Privacy Policy

Scope of this Policy

This Policy applies to Personal Data we process as a controller through the Website: pages you visit, forms you submit, newsletter subscriptions, cookie-based preferences and analytics, and related communications and security operations.

This Policy does not apply to data processed through the Corin product for a customer — for example, the contents of a customer’s Microsoft 365 shared mailbox that Corin reads via Microsoft Graph, or data from a customer’s ERP, EDI, or banking systems. That data is processed on the customer’s behalf under the separate subscription or services agreement with that customer (including any data-processing terms attached to it), and the customer’s own privacy notices apply. This Policy also does not apply to third-party websites or services that operate under their own privacy policies.

Types of Data collected

Among the types of Personal Data that this Website collects, by itself or through third parties, there are:

• Contact and communication data, such as your name, email address, the topic you choose, and the content of your message when you submit the contact form, and any follow-up correspondence.
• Newsletter subscription data, such as the email address you enter in the subscribe form.
• Usage Data, such as IP address, browser type and version, device type, operating system, referring URLs, pages visited, timestamps, and interaction data, collected automatically when you use this Website.
• Trackers and cookie-related data, such as your cookie-consent choices and — only with your consent — analytics identifiers and events.
• Security and anti-abuse data, such as the Cloudflare Turnstile response token, honeypot fields, and related request metadata used to distinguish humans from bots.

Personal Data is freely provided by you (for example, when you fill in a form) or, in the case of Usage Data, collected automatically when using this Website. Unless specified otherwise, the Data requested by a form is necessary to respond to your request; fields that are not mandatory are marked as such, and you are free not to communicate that Data without consequences to the availability of the Website.

Any use of Cookies — or of other tracking tools — by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service requested by you, in addition to any other purposes described in the present document. Users are responsible for any third-party Personal Data obtained, published, or shared through this Website.

Mode and place of processing the Data

We take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. Processing is carried out using computers and IT-enabled tools, following organizational procedures strictly related to the purposes indicated. Besides the Owner, the Data may be accessible to persons in charge involved with the operation of this Website (administration, marketing, legal, system administration) or to external parties — such as hosting providers, email-delivery providers, and security providers — appointed, where necessary, as Data Processors. An updated list of these parties may be requested from the Owner at any time.

The Data is processed at the Owner’s operating offices and in any other places where the parties involved in the processing are located, including the United States. Depending on your location, this may involve transferring your Data to a country other than your own; see the “International data transfers” section below.

The purposes of processing

The Data concerning you is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), and detect any malicious or fraudulent activity, as well as for the following purposes:

• responding to inquiries and requests you send through the contact form;
• managing contacts and sending messages, including the newsletter you subscribe to;
• analytics — measuring which pages are read and how the Website is used, only with your consent;
• spam and abuse protection, including bot detection on forms;
• hosting, backup, and maintenance of the Website and its system logs.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contacting the User — contact form (this Website). By filling in the contact form with your Data, you authorize this Website to use these details to reply to requests for information, quotes, or any other kind of request as indicated by the form’s header. Personal Data processed: name, email address, chosen topic, and message content. Messages are delivered to our mailbox via Resend (Resend, Inc., United States) and are not published anywhere.

Managing contacts and sending messages — newsletter subscription (Resend). The subscribe form adds your email address to a contact list managed through Resend (Resend, Inc., United States), used to send product updates and news. Personal Data processed: email address. You can unsubscribe at any time through the link in every message, and we do not use the list for any unrelated purpose.

Spam and abuse protection — Cloudflare Turnstile (Cloudflare, Inc.). Forms on this Website are protected by Cloudflare Turnstile, which analyzes request and device signals to distinguish humans from bots, together with a honeypot field that humans never see. Personal Data processed: Turnstile response token and related request metadata (such as IP address). Place of processing: United States — Cloudflare’s privacy policy applies to its processing.

