Privacy Policy

1. Introduction

Corex IA, LLC ("Corex IA", "we", "us", or "our") operates software platforms including CorexOS, CorexChurch, CorexPay, and CorexHealth. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our websites, web applications, and mobile applications (collectively, the "Services").

2. Information We Collect

Account information: Name, email address, phone number, company name, and password when you create an account.

Business data: Information you enter into the Services, including customer records, work orders, invoices, employee records, and financial data.

Payment information: Payment card and bank account details, processed by our PCI-compliant payment processors (Stripe and Plaid). We do not store raw card numbers.

Usage data: Log files, IP address, browser type, pages visited, and feature usage for analytics and troubleshooting.

Communications: Messages you send to our support team.

3. How We Use Your Information

• To provide and maintain the Services
• To process transactions and send related notifications
• To send technical and account-related communications
• To improve the Services through analytics
• To comply with legal obligations
• To detect, prevent, and address fraud or security incidents

4. Sharing of Information

We do not sell your personal data. We share your information only with:

• Service providers: Supabase (database), Google Cloud (infrastructure), Firebase (authentication and hosting), Vercel (frontend hosting), Stripe (payments), Plaid (bank linking), SendGrid / Resend (email).
• AI providers: When you use AI-powered features, anonymized or pseudonymized data may be processed by Anthropic and/or OpenAI. We will request your explicit consent before enabling AI features.
• Legal requirements: When required by law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with advance notice to you.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. You may request deletion of your data at any time. See Section 10 for instructions.

6. Security

We use industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, row-level security at the database layer, and access controls. See our Security page for full details.

7. Cookies

We use essential cookies to maintain your session and preferences. We use analytics cookies (e.g., Google Analytics) to understand usage patterns. You may disable non-essential cookies in your browser settings.

8. Children's Privacy

Our Services are not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us personal information, contact us at privacy@corex-ia.com and we will delete it.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time, where processing is based on consent

To exercise these rights, email privacy@corex-ia.com.

10. Data Deletion

To request deletion of your personal data, visit our Data Deletion page or delete your account from within any Corex IA app at Settings → Account → Delete Account. We will process your request within 30 days.

11. Special Categories of Data

CorexChurch: If you use CorexChurch, we may process information about religious affiliation and giving. This data is treated as sensitive and subject to heightened protections. We will request explicit consent before processing such data and never sell it to third parties. GDPR Article 9 applies to EU residents.

CorexHealth: If you use CorexHealth, we may process health-related information. This data is treated with the highest level of protection. We comply with applicable health data regulations including HIPAA where applicable.

12. California Privacy Rights (CCPA)

California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact privacy@corex-ia.com.

13. International Transfers

Your data may be processed in the United States and other countries. By using our Services, you consent to such transfers. We take appropriate safeguards to protect your data in accordance with applicable law.

14. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies.

15. Changes to This Policy

We may update this policy. We will notify you of material changes by posting the new policy on this page and, where appropriate, by email. Continued use of the Services after changes constitutes acceptance.

16. Contact

20. Mobile Applications