Convoy Privacy Policy

Last updated: August 30, 2026

1. Information we collect

We may collect the following information:

Account information

• Username.
• Email address.
• Optional profile photo.
• Basic profile information provided by the user.

Vehicle information

• Vehicle make, model, and year.
• Vehicle photos.
• Modifications and features voluntarily shared by the user.

Location information

Convoy may collect location information when the user grants explicit permission.

Location may be used to:

• Show the user’s position in events and active convoys.
• Enable real-time tracking between authorized participants.
• Show nearby routes and points of interest.
• Improve the in-app navigation experience.

Location is shared with other users only when the relevant feature is active and authorized by the user.

User-generated content

• Posts.
• Comments.
• Photos.
• Reviews.
• Information shared in groups and events.
• GPX files and route details the user imports or publishes.
• Address, website, social media, and other contact details submitted by authorized business editors.

Technical information

We may collect technical information such as:

• Device type.
• Operating system.
• App version.
• Error and diagnostic logs.
• Approximate IP address.
• Installation or device identifiers and limited operational data used by Firebase to deliver notifications and diagnose the service.

Place search and geocoding

When a user explicitly searches for a place or address, or asks to convert a map point into an address, the query or coordinates are sent to the OpenStreetMap Foundation Nominatim service. Convoy does not store this search history in its own database.

Nominatim may receive the query, coordinates, IP address, and technical request metadata under the OpenStreetMap Foundation privacy policy. Do not enter personal or confidential information in the search field.

Business interactions and statistics

When someone views a business or uses actions such as calling, opening WhatsApp, requesting directions, visiting its website, or saving it, Convoy records the interaction type, business, and date. If the person is signed in, the event may be linked to their account; otherwise it is recorded without a user identifier.

We use these events to show business owners aggregated statistics and to operate and improve the feature. Individual events are not shown to other users and are not used for advertising or tracking across apps or websites.

Optional WhatsApp integration

If you link WhatsApp with Convoy, Meta provides your WhatsApp number or identifier as the sender identifier. To deliver a reply, we temporarily use the destination number for the channel. The identifier persisted to link and authorize the account is an irreversible HMAC; the destination number is not retained as a lookup identifier.

• The sender identifier is converted into an irreversible HMAC to find the linked account.
• When a message must be delivered, the destination and content remain encrypted in server queues.
• We retain only minimal technical states, such as deduplication, delivery, errors, and processing dates.
• We do not use the WhatsApp number for advertising or show it in replies, links, logs, or public Convoy screens.
• Message content is not retained indefinitely and is deleted according to the periods below.

2. How we use information

We use collected information to:

• Provide and maintain Convoy services.
• Show routes, events, and relevant content.
• Enable communication between users.
• Improve app performance and stability.
• Detect fraudulent or abusive activity.
• Resolve technical issues.
• Develop new features.
• Generate aggregated interaction statistics for business owners.

3. Sharing information

Convoy does not sell personal information to third parties.

We may share information only in these circumstances:

• When necessary to operate the platform.
• With Supabase for authentication, database, storage, and realtime functions.
• With Google Firebase Cloud Messaging to register the device and deliver push notifications.
• With the OpenStreetMap Foundation through Nominatim only when the user performs a place/address search or requests geocoding from the map.
• With Resend when operational, support, or service-alert email must be delivered.
• With Stadia Maps to generate maps and route views without sending the account identifier.
• With Meta Platforms only when the user activates WhatsApp and to receive or deliver messages through Convoy’s official channel.
• When required by law.
• To protect user or platform security.

Public information a user chooses to share may be visible to other Convoy users. Business owners receive aggregated interaction statistics, not individual histories of people who viewed or used business actions.

4. Security

We implement reasonable security measures to protect user information against unauthorized access, loss, misuse, or disclosure. Communications with our services use encryption in transit, and sensitive WhatsApp payloads remain encrypted while awaiting processing.

However, no system can guarantee absolute security.

5. Data retention

We retain information as needed to operate Convoy or while the account remains active. The following periods apply to the optional WhatsApp integration:

• Successfully processed encrypted content: up to 7 days after processing is complete.
• Failed or dead encrypted content: up to 30 days after its terminal state. Unresolved ambiguous messages are minimized until operational reconciliation ends; once terminal, the 30-day period applies.
• Minimal technical logs, action receipts, and deduplication tombstones: up to 90 days.
• Expired conversation and linking sessions: up to 30 days.
• Inactive capabilities: up to 90 days.
• Revoked WhatsApp identities: up to 30 days, except the minimal suppression record needed to prevent unauthorized reactivation.

Active preferences and an opt-out request are retained as needed to honor the user’s decision. A minimal suppression record may remain after deletion to prevent unauthorized reactivation. We do not automatically keep an active account solely because time has passed.

Users can permanently delete their account from Profile → Settings → Delete account. They can also use the public privacy choices and data deletion page if they cannot access the app. Deleting the account removes associated information, except minimal records we must retain for security, abuse prevention, or a legal obligation.

6. User rights

Users may:

• Access their information.
• Update their data.
• Change location permissions.
• Delete published content.
• Disable and unlink WhatsApp integration.
• Request account deletion.

7. Children

Convoy is not directed to children under 13. We do not knowingly collect personal information from children.

8. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be published in the app and take effect when published.

9. Contact