Privacy Policy
This policy explains how Mohammad Dayel ("we"), the operator of CovaNode, collects and uses personal data when you visit covanode.com or use the CovaNode app at covanode.app.
1. Data we collect
- Account data: name, email address, password hash, profile picture, and sign-in provider identifiers if you sign in with Google or GitHub.
- Organization data: organization name, logo, members and roles.
- Customer Content: records, documents, whiteboards, comments and files you create. We process this only to provide the Service.
- Usage and technical data: IP address, browser type, log events, and error reports used for security, debugging and abuse prevention.
- Billing data: plan, seat count and subscription status. Card and payment details are collected and stored by our Merchant of Record, Polar, not by us.
2. How we use it
- To provide, secure and support the Service (performance of contract).
- To send service emails such as invitations, notifications you enable, and billing notices.
- To detect abuse and fix errors (legitimate interests).
- To comply with legal obligations.
We do not sell personal data and do not use Customer Content to train AI models.
3. Service providers
We share data only with providers that help us run the Service, under appropriate agreements:
- Cloud hosting and database (IONOS) and encrypted off-site backups (Cloudflare R2)
- Network, security and real-time collaboration (Cloudflare)
- Error monitoring (Sentry)
- Transactional email delivery provider
- AI model provider for AI features you choose to use (Google Gemini API)
- Payments, invoicing and tax: our Merchant of Record, Polar Software, Inc. (Polar), which processes your payment and billing details as described in its Privacy Policy
Some providers process data outside your country. Where required, transfers rely on standard contractual clauses or equivalent safeguards.
4. Cookies and local storage
covanode.com uses no tracking or advertising cookies; it only stores your light/dark theme choice in your browser. covanode.app uses strictly necessary cookies for sign-in sessions, security and your language/theme preferences.
5. Retention
We keep account data and Customer Content while your account or organization is active. When you delete content or an organization, it is removed from production systems; encrypted backups expire on their rotation schedule. Billing records are kept as long as tax law requires.
6. Your rights
Depending on where you live (including under the GDPR and Saudi Arabia's Personal Data Protection Law), you may have the right to access, correct, export or delete your personal data, and to object to or restrict processing. Email support@covanode.com and we will respond within 30 days. You may also complain to your local data protection authority.
7. Security
We use encryption in transit, per-organization row-level access controls in the database, least-privilege access and encrypted backups. No system is perfectly secure; we will notify affected users of a breach as required by law.
8. Children
The Service is not directed to children under 16, and we do not knowingly collect their data.
9. Changes
We will post updates here and notify account owners of material changes by email.
10. Contact
Data controller: Mohammad Dayel, Jeddah, Saudi Arabia — support@covanode.com