How Corsiva processes your data and uses cookies. Last updated: 21 October 2026.
CORSIVA LTD (КОРСИВА ООД, EIK 207946717), 51 Kyustendil Street, 1680 Sofia, Bulgaria — team in Chambéry. Contact: contact@corsiva-os.com · +33 4 85 58 37 48. See the legal notice.
Contact form: name, phone, city, e-mail, fleet size (optional), source page and language. Appointment booking: the data you enter in the Calendly calendar. Browsing: pages viewed, clicks on the main links and buttons, moves from one page to another and loading times, measured without cookies by our host Vercel; audience-measurement, advertising and — when that tool is active — journey-recording trackers, only after your consent (see “Cookies and trackers”).
Answering your demo and information requests (pre-contractual measures, art. 6.1.b GDPR); measuring the site's audience, measuring our advertising campaigns and improving the site (consent, art. 6.1.a); measuring the site's traffic and performance without cookies (legitimate interest, art. 6.1.f GDPR — see “Cookieless measurement”); knowing where free-trial sign-ups come from: campaign parameters (utm) and the time of the click on the basis of our legitimate interest (art. 6.1.f GDPR), passing on your acceptance of advertising (only if you have given it) on the basis of our legitimate interest in proving and respecting your choice (art. 6.1.f GDPR), Google identifiers (ad click, Google Analytics) and their use on the basis of your consent (art. 6.1.a GDPR and art. 82 of the French Data Protection Act, loi Informatique et Libertés) — see “Link to the free trial”. No data is sold.
Vercel Inc. (site hosting and cookieless measurement of the site's traffic and performance, United States — standard contractual clauses, served from Europe); FormSubmit (form delivery to our mailbox); Calendly LLC (appointment booking, loaded only on request); Google Ireland Ltd (Google Analytics 4 and Google Ads, after consent, anonymised IP addresses; if you accept the “Advertising” purpose, contact details entered in our forms, hashed — see “User-provided data”); Microsoft Ireland Operations Ltd (Microsoft Clarity, when that tool is active, after consent).
Contact and demo requests: 3 years after the last exchange. Cookies and trackers: see the “Cookies and trackers” section (13 months maximum; Google Analytics data kept 14 months; Clarity recordings 30 days). Technical server logs: 12 months. Vercel cookieless measurement: the visit fingerprint is deleted after 24 hours; only aggregated statistics are kept.
Nothing is set before you choose. On your first visit, a banner lets you accept all, refuse all, or choose purpose by purpose; refusing does not prevent you from using the site.
Remembering your cookie choice: the corsiva_consent key, kept 6 months in your browser's local storage and never transmitted. The site also remembers, in your browser only, that an information pop-up has already been shown (for the duration of the visit) and the end time of a displayed offer (1 hour); no language or session is stored, as each language has its own address. The Calendly calendar and YouTube videos load only on request, when you click.
Vercel Inc., our host. Counting page views (page address, referring site, country, device type, operating system and browser) and measuring loading times, with no cookie or identifier stored on your device, for the sole account of the site publisher. Counted in the same way: clicks on important links and buttons (only their kind: free trial, demo, phone, e-mail, link to another site reduced to its domain name; and the page they are on), moves from one page of the site to another (previous page and next page, without address parameters) and key steps (request sent, appointment booked, with the type of form); never the text of a button, what you type or your contact details. Visits are recognised by a fingerprint computed by Vercel from the request, deleted after 24 hours; only aggregated statistics are kept, used solely to know this site's traffic and performance. This measurement falls under the consent exemption provided by the CNIL (the French data protection authority) for audience measurement. Legal basis: our legitimate interest in knowing the site's traffic and performance (art. 6.1.f GDPR).
Google Ireland Ltd. Counting visits, page views and actions (clicks, forms) to see which pages matter and improve the site. Cookies _ga and _ga_* (13 months); data kept 14 months. Only with your consent.
Google Ireland Ltd. Conversion measurement for our campaigns and ad personalisation. Cookies _gcl_* (13 months maximum). Only with your consent. No Meta pixel (Facebook, Instagram) is used on this site.
User-provided data (Google enhanced conversions). What: the email address, phone number, name and postal address entered in our forms (on this site, only the city is requested as an address). When: when a form is sent, and only if you have accepted the “Advertising” purpose. How: the Google tag detects these fields and hashes them (SHA-256) in your browser before sending; they are never sent in clear text. Why: to measure which ads bring in contact requests. Recipient: Google Ireland Ltd. Legal basis: your consent (art. 6.1.a GDPR). Withdrawal: open “Manage cookies” and untick “Advertising”: nothing more is sent. For how Google uses and retains this data, see Google's privacy policy and the Google Ads help page on enhanced conversions.
Microsoft Ireland Operations Ltd, when that tool is active. Anonymous session replay (clicks, scrolling, pages) and heatmaps to spot friction; inputs are masked. Cookies _clck (13 months) and _clsk (1 day); recordings kept 30 days. Only with your consent.
When you click on the free trial, the link to app-corsiva.fr, our application, passes on the campaign parameters in the page address (utm) and the time of the click; if you have accepted audience measurement, your Google Analytics identifier and session; if you have accepted advertising, that acceptance and, if it is in the page address, the Google ad click identifier. On Corsiva team devices only, the link also passes on an internal traffic marker. The campaign parameters (utm) are stored with the account created; the Google identifiers, your acceptance of advertising and the internal traffic marker are stored only if the sign-up takes place within 2 hours of the click; the time of the click is used only for this check and is not kept. The stored data is used to measure the effectiveness of our campaigns and is deleted with the account. Legal bases: for the campaign parameters and the time of the click, our legitimate interest in knowing where sign-ups come from (art. 6.1.f GDPR); for passing on your acceptance of advertising, our legitimate interest in proving and respecting your choice (art. 6.1.f GDPR); for the Google identifiers and their use, your consent (art. 6.1.a GDPR and art. 82 of the French Data Protection Act, loi Informatique et Libertés). The application may also, when this measurement is enabled and if you have accepted audience measurement, send your sign-up to Google Analytics with your Google Analytics identifier, on the basis of your consent: details are in the application privacy policy.
At any time via the “Manage cookies” link at the bottom of the page: the related cookies are then deleted. Partners' privacy policies: Google · Microsoft.
Access, rectification, erasure, objection, portability, restriction — by e-mail to contact@corsiva-os.com. You may lodge a complaint with the supervisory authority of the country where you live or work — in France, the CNIL (cnil.fr) — or with the Bulgarian authority, the Commission for Personal Data Protection (cpdp.bg).
Website: Vercel Inc. Corsiva OS app: application servers at Hetzner Online GmbH (Germany, processing within the European Union), database at Scaleway SAS (France), files (ID documents, photos, other documents) at Cloudflare, Inc. (United States, R2 service), emails sent by Resend (United States). Transfers outside the European Union are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses. Details in the Corsiva OS terms and conditions, GDPR annex (Art. 43.7 and 43.8). See also the application privacy policy.