Analytics — Google Analytics 4 (Google LLC) and Vercel Analytics (Vercel Inc.). These services allow the Owner to monitor and analyze web traffic and keep track of User behavior. They run only after you accept the “analytics” category in the cookie banner, and they stop if you withdraw that consent. In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged. Personal Data processed: Trackers, Usage Data, number of Users, session statistics. Place of processing: United States — the providers’ privacy policies apply, and Google offers an opt-out add-on for browsers.

Hosting, infrastructure, and system logs — Vercel (Vercel Inc.). This Website is hosted on Vercel. For operation and maintenance purposes, this Website and its hosting services may collect files that record interactions with this Website (system logs) or use other Personal Data (such as the IP address) for this purpose.

Cookies and Trackers

This Website uses Trackers. We run two categories: “strictly necessary” cookies — the minimum for the site to function, such as remembering your consent choice — which are always on, and “analytics” cookies, which are off by default and run only with your consent. Nothing in the analytics category is recorded without a yes.

You can change or withdraw your consent at any time through the cookie banner or the “Cookie settings” control in the site footer. When you withdraw analytics consent, analytics cookies (including Google Analytics identifiers such as _ga and _gid) are cleared automatically. You can also manage cookies through your browser settings.

No sale or sharing of Personal Data

We do not sell your Personal Data for monetary or other valuable consideration, and we do not share your Personal Data with third parties for cross-context behavioral advertising, as those terms are defined by applicable U.S. state privacy laws.

The only interest-based measurement on this Website is the consent-gated analytics described above, which you can decline or withdraw at any time through the cookie settings. We also honor recognized opt-out preference signals, including the Global Privacy Control (GPC), where required by applicable law.

Retention time

Unless specified otherwise in this document, Personal Data is processed and stored for as long as required by the purpose it has been collected for and may be retained for longer due to applicable legal obligations or based on your consent.

• Contact-form messages: retained for as long as needed to handle your inquiry and any follow-up correspondence.
• Newsletter subscription data: retained until you unsubscribe.
• Analytics data: retained according to the analytics providers’ configured retention periods, and only if you have consented.
• Security and anti-abuse records: retained for as long as reasonably necessary to detect, investigate, and prevent harmful or unlawful activity.
• Consent records: retained for as long as needed to demonstrate that consent was given or withdrawn.

Once the retention period expires, Personal Data is deleted. Therefore, the right of access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced after expiration of the retention period.

Legal basis of processing

Where the GDPR, UK GDPR, or similar laws apply, we may process Personal Data relating to you if one of the following applies:

• you have given your consent for one or more specific purposes — for example, analytics cookies or the newsletter;
• provision of Data is necessary for the performance of an agreement with you and/or for any pre-contractual obligations — for example, responding to an inquiry you sent us;
• processing is necessary for compliance with a legal obligation to which the Owner is subject;
• processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party — such as operating, securing, and improving the Website.

In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract. Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing already carried out lawfully before withdrawal.

The rights of Users under the GDPR

Users in the European Union, the EEA, the United Kingdom, and Switzerland may exercise certain rights regarding their Data processed by the Owner, to the extent permitted by law. In particular, you have the right to:

• withdraw your consent at any time, where processing is based on consent;
• object to the processing of your Data, where the processing is carried out on a legal basis other than consent — including objecting at any time, free of charge and without justification, to processing for direct marketing purposes;
• access your Data — learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the Data undergoing processing;
• verify and seek rectification of inaccurate Data;
• restrict the processing of your Data, in which case the Owner will not process your Data for any purpose other than storing it;
• have your Personal Data deleted or otherwise removed;
• receive your Data in a structured, commonly used, and machine-readable format and, if technically feasible, have it transmitted to another controller without hindrance;
• lodge a complaint before your competent data protection authority.

Any requests to exercise these rights can be directed to the Owner through the contact details provided in this document. Such requests are free of charge and will be answered as early as possible and always within one month, providing you with the information required by law. Any rectification or erasure of Personal Data or restriction of processing will be communicated to each recipient, if any, to whom the Personal Data has been disclosed unless this proves impossible or involves disproportionate effort.

