

  7. Confirmation Copy

  8. Upon signup completion, send a welcome email with links to all legal documents and a summary of key obligations.

For EU/UK/EEA/Swiss Customers (During Onboarding)

When a customer's billing address or stated location is in the EU, UK, EEA, or Switzerland:

  1. GDPR Addendum Acknowledgment (checkbox or countersignature)
  2. "I confirm that I am located in [jurisdiction] and have read and agree to the GDPR & Data Protection Addendum"

  3. Required: Yes

  4. DPA Offer

  5. Display message: "As a customer in [jurisdiction], you may request a formal Data Processing Agreement. Request DPA"

  6. Optional but recommended.

  7. Data Controller Confirmation

  8. "I confirm that my organization is the data controller for member data uploaded to Corvus and that I have obtained necessary consents from members and minors' parents/guardians."
  9. Required: Yes

Compliance Certifications & Standards

Questions or Concerns?

If you have questions about any of our legal documents or your obligations under these agreements, please contact:

[email protected]

Last Updated: January 6, 2026
Corvus Analytics, Inc.
400 Uccelli Dr, Redwood City, CA 94063