QorvynYour code and ideas stay yours
What the Qorvyn app, the team server and the usage statistics keep, where, for how long, who can see it, how it is protected, and how to use your rights.
Principles
- Your code and ideas stay yours. You keep ownership of everything you create or bring (your intellectual property). Code, prompts, outputs, notes and plans stay on your computer unless you share something. Nothing is used to train AI models, sold or shown to other customers.
- Only what is needed. Every piece of data below has a reason; there is nothing else.
- Every access is accountable. Changes, sign-ins and the operator's access are recorded in an audit log.
- You stay in control. See, export, turn off and delete what Qorvyn holds about you.
Your intellectual property
What you and your organization create or bring to Qorvyn stays yours: source code, business ideas and confidential documents, custom agents and workflows, notes and shared knowledge, project architecture and technical designs. Using Qorvyn does not transfer ownership of any of it to FACTn Software.
- Only what running the service needs. For what you share through the team server, you allow us to store, transmit, back up and show it to the people in your workspace, nothing more. That permission ends when the content is deleted.
- No other use. We do not use your content to train AI models, do not sell or license it, do not use it in our products or other customers' work, and do not show it to anyone outside your workspace (except recorded operator access for support you ask for, abuse or a legal request).
- Your code is never ours to see. Code, runs, outputs and private notes stay on your computer.
- AI providers. When an agent runs on Claude Code, Codex or another provider, that provider receives the prompt under its own terms. Choose providers whose terms fit your organization.
- Qorvyn itself. The Qorvyn software, name and Q logo belong to FACTn Software (Pvt) Ltd. Core and Enterprise are proprietary software, used under their license terms.
- Feedback. If you send us a suggestion about Qorvyn, we may use the idea to improve Qorvyn, never your code or confidential material.
On your computer
| Data | Leaves your computer? |
|---|---|
| Code index, search and symbols | No |
| Agent and workflow runs, their outputs and changes | No |
| Private notes, guardrails, agent definitions | Only an item you share |
| Provider keys (your OS keychain) | No; given only to that provider's own CLI |
| Device key for team sign-in | Only its public half |
| Usage statistics | Weekly anonymous counts, unless you turn them off |
On the team server
The server holds only what people share and what is needed to sign them in.
| Data | Kept | Who can see it |
|---|---|---|
| Your email and name | Until erased | You, your workspaces' members, super admins |
| Devices: name, public key, last seen | Until erased | You, super admins |
| Browser sessions, with the IP address they came from | 30 days after the session ends | You, super admins |
| Device sign-in requests, with their IP address | About an hour after they expire | You, while signing in |
| Workspaces, roles, invitations, project links | Until the workspace is deleted | Members, super admins |
| Shared agents, workflows, knowledge and run status | Until deleted | Members, super admins (each visit recorded) |
| Audit log | Core: kept. Enterprise: 30 to 3650 days | Workspace admins, super admins |
IP addresses. The hosting platform's request logs include the caller's IP address and are kept 30 days to investigate errors and attacks. Usage statistics never store IP addresses.
Email and backups. Sign-in codes are sent through Azure Communication Services, which keeps delivery records. The server database is copied nightly to private storage, without stored keys.
Usage statistics
Anonymous and opt-out, sent at most once a week to telemetry.qorvyn.supunwijegunawardhana.com. Every field:
| Field | What it is |
|---|---|
| Install id | A random id made on your computer, not linked to you, your email or your machine |
| Version, OS, processor, Node.js | Which Qorvyn and platform |
| Commands and dashboard pages | How often each is used; names from a fixed list, anything else is just “other” |
| Provider kinds | Claude Code, Codex and so on; your own providers' names are never sent |
| Runs and errors | Counts by outcome, duration buckets and error categories, never messages |
| Team sync | Whether it is used |
Never sent: code, file or repository names, paths, remotes, prompts, outputs, notes, emails or usernames. The collector refuses any report with anything else, and stores no IP addresses. Reports are kept 13 months.
Turn it off: qorvyn telemetry off, DO_NOT_TRACK=1 or QORVYN_TELEMETRY=0. It is always off in CI, and an organization can turn it off for everyone in its policy. qorvyn telemetry show prints the exact next report.
Where the data is
- Hosting: Microsoft Azure, Central India (App Service, Blob Storage, Azure Monitor), and Azure Communication Services with India data location.
- Sign-in: your organization's Microsoft Entra ID, or email codes.
- DNS: Cloudflare, for names only. Traffic is not proxied.
- Subprocessors: Microsoft and Cloudflare. No analytics or advertising services.
Who can access what
- Members see only their own workspaces. Other workspaces are not even revealed by name.
- Roles (owner, admin, member, viewer) limit what each person can do.
- Super admins (the operator, FACTn Software) must sign in through the identity provider, never with an email code. They can manage every workspace and read shared content for support, abuse or legal requests. Every action is recorded, including opening a workspace's page.
- Nobody at FACTn Software can see your code, runs, outputs or private notes: they are not on the server.
How it is protected
- Encryption in transit: HTTPS only, TLS 1.2 or newer.
- Signed devices: every request is signed with the device's own Ed25519 key, checked for time and replay. A signed-out device is refused at once.
- Browser sessions: random HttpOnly, Secure cookies, stored only as a hash. At most 7 days, 24 hours idle. Forms carry anti-forgery tokens, and pages have a strict content security policy.
- Sign-in: OpenID Connect with PKCE. Email codes are single-use, last 10 minutes and are rate-limited.
- Tamper-evident history: every device verifies the hash chain of shared changes and rebuilds its copy if anything was altered.
- No stored cloud keys: the server uses its managed identity. Secrets are encrypted at rest.
Your rights
Under GDPR (EU, Norway) and Sri Lanka's Personal Data Protection Act you can ask to access or export, correct or erase your data, and object to usage statistics.
- Erasure removes your memberships, devices, sign-in identities and sessions, and anonymises your account.
- Statistics stop with
qorvyn telemetry off.
Ask through factnsoftware.com; we answer within 30 days.
Incidents
If a breach affects your data, we contain it, tell affected organizations without undue delay (within 72 hours where the law requires), and report what happened, what data was involved and what we did.
Last reviewed 16 October 2026. Changes are listed in the release notes; material changes are announced here before they apply.