Privacy Policy

Convoi (getconvoi.app)
SIRET: 844 492 041 00018
Contact: help@getconvoi.app

Account data — email address and username. Sign-in is passwordless (magic link via Firebase Auth); we never store a password.

Profile data — bio, social links, vehicle info, skills, languages, activities, crew preferences. You choose what to fill in.

Photos — profile pictures and convoi photos you upload. Automatically resized and stored securely.

Location — your GPS coordinates, only when you grant permission. Used to show nearby convois and to ask for roadside help.

Messages — chat messages between you and other users, stored to deliver them. Only accessible to conversation participants.

Payment data — if you subscribe to Pro, payment is handled by Stripe. We store a Pro flag, your Stripe customer ID, and subscription ID so we can unlock features and restore access. We never see or store your card number.

Usage data — anonymous page views via Vercel Analytics (no cookies, no personal data). Error reports via Sentry (may include technical context like browser version, never personal data).

We process your data based on: (a) contract performance — providing the Convoi service you signed up for, including Pro if you subscribe; (b) legitimate interest — security, fraud prevention, service improvement; (c) consent — location access, which you can revoke at any time; (d) legal obligation — invoices and accounting records.

Your data is used to operate the app: matching you with nearby convois, displaying your profile, delivering messages, processing roadside help requests, and managing subscriptions. We do not sell, rent, or share your personal data with third parties for marketing.

We use the following services to operate Convoi. Each processes data under their own privacy policies and GDPR-compliant terms:

• Firebase / Google Cloud — authentication, database, file storage (EU/US)
• Vercel — hosting, analytics (US)
• Stripe — payment processing (US/EU)
• Resend — transactional emails (US)
• Sentry — error monitoring (US)

Data transfers to the US are covered by the EU-US Data Privacy Framework (where applicable) or Standard Contractual Clauses.

Location is only collected when you explicitly allow it via your browser or device. Depending on your convoi's privacy setting, other users may see a rough area (country/region) rather than your exact position. You can revoke location permission at any time in your browser settings.

We use a session cookie to keep you logged in. It is strictly functional — no consent required under ePrivacy rules. We also use browser localStorage to remember your filter preferences and settings. We do not use tracking cookies, advertising cookies, or third-party cookies.

We keep your data as long as your account exists. When you delete your account (Settings → Account), we delete your profile, messages, photos, convois, roadside help requests, and reports, and we cancel Pro. Stripe retains payment records as required by financial regulations.

Under the GDPR, you have the right to:

• Access — request a copy of your data
• Rectification — correct inaccurate data (edit your profile)
• Erasure — delete your account and all associated data
• Portability — request your data in a machine-readable format
• Restriction — ask us to limit how we process your data
• Objection — object to processing based on legitimate interest
• Withdraw consent — revoke location or other consent at any time

To exercise any of these rights, email help@getconvoi.app. We will respond within 30 days. You also have the right to lodge a complaint with the French data protection authority (CNIL) at cnil.fr.

Convoi is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

We may update this policy. Significant changes will be communicated via email or in-app notification. Continued use after changes constitutes acceptance.

Questions about your data? Reach us at help@getconvoi.app.