Private pilot terms

Last updated October 9, 2026

Policy version 2026-10-09. The evaluation remains limited to synthetic study information until the institutional authorization and launch requirements below are resolved. Real account emails and access information are still handled under the privacy policy.

These terms describe use of the Corvid website and invitation-only research administration pilot. The legal operator is Ayan Mishra, a sole proprietor at 6 Elliot Circle, Shrewsbury, Massachusetts, United States. Corvid is the product name; no incorporated company or registered business name is represented here. An institutional service agreement must identify the operator and authorized signatories before institutional production use. Contact ayan@corvid.health for that agreement.

Eligibility and authority

Only invited, verified accounts may enter. This professional evaluation is not offered to children under 13. Use the service only for studies and information you are authorized to manage. You must have legal capacity to agree, or use the pilot with required parent, guardian and institutional authorization. A minor cannot represent an institution or bind it to a contract through this interface. The lab must obtain an authorized signatory with legal capacity and any required procurement, research-office, security and data-processing approvals before uploading institutional data. Use synthetic information until those approvals are in place.

Permitted research and data

The pilot is limited to non-clinical research administration. Do not upload participant names, signatures, contact information, patient health information, clinical-trial records or protected student records. Use pseudonymous study record IDs and keep the identifying key within your institution. Do not upload third-party information without permission. A checkbox or access invitation does not replace an institutional authorization.

Human responsibility

Corvid drafts proposed text and organizes records. Output may be wrong, incomplete or outdated. Named humans must verify institutional rules, source citations, consent language and all proposed changes. The PI or authorized proxy submits through the institution’s system. Recording a submission or decision in Corvid does not submit anything or confer IRB approval. Your institution and review board remain the authorities.

Corvid does not issue participant payments, confer training certifications or guarantee reproducibility. A configured GitHub Actions workflow can run an analysis only after explicit authorization. A verified manifest and matching hashes establish a recorded comparison for the bound inputs; they do not establish scientific validity. Participant payment totals record transactions made elsewhere. Do not rely on this pilot as your sole official repository, emergency notification system or source of legal or regulatory advice.

Your content and AI

You retain your existing rights to uploaded content. Corvid does not claim ownership of your drafts, but AI output may not be unique or eligible for copyright, and third-party rights can apply. You permit processing necessary to operate the service. Optional drafting requires separate authorization for each request to send the disclosed records to OpenAI as described in the privacy policy. Your acknowledgment does not supply consent on behalf of staff or participants. Review institutional and funder AI-use, confidentiality, copyright and disclosure requirements before using generated text.

Imports and external services

Review extracted document text and mapped CSV rows before saving. Formatting, images and some document elements may not survive text extraction. Training imports do not grant protocol clearance. Only an explicitly assigned institutional approver can record clearance within their authorized scope. You must have institutional authorization before an administrator enables a REDCap, cloud document, survey, notification or external analysis connection, and the configured fields must contain only permitted information. Calendar exports are snapshots; refresh them when dates change. Exporting a file does not synchronize an external system. Notifications are optional and require configured destinations. Email replies only request authenticated review; they do not record approval. Retrieved annual regulatory editions are labeled by year and may differ from current rules. Reference checks match excerpts and source identity; a human must assess whether a source supports the actual claim. Pre-review only. This is not an IRB determination.

Security and acceptable use

Protect your account, do not share credentials, and grant study access only to authorized users. Do not bypass access controls, enter malicious content, or disrupt the service. We may restrict access to investigate misuse or protect the service and its users.

Pilot availability and responsibility

The private pilot is provided without a service-level commitment. Features may change and outages may occur. Export important records regularly. To the extent permitted by applicable law, the service is provided as is, without guarantees of accuracy, approval, fitness for a particular purpose or uninterrupted operation. Nothing here excludes liability or rights that cannot lawfully be excluded. An explicitly authorized Stripe checkout can create or change a lab subscription when configured. Review the displayed recurring price, capacity and discount before paying. Only verified provider events establish subscription entitlement; incomplete or failed checkout does not. Usage is metered from provider tokens under operator-configured verified rates, with reserves and a lab ceiling. Separate institutional service, procurement, refund and retention arrangements must be established before real institutional use.

Ending use and deleting records

You can export data and delete your account or owned studies in Settings. Existing-account export and account deletion are also available at the policy gate without accepting a later revision. Deletion requires confirmation that you checked applicable retention duties and legal holds and that deletion is permitted. This attestation does not replace an institutional records review. Corvid has no legal-hold system; preserve required official records elsewhere. Shared records remain under the study owner's control and may still identify you in history, as described in the privacy policy. Contact the operator for rights requests that self-service tools cannot resolve.

Acceptance and changes

After email confirmation, the workspace records the exact policy version shown and the timestamp of acceptance. An outdated page cannot record acceptance of a newer version. Material changes require renewed acceptance for new study processing and drafting; you can export existing records or delete your account without accepting those changes. Privacy acknowledgment is not blanket consent to every type of processing. Contact ayan@corvid.health with questions.