Trust & Security

Trust Center

How CORVUS protects the Service, your data and the integrity of its signals. Last updated: October 8, 2026.

CORVUS will never ask for your exchange password, API keys with trading or withdrawal rights, private keys or seed phrase. Anyone who does is not CORVUS. See our Security Tips.

Our approach

CORVUS is designed to need as little of your data as possible. You can use the site without an account, we do not connect to your exchange accounts, and we never hold your funds. That keeps the most valuable things, your money and your credentials, out of our hands entirely.

Infrastructure

  • Hosting. The website and dashboard are hosted on Vercel and served over HTTPS.
  • Data. Signals and risk scores are stored in a managed Postgres database run by Supabase. The website only reads from it.
  • Code. Our code lives in version control on GitHub, and every change to the live site goes through a tracked commit and automated deployment.

Your data

We do not ask for your name, email address, payment details or exchange credentials. Display preferences are stored only in your own browser, and there are no advertising or analytics trackers. The full detail is in our Privacy Policy and Cookies Policy.

Signal integrity

Signals and risk scores are generated by an automated pipeline from public market data, news and sentiment, and each one is stored with the time it was created and the source that produced it. If the pipeline stops producing fresh signals, our Status Page shows it as delayed rather than letting stale data look current.

Signals are research inputs, not instructions to trade. Please read our Disclaimer.

Reporting a vulnerability

If you believe you have found a security issue in CORVUS, please report it privately to the CORVUS team. Our Bug Bounty Program explains what is in scope and how we handle reports.

Service status

Check the live state of the website, signal feed and market-data sources on our Status Page.