Privacy policy
In force- We hold what you put into Corbely — properties, tenancies, documents and the people you share them with.
- We do not sell it, and we do not use it to train anything.
- Nobody at Corbely can watch a recording of your screen. Session replay is banned in this product in writing.
- You can export your lists and delete your account, and deleting means deleting.
Who we are
Corbely is operated from the United Kingdom. Questions or requests about your data: use the contact page and we'll respond as quickly as we can.
The waitlist
If you join the waitlist we store your email address, the audience option you picked (if any), and which page you signed up from. We use it for one purpose: emailing you about the Corbely launch. Every email includes an unsubscribe link, and unsubscribing (or asking via the contact page) removes you from the list.
Your account
When you create an account we hold your name, email, and the security records needed to run sign-in safely (like session and login-attempt data). We use this to operate the service and protect it from abuse. We do not sell your data, and there is no advertising on Corbely. On our public website (not inside the app) we count visits without cookies, so we know how many people read a page — not who they are.
What you put in your workspaces
The content of your workspaces — properties, tenancies, documents, jobs, journals — belongs to you. Where that content includes other people's details (for example a landlord recording a tenant's contact details), the workspace owner is responsible for that data and Corbely processes it on their behalf, only to provide the service.
Cookies
We use only the cookies required to keep you signed in securely. No analytics cookies, no advertising cookies — so there's no cookie banner, because there's nothing to consent to. Visits to our public website are counted without cookies or anything stored on your device.
AI features
Corbely's AI features are local-first: where you use them with a local engine (Ollama), prompts and responses stay on your machine and never reach our servers.
Where your data lives, and who touches it
Your workspaces, your account and your files are stored in the EU (Frankfurt). A small set of service providers process data strictly to run Corbely — hosting, file storage and email delivery. Here is every one of them, what it does for us, and where it runs. We keep this list current as it changes.
Hosts the database — your account and everything in your workspaces.
Runs the Corbely API. Every request you make passes through it.
Stores the files you upload — documents, photos and attachments.
Serves the Corbely app and this website. Sees request metadata such as your IP address, not the contents of your workspaces. On the public website it also counts page visits, without cookies and without recording who you are. It never sees pages inside the app.
Delivers our email — sign-in, password reset, verification and workspace invites. Holds the address it is sent to and what the message says.
Runs our corbely.com mailboxes — hello@, support@ and the others on the contact page — so anything you email us is stored there.
Receives a technical report when something breaks, so we can fix it. Sensitive values are stripped out before the report is sent.
Answers DNS for corbely.com — it turns the address into a number. Your traffic does not pass through it.
Your rights
You can access, correct, export or delete your data. Account deletion permanently removes your account and the workspaces you own. You also have the right to complain to the ICO (ico.org.uk) if you think we've handled your data badly — though we'd rather you told us first.
Questions about any of this go to hello@corbely.com and reach a person, not a queue.