Your privacy rights under U.S. state laws

If you are a resident of a U.S. state with a comprehensive privacy law — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and Montana — you may exercise certain rights regarding your Personal Information, to the extent permitted by applicable law. In particular, you have:

• the right to access Personal Information: the right to know whether or not we are processing your Personal Information and to access it;
• the right to correct inaccurate Personal Information;
• the right to request the deletion of your Personal Information;
• the right to obtain a copy of your Personal Information in a portable and usable format, where technically feasible;
• the right to opt out of the sale or sharing of your Personal Information and of targeted advertising — noting that, as described in the “No sale or sharing” section above, we do not sell or share your Personal Information for those purposes;
• the right to non-discrimination for exercising your privacy rights.

To exercise these rights, submit a request through the contact form at getcorin.com/contact or write to the Owner at the address in the “Contact us” section. We must be able to verify your identity to respond, and we will use Personal Information collected for verification solely for that purpose. You are not required to create an account to submit a request, and authorized agents may submit requests where permitted by law. We will respond without undue delay and in all cases within the timeframe required by applicable law; if we deny your request, we will explain why, and where the law gives you a right of appeal we will tell you how to use it.

International data transfers

The Data is processed in the United States and in any other places where the parties involved in the processing are located. Depending on your location, data transfers may involve transferring your Data to a country other than your own. Where required by applicable law, we use appropriate transfer mechanisms and safeguards for such transfers, such as adequacy decisions or standard contractual clauses or equivalent measures. You are entitled to learn about the legal basis for Data transfers abroad and about the security measures taken by the Owner to safeguard your Data by contacting us.

Security measures

We maintain administrative, technical, and organizational safeguards designed to protect Personal Data, which may include encryption in transit, access controls, bot and abuse protection, logging, and vendor diligence. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Legal action and system logs

Your Personal Data may be used for legal purposes by the Owner in court or in the stages leading to possible legal action arising from improper use of this Website or the related Services. You declare to be aware that the Owner may be required to reveal Personal Data upon request of public authorities.

In addition to the information contained in this Privacy Policy, this Website may provide you with additional and contextual information concerning particular services or the collection and processing of Personal Data upon request.

Children’s privacy

This Website is a business-to-business resource and is not directed to children under 16. We do not knowingly collect Personal Data from children under 16. If you believe a child under 16 has provided us Personal Data, contact us through the form at getcorin.com/contact and we will delete it as required by law.

Changes to this Privacy Policy

The Owner reserves the right to make changes to this Privacy Policy at any time by notifying its Users on this page and, as far as technically and legally feasible, sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the top. Should the changes affect processing activities performed on the basis of your consent, the Owner will collect new consent from you where required.

Definitions and legal references

• Personal Data (or Data): any information that directly, indirectly, or in connection with other information allows for the identification or identifiability of a natural person.
• Usage Data: information collected automatically through this Website, which can include IP addresses, browser and device characteristics, pages visited, timestamps, and the path followed within this Website.
• Tracker: any technology — e.g. cookies, unique identifiers, web beacons, embedded scripts — that enables the tracking of Users, for example by accessing or storing information on the User’s device. Cookies are Trackers consisting of small sets of data stored in the User’s browser.
• Service: the service provided by this Website as described on this site and in the related Terms and Conditions.
• User: the individual using this Website who, unless otherwise specified, coincides with the Data Subject — the natural person to whom the Personal Data refers.
• Data Controller (or Owner): the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Website. Unless otherwise specified, the Data Controller is the Owner of this Website.

This Privacy Policy relates solely to this Website, if not stated otherwise within this document. This policy has been prepared based on provisions of multiple legislations.

Contact us

ePlane USA Inc.

1688 Meridian Ave, Ste 905, Miami Beach, FL 33139, USA

Owner contact email: angel@eplane.com

For privacy requests, support, or any other inquiry, use the contact form at getcorin.com/contact.