Privacy Policy

Columbus AI Automation Solutions, LLC (“we,” “us,” “Civora”) operates civora.io, related marketing pages, and api.chexi.ai (the “Chexi API”) on infrastructure we operate. Civora is a prelaunch congressional intelligence product.

Privacy questions: support@chexi.ai.

Civora is not generally available. Today we operate a marketing site, a waitlist, and limited public previews (for example, a Congress.gov activity feed). Full authenticated product features may be unavailable or gated until we announce early access.

Waitlist (you provide). When you join the waitlist we collect your full name, email address, optional organization, role, interest area, optional notes, the page you signed up from (source page), and submission timestamps. This is sent to our Chexi API at api.chexi.ai and stored in PostgreSQL (database civora_db, table waitlist_submissions).

Website analytics (automatic). When analytics is enabled, PostHog may collect your IP address, browser and device information, pages viewed, referring URL, approximate location derived from IP, session identifiers, and interaction events (for example waitlist submissions, pricing page actions, homepage activity preview usage, and navigation within the marketing site).

Correspondence. If you email us at support@chexi.ai, partnerships@chexi.ai, or feedback@chexi.ai, we retain that correspondence to respond and operate Civora.

Product usage (when the app is available). If you access authenticated Civora features, we may process account identifiers through Supabase Auth (email or OAuth providers), and application data such as chat threads and saved legislative research, depending on features enabled at launch. We will update this policy or provide in-product notice before expanding collection materially.

Legislative data. Bill and congressional activity shown on the site is fetched from public sources (including Congress.gov via our API). That government data is not personal information about you.

We do not sell personal information. We do not use third-party advertising pixels on civora.io.

• Operate the waitlist and manage early access interest.
• Send a transactional waitlist confirmation email (subject: “You're on the Civora waitlist”) through Resend, and contact you about Civora early access or product updates related to your signup.
• Measure and improve the marketing site (analytics and error diagnostics).
• Secure, operate, and debug api.chexi.ai (including server logs).
• Comply with law and enforce our terms.

For visitors in the United States, we rely on your consent and notice when you submit the waitlist, our legitimate interests in security and product improvement (including analytics where applicable), and performance of the waitlist service you request.

If you are in the EEA, UK, or Switzerland, you may have rights to access, correct, delete, or restrict processing of your personal information, to object to certain processing, and to lodge a complaint with your supervisory authority. Contact us to exercise these rights.

We share personal information with service providers only as needed to run Civora:

• PostHog, Inc. (United States) — product analytics, autocapture, custom events, and JavaScript exception capture. Ingest is proxied through civora.io/ingest to us.i.posthog.com. See PostHog's privacy policy.
• Resend, Inc. — transactional email delivery for waitlist confirmations (from Civora <hello@chexi.ai> unless we change the configured sender).
• Chexi infrastructure — self-hosted Go API, PostgreSQL, nginx, and TLS termination on a virtual private server operated by Columbus AI Automation Solutions, LLC (production hosting via Hostinger-class VPS).
• Supabase — authentication and application data when logged-in Civora features are enabled.
• Library of Congress / Congress.gov — public legislative data retrieved server-side; not a processor of your personal information.

PostHog uses cookies and/or browser local storage to recognize browsers, measure traffic, associate events with a persistent identifier, and support reliability features such as exception capture. Ingest requests are routed through civora.io/ingest (first-party proxy) to reduce third-party cookie exposure; PostHog may still set first-party cookies or local storage.

These technologies are used for analytics and site reliability, not for selling your data or cross-site advertising. Example custom events include waitlist_submitted, pricing_viewed, homepage_activity_loaded, and related marketing interactions.

You can limit cookies in your browser settings or block analytics requests; some diagnostics may still be collected at the network level if not disabled. For deletion requests related to analytics, contact support@chexi.ai and we will route requests through our PostHog project where applicable.

Waitlist records are kept until you request deletion or we no longer need them for prelaunch operations, typically up to 24 months after your last interaction unless a longer period is required by law or dispute resolution.

Analytics data is retained according to our PostHog project configuration. Server logs are retained for approximately 90 days for security and debugging unless a longer period is required.

Email support@chexi.ai to request access, correction, or deletion of waitlist data. You may opt out of non-essential marketing emails by replying to Civora messages once we send them. Duplicate waitlist email addresses are rejected by our API.

We use TLS for data in transit and access controls on our API and database. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Civora is not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. Contact us if you believe we have collected such information.

We process data in the United States. PostHog, Resend, and our Chexi-hosted database may receive and store information in the United States. If you visit from outside the United States, you consent to this transfer where permitted by law or contact us to discuss your options.

We may update this policy. Material changes will be posted on civora.io/privacy with a new effective date. Continued use after changes means you accept the updated policy where permitted by law.

See our Terms of Service and Disclaimer.

Columbus AI Automation Solutions, LLC — Civora privacy: support@chexi.ai