Corvis

Understand it. Build with it.

Privacy policy

Effective October 23, 2026

This policy covers corvis.ai and Corvis Creator, including the Corvis Creator-IG Instagram integration used to manage @ghostintech. Corvis is operated by the owner of that account. For privacy questions or requests, email privacy@corvis.ai.

Visiting this website

The public website serves articles and these policy pages. It has no visitor account system, comment form, advertising pixels, or application database. Reading a page does not connect your Instagram account to Corvis.

Our hosting and delivery providers, OpenAI Sites and Cloudflare, process technical information needed to serve and protect the site. This can include your IP address, requested URL, browser information, request time, and security or error logs. The site's own pages do not set application cookies or load advertising trackers. Providers may process technical data under their own policies.

Instagram data

When the account owner authorizes the integration and requests an operation, Corvis uses Meta's Instagram API. Depending on the granted permissions and what Meta makes available, the integration accesses:

  • Account identifiers and username, and the access token used to authorize requests.
  • The connected account's posts, captions, media identifiers and links, and like and comment counts.
  • Comments on that account's content, including comment text, identifiers, usernames, and timestamps.
  • Post insights such as views, reach, likes, comments, saves, shares, interactions, and watch time.
  • Videos, cover images, captions, and processing results supplied or generated for a requested publication.

The integration is currently an operator tool for the connected account, rather than a public account-connection service. Automated direct-message replies are not enabled. If messaging features are introduced, this policy will be updated to describe them before they are used.

Why we use this information

We use connected-account data to review published content and audience feedback, understand performance, prepare content, and carry out requested publishing operations. Credentials authorize those operations. Operational records help diagnose failures, protect access, and track requests and outcomes.

If you contact us, we use your email address, message, and any information you provide to answer your question or handle your privacy request. Please do not send passwords, access tokens, or unrelated sensitive information.

Assistants and service providers

Corvis can return account data, comments, and insights to an AI assistant selected by the account owner to analyze feedback or help prepare content. Information included in a tool result or conversation is processed by that assistant's provider, such as OpenAI or Anthropic, and may be retained in conversation history or service logs according to the account's settings and the provider's terms. This processing is not confined to Corvis's own computers.

Meta processes requests to its API. For publishing, Meta retrieves the supplied video and cover from the URLs provided to it. Privacy-request email is routed through Cloudflare to the operator's Microsoft-hosted inbox. Hosting, email, and assistant providers process information to supply their respective services.

We do not sell personal information or use this integration to build advertising audiences. We do not intentionally publish private account data or request emails on the public website. A requested Instagram post is published to Instagram and is subject to the account's audience settings and Meta's policies.

Storage, access, and retention

Access to the integration is restricted to authorized Corvis users. The integration is designed to use encrypted credential storage with account-scoped access. Setup and troubleshooting can also require a restricted local credential file; an access token is not public website content.

We retain information for the purposes described above, including operating the connection, reviewing results, responding to requests, and resolving security or technical issues. There is currently no single automatic deletion deadline covering credentials, operational logs, correspondence, and assistant histories. Disconnecting an account or letting a token expire does not by itself erase previously stored information.

Deletion requests are reviewed manually. We remove data under our control that is no longer needed, subject to applicable legal obligations and legitimate security needs, and explain any data that must be retained. Provider-controlled records and backups may follow separate retention schedules; we do not promise instant deletion from every provider or backup.

Your choices and requests

You can ask what information we hold about you, request a correction, or request deletion by emailing privacy@corvis.ai. We may ask for limited information to verify the request and locate the relevant records. Privacy rights depend on where you live; you may also have rights to object to or restrict processing or to complain to your local privacy regulator.

The connected account owner can revoke the app's access in Instagram's Apps and websites settings. Revocation stops future authorized access with that connection, but a separate deletion request is needed for retained copies. See the data-deletion instructions for what to include and what deletion covers.

Changes and contact

We will update this page when these practices change and revise its effective date. The current policy remains available at this URL.

Contact: privacy@corvis.ai