Effective July 14, 2026

Privacy Policy

This policy explains what the current Conveydo prototype keeps, what stays on your device, and the choices available to you.

Browser-only drafts and optional account storage

Without an account, names, addresses, asset descriptions, identifiers, prices, payment notes, terms, and signatures entered in the builder remain in your browser's local storage and the PDFs you generate. If you sign in and explicitly choose Save to account or Import local drafts, Conveydo stores that transaction record for your account so you can reopen it across devices.

Information Conveydo receives

When you create or use an account, Conveydo and its authentication provider, Supabase, receive your email address, optional display name, account credentials in protected form, account creation time, recent authentication activity, and optional product-update preference. Conveydo does not receive or store your plain-text password. When both parties complete a record and separately accept the verification disclosure, Conveydo receives a one-way SHA-256 fingerprint, transaction reference, party names, asset category, description and entered asset details or identifiers, sale price, sale date, jurisdiction, completion timestamp, and verification identifier. Anyone possessing the high-entropy verification link or identifier can view those verification details. Conveydo does not display addresses, emails, signature images, listing links, or payment evidence on the verification page.

With your permission, Conveydo records limited product events such as record starts, broad sale-category selections, local or account saves, signing-link creation and sharing method, completed buyer signatures, PDF downloads, receipt creation, failed actions, and feedback submission. These events contain an event name, page, timestamp, broad sale category, and limited completion or sharing fields. They do not contain names, email addresses, prices, asset identifiers, signatures, signing links, or record contents.

If you submit feedback, Conveydo receives the sale category, experience response, feedback text, optional follow-up email, and submission time. Do not put transaction details or sensitive identifiers in feedback.

Cookies and analytics choices

Conveydo uses necessary first-party cookies for beta access, account authentication, security, and remembering your privacy choice. These cookies are required for requested site functions. Optional aggregate analytics are disabled unless you accept them through the cookie banner or preference center. You may accept all cookies, reject non-essential cookies, or manage individual categories, and you can change your choice at any time through the Cookie settings control in the footer. Conveydo does not currently use advertising cookies.

Remote signing links and transaction emails

A signed-in record owner may create an expiring, single-use link for either party. Anyone with the link can review the shared sale details and add the named party's signature, consent, method, and signing time. Conveydo stores a one-way hash of the token, its status, expiration, completion time, and an event history. Conveydo uses the entered party emails, names, asset label, signing link, and expiration for invitations and completion notices. Email-delivery records are removed from the hosting database after 30 days. Send a signing link only to the intended signer.

How information is used

We use account transaction data to provide your private transaction history and reopen records you choose to sync. We use verification data to confirm that a matching record was submitted as complete with both party signatures and required consents. We use aggregate product events and feedback to evaluate completion, reliability, category demand, and sharing methods; improve the product; respond to testers; prevent misuse; and measure usefulness. We do not sell record information or use record contents for advertising.

Service providers and legal disclosures

Supabase provides account authentication, account transaction storage, and transaction event history. OpenAI Sites provides application hosting and limited operational storage. Resend processes transactional email addresses and message-delivery information for buyer invitations and signature updates. If payments are introduced, the payment processor will receive checkout and payment information under its own privacy terms; Conveydo will not place record contents or asset identifiers in payment metadata. We may disclose information when reasonably necessary to comply with law, protect rights and safety, or investigate abuse.

Retention and deletion

You can delete local drafts in the builder or by clearing browser storage. Account settings allow you to export account data, delete all cloud transactions and associated signing links, or permanently delete your account. Deleting cloud data does not delete browser copies, exported PDFs, copies held by another party, or verification records. Generated PDFs remain wherever you or another party saves them. Verification records are retained so completed transactions remain verifiable. Feedback and support records are retained while reasonably needed for testing, support, security, and legal obligations.

Security and limitations

Conveydo minimizes uploaded transaction data, uses secure transport on the hosted site, and separates record contents from receipt storage. No system is completely secure. Anyone with access to your device or exported PDF may be able to read the record, so protect the device and share PDFs carefully.

Children, regions, and changes

Conveydo is not directed to children under 13. The prototype supports private-sale guidance for United States and Canadian jurisdictions, with detailed rules reviewed in stages. Additional international and consumer-privacy requirements require review before wider launch. Material policy changes will be identified by a new effective date.

Your choices and contact

You may use the builder without an account, choose which transactions to sync, correct your profile, download your account data in a machine-readable format, withdraw optional product-update consent, delete local or cloud records, delete your account, avoid submitting feedback, omit optional contact information, and choose not to seal a record. Privacy, access, correction, portability, or deletion requests can be sent to support@conveydo.com or submitted through the Support page.