Legal
Privacy policy
The short version: we collect what the service needs, nothing is sold, and your credentials never live here.
This is a placeholder policy. It shows the structure and tone of our privacy commitments while the final text is completed with counsel. It is not yet a binding document.
- What we collect
- Account details for the people in your organization (name, work email, role), the routines and records your organization creates in the product, and the operational logs needed to run the service reliably.
- What we use it for
- To provide the service: running routines, holding checkpoints for the right people, keeping the audit trail, and supporting you. We do not sell personal information or use your records for advertising.
- What we never store here
- Credentials for the systems your routines connect to are never stored in this website or its database. They live in a separate secrets layer and never appear in logs or exports.
- Who can see your data
- People in your organization, according to the roles you set. Convoy staff who help operate routines act under named accounts, and their actions appear in your audit trail.
- Retention and export
- Your organization controls its records and can export them, including evidence binders, at any time. When an agreement ends, we delete organization data on the schedule set out in the final policy.
- Contact
- Privacy questions and requests go to hello@convoy.example and are answered by a person.