Privacy notice
This page describes what the pathway report tool at pathway.coveqms.com collects and what happens to it. It is written in plain words and claims only what the software actually does.
What we collect
- The device description you type and your email address.
- For the count of visits: the page you viewed (never its private link), your browser, operating system, device type, screen size, time zone, language and the site you came from. This goes to PostHog, our analytics processor in the United States, without your network address; see below.
- The domain of your email address (for example, acme.com), which tells us which company asked. We do not ask for it separately.
- The time you sent the form, which is when you agreed to be emailed.
- The IP address you submitted from, hashed, for abuse limits.
What happens to the description
To write the report, the description is sent through OpenRouter to two model providers: one for the draft and one for a review of the draft. Every request asks for endpoints with a zero-data-retention policy (Microsoft Azure for the OpenAI model, Amazon Web Services or Google Cloud for the Anthropic model), so the providers keep no copy of your description after answering and do not train on it. Automated abuse detection still applies.
A note with your email address, its domain and the product code we matched is posted to Cove's private sales channel in Slack so we can follow up. The description is never posted there.
How long we keep it
| Data | Kept |
|---|---|
| Unverified submission | 7 days, then deleted |
| Device description and report | 30 days after the report is sent, when its link expires, then deleted |
| Email address and its domain, the report's product code and proposed pathway, the time you agreed | 12 months from the last contact, then deleted |
| The Slack note | Deleted with the record |
| Hashed IP address and verification log | 30 days |
| Unsubscribed or deleted address, as a hash | Until no longer needed, so we never email it again |
Why we email you
To send the report, and to tell you about the report and about Cove: the form says so beside the button, and sending it is the agreement. Every email has an unsubscribe link that works immediately.
How we count visits
We count page views with PostHog. It sets no cookies and stores nothing in your browser: PostHog tells one visit from another by a hash of your network address and browser that changes every day, and it does not keep the address. The private links in your emails are trimmed to /report/:token and the like before a page address is sent, so the report itself is never reachable from the count. Nothing you type is sent.
Your choices
Unsubscribe from any email, or write to sam@coveqms.com to have everything deleted, including the report and the Slack note. Deletion is done within 7 days.
Cove QMS, 330 Crescent Village Cir Unit 1243, San Jose, CA 95134