Privacy Policy

Effective date: April 1, 2026

Convey ("we," "us," or "our") operates the shift scheduling platform available at useconvey.app. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our service.

1. Information We Collect

We collect the following categories of information:

• Account information: When a manager creates an account, we collect their name, email address, and password.
• Employee information: Managers add employee names and mobile phone numbers so we can deliver schedules via SMS.
• Schedule data: Shift times, roles, availability preferences, and time-off requests entered into the platform.
• Usage data: We collect analytics on how you interact with the platform, including pages visited, features used, browser type, device information, and IP address.
• SMS records: Delivery status and timestamps of schedule notifications sent to employees.

2. How We Use Your Information

We use the information we collect to:

• Generate and optimize employee shift schedules using AI.
• Deliver schedules and notifications to employees via SMS.
• Operate, maintain, and improve the Convey platform.
• Provide customer support and respond to inquiries.
• Monitor usage patterns and analyze trends to improve our service.
• Process billing and manage subscriptions.
• Comply with legal obligations and enforce our terms.

3. Third-Party Services

We share information with the following third-party service providers, strictly to operate the Convey platform:

• Twilio: Employee phone numbers and schedule content are transmitted to Twilio to deliver SMS notifications. Twilio's privacy policy governs their handling of this data.
• Anthropic (Claude AI) and Groq: Schedule data, employee availability, and role information are processed by AI services to generate optimized schedules. We do not send employee phone numbers to AI providers.
• Cloudflare: Website hosting, DNS, CDN, and D1 database (stores waitlist signups). Cloudflare Web Analytics provides cookieless, privacy-friendly page view analytics with no personally identifiable information collected.
• Resend: Transactional email delivery service used to send waitlist confirmation and admin notification emails. Resend processes recipient email addresses to deliver messages on our behalf.
• Polar.sh: Payment processing for subscriptions. Polar handles billing information, payment details, and subscription management. Your payment data is processed directly by Polar and is never stored on our servers.
• Analytics providers: We use analytics services that collect anonymized usage data to help us understand how the platform is used.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Schedule data is retained for up to 24 months to support historical reporting. When you delete your account, we remove your personal information from our active systems within 30 days. Some data may be retained in backups for up to 90 days before being permanently deleted.

5. Data Deletion

You may request deletion of your account and associated data at any time by emailing [email protected]. Managers can also delete individual employee records directly from the platform. Upon account deletion, we will remove personal data from our systems and instruct our third-party providers to do the same, subject to their own retention policies and any legal obligations.

6. Data Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, secure database access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. SMS Communications

Employees receive schedule notifications via SMS at the phone number provided by their manager. Employees can opt out of SMS notifications at any time by replying STOP to any message. Standard message and data rates may apply. Message frequency varies based on schedule changes.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Object to or restrict certain processing of your data.
• Request a portable copy of your data.

To exercise any of these rights, please contact us at [email protected].

9. Children's Privacy

Convey is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child's information has been provided to us, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of Convey after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at [email protected].