BETABETALast updated: September 2026
This policy explains what data Convoi collects, why, and your rights under the General Data Protection Regulation (GDPR).
Convoi (getconvoi.app)
SIRET: 844 492 041 00018
Contact: help@getconvoi.app
Account data — email address and username. Sign-in is passwordless (magic link via Firebase Auth); we never store a password.
Profile data — bio, social links, vehicle info, skills, languages, activities, crew preferences. You choose what to fill in.
Photos — profile pictures and convoi photos you upload. Automatically resized and stored securely.
Location — your GPS coordinates, only when you grant permission. Used to show nearby convois and to send emergency signals.
Messages — chat messages between you and other users, stored to deliver them. Only accessible to conversation participants.
Payment data — if you subscribe to Pro, payment is handled by Stripe. We store a Pro flag, your Stripe customer ID, and subscription ID so we can unlock features and restore access. We never see or store your card number.
Usage data — anonymous page views via Vercel Analytics (no cookies, no personal data). Error reports via Sentry (may include technical context like browser version, never personal data).
We process your data based on: (a) contract performance — providing the Convoi service you signed up for, including Pro if you subscribe; (b) legitimate interest — security, fraud prevention, service improvement; (c) consent — location access, which you can revoke at any time; (d) legal obligation — invoices and accounting records.
Your data is used to operate the app: matching you with nearby convois, displaying your profile, delivering messages, processing emergency signals, and managing subscriptions. We do not sell, rent, or share your personal data with third parties for marketing.
We use the following services to operate Convoi. Each processes data under their own privacy policies and GDPR-compliant terms:
Data transfers to the US are covered by the EU-US Data Privacy Framework (where applicable) or Standard Contractual Clauses.
Location is only collected when you explicitly allow it via your browser or device. Depending on your convoi's privacy setting, other users may see a rough area (country/region) rather than your exact position. You can revoke location permission at any time in your browser settings.
We use one cookie (session) to keep you logged in. This is strictly necessary for the app to work — no consent required under ePrivacy rules. We also use browser localStorage to remember your filter preferences and settings. We do not use tracking cookies, advertising cookies, or third-party cookies.
We keep your data as long as your account exists. When you delete your account (Settings → Account), we delete your profile, messages, photos, convois, emergency signals, and reports, and we cancel Pro. Stripe retains payment records as required by financial regulations.
Under the GDPR, you have the right to:
To exercise any of these rights, email help@getconvoi.app. We will respond within 30 days. You also have the right to lodge a complaint with the French data protection authority (CNIL) at cnil.fr.
Convoi is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
We may update this policy. Significant changes will be communicated via email or in-app notification. Continued use after changes constitutes acceptance.
Questions about your data? Reach us at help@getconvoi.app.