Legal

Privacy Policy

Last updated: October 29, 2026

1. Information We Collect

We collect information you provide directly, such as your name, email address, phone number, and business name, when you contact us, submit an application, or sign up for our services. We also collect usage data automatically when you interact with our platform, including pages visited, actions taken, and device/browser information.

2. How We Use Your Information

We use your information to provide and improve our services, respond to inquiries, send transactional and operational emails, and communicate updates about your account. We do not sell your personal information to third parties.

3. Data Storage and Security

Your data is stored securely using Supabase (hosted on AWS). We use industry-standard encryption in transit (TLS) and at rest. Access to your data is restricted to authorized personnel and systems only.

4. Third-Party Services

We use the following third-party services to operate the platform: Supabase (database and authentication), Stripe (payment processing), Resend (transactional email), Twilio (SMS messaging), Vercel (hosting), and Microsoft Clarity (website usage analytics, described in section 7). Each service operates under its own privacy policy.

5. SMS Messaging & Consent

Corex AI enables service businesses ("Clients") to send SMS messages to their own customers ("End Users"), including appointment reminders, confirmations, review requests, estimate follow-ups, and service notifications. End Users opt in to receive SMS by providing their phone number through the Client's intake or booking form and checking a consent box, or by texting the Client's business number first. Message and data rates may apply. Message frequency varies by Client and use case. End Users can reply HELP for help or STOP at any time to opt out. No mobile information or opt-in data is shared with third parties or affiliates for marketing or promotional purposes. Opt-in consent is not shared with third parties. Phone numbers collected for SMS are used solely to deliver the messages the End User consented to receive.

6. Location Data

When a technician uses the Corex field app, in the Corex mobile app or a phone browser, it records the phone's precise location when they tap actions such as Clock In, On My Way, Start, Done, or Not Done. Their employer uses this to see where work happened, to tell travel time from on-site time for payroll, and to show the technician's last known spot on the office map. The customer's arrival page can show roughly how far away the technician was at their last tap, never an exact location or a map. If the employer has turned on the Live Crew Map setting and the technician agrees on the in-app notice, the Corex mobile app also shares the phone's location with the employer every few minutes while the technician is clocked in, including when the app is closed or not in use. Sharing stops when the technician clocks out or signs out, and our servers reject location from anyone who is not clocked in. An employer that connects its own Samsara account can also see its vehicles' locations on the same map. Live location and vehicle locations are shown only to the owner and administrators of that company, never to its customers. Location data is never sold and never used for advertising. Live location points are deleted after 30 days; tap locations are kept with the job and time records they belong to. A technician can decline or turn off location in the phone's settings at any time, and the rest of the app keeps working.

7. Cookies

We use cookies and similar technologies for authentication and to maintain your session. We do not use tracking cookies for advertising. On our public website only, we use Microsoft Clarity to understand how visitors use the site, such as clicks, scrolling and where they leave a page, so we can improve it. Clarity is set to hide all page text and anything typed into forms, and it never runs in the client dashboard or on any page we host for our clients' customers. Microsoft's privacy statement is at microsoft.com/privacy. You can disable cookies in your browser settings, though doing so may affect platform functionality.

8. Your Rights

You have the right to access, correct, or delete your personal data. To make a request, contact us at hello@corexai.co. We will respond within 30 days.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our website. Continued use of the platform after changes constitutes acceptance.

10. Contact

If you have questions about this policy, reach us at hello@corexai.co.