Legal

Privacy policy

The short version: we collect what the service needs, nothing is sold, and your credentials never live here.

This is a placeholder policy. It shows the structure and tone of our privacy commitments while the final text is completed with counsel. It is not yet a binding document.

What we collect
Account details for the people in your organization (name, work email, role), the routines and records your organization creates in the product, and the operational logs needed to run the service reliably.
What we use it for
To provide the service: running routines, holding checkpoints for the right people, keeping the audit trail, and supporting you. We do not sell personal information or use your records for advertising.
What we never store here
Credentials for the systems your routines connect to are never stored in this website or its database. They live in a separate secrets layer and never appear in logs or exports.
Who can see your data
People in your organization, according to the roles you set. Convoy staff who help operate routines act under named accounts, and their actions appear in your audit trail.
Retention and export
Your organization controls its records and can export them, including evidence binders, at any time. When an agreement ends, we delete organization data on the schedule set out in the final policy.
Contact
Privacy questions and requests go to hello@convoy.example and are answered by a person.