Privacy Policy

When you register for and use Convoy, we may collect the following categories of information:

• Account & identity information - your name, email address, and profile details provided during sign-up or account management via our authentication provider (Clerk).
• Organisation information - organisation name, member roles, and team configuration you enter while using the platform.
• Payment & billing information - billing details required to process subscription payments. Payment card data is collected and handled exclusively by our third-party payment processor, PayHere. We do not store or have direct access to your full card details.
• Platform usage data - information about deployments, applications, databases, domains, and builds you manage through the Convoy console.
• Technical & log data - IP address, browser type, device information, access timestamps, and error logs collected automatically when you interact with our platform.
• Integration data - data related to third-party integrations you connect (e.g., GitHub repositories) necessary to operate the service.

We use the information we collect for the following purposes:

• To create and manage your account and organisation on the Convoy platform.
• To provision, operate, and maintain your deployments, databases, domains, and other platform resources.
• To process subscription payments and manage billing through PayHere.
• To communicate with you about your account, service updates, maintenance windows, and support requests.
• To detect, investigate, and prevent fraudulent transactions, security breaches, and abuse of the platform.
• To improve our platform, features, and services based on usage patterns and feedback.
• To comply with applicable legal obligations.

We respect your privacy and do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service providers: We share data with trusted third-party vendors who help us operate the platform - including authentication (Clerk), payment processing (PayHere), cloud infrastructure, and monitoring. These providers are bound by contractual obligations to handle your data securely and only for the purposes we specify.
• Legal requirements: We may disclose your information if required by law, regulation, or valid legal process (such as a court order or government request).
• Protection of rights: We may disclose information where necessary to protect the rights, property, or safety of Convoy, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you prior to any such transfer.

All subscription payments on the Convoy platform are processed securely by PayHere (Pvt) Ltd, a licensed payment service provider. When you submit payment information, it is transmitted directly to PayHere using industry-standard encryption. Convoy does not store your full payment card details on our servers. PayHere's handling of your payment data is governed by their own privacy policy and security standards. A small verification charge may be applied by PayHere during payment method setup and will be refunded in accordance with PayHere's verification procedures.

We implement industry-standard security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include encrypted communications (TLS), access controls, and secure cloud infrastructure. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Convoy uses cookies and similar session technologies primarily to maintain authenticated sessions and ensure the platform functions correctly. We do not use third-party advertising cookies or tracking pixels. You may configure your browser to refuse cookies; however, doing so may impair the functionality of the Convoy console, including the ability to remain signed in.

We retain your personal information for as long as your account is active or as necessary to provide you with our services. If you close your account, we will delete or anonymise your personal information within a reasonable timeframe, unless we are required to retain it by law or for legitimate business purposes such as resolving disputes or enforcing agreements.

Depending on your jurisdiction, you may have the right to access, correct, or delete the personal information we hold about you. To exercise any of these rights, please contact us at the address below. We will respond to all requests within a reasonable timeframe.

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to our legal obligations.
• Withdraw consent to data processing where consent is the legal basis.

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Your continued use of the Convoy platform after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us via the support channel available within the Convoy console, or reach out through our official website at [email protected].