Privacy Policy — Convive

Introduction

This Privacy Policy describes how Convive ("we," "us," or "our") collects, uses, and protects your information when you use our platform—including our website and web app. It applies to everyone who uses Convive, whether you create an account or participate as a guest in a hangout.

Information We Collect

When you create an account, we collect:

Phone number, which you provide at sign-up and which we use to send you authentication codes, identify your account, and enable other users you know to find you (see Friend discovery below).
Display name, which is visible to other users you interact with on Convive.
Profile data you choose to add, including an optional short bio, an optional avatar image, and an optional home location (city or area you set in your profile).

When you use the service, we also collect or generate:

Content you create, including votes on places, place suggestions, time-slot proposals, sticky notes inside a hangout, group chat messages inside a hangout, vibe preferences (used to personalize AI suggestions), place reviews and ratings, and place interactions such as marking a place as "want to go" or "been."
Usage data, such as which hangouts you participated in, features you used, and basic in-product activity.
Device information, including device type, operating system, and browser, used for compatibility and analytics.
Approximate location, when you grant browser location permission for place search or maps. We may also store a coarse home location you set in your profile.
Local storage and similar technology, used for authentication session tokens and user preferences. Our analytics is cookieless and does not use tracking cookies.

Guest (anonymous) participants do not create an account and only provide a display name. We associate guest activity with a temporary session — see Data Retention below.

Age Requirement

You must be 18 or older to use Convive. We do not knowingly collect personal information from anyone under 18. If you believe a user under 18 has provided us with personal information, please contact us and we will delete it promptly.

How We Use Your Information

We use your information to:

Provide and operate Convive — showing your votes and messages to other participants in a hangout, saving your preferences, powering maps and place search, and personalizing suggestions based on your stated vibes.
Operate the AI assistant. Only messages you send to the AI assistant in a private one-on-one conversation are processed by our AI providers (currently Anthropic and Google). Your vibe preferences and the basic context of the hangout you are discussing may be included in private AI conversations to personalize suggestions. We do not send group chat messages, votes, place reviews, other users' content, or any non-AI hangout data to AI providers.
Run analytics and improve the product (e.g., usage and performance, without tracking you across other sites).
Enable friend discovery as described below.
Comply with legal obligations and enforce our terms.

We do not sell your personal information.

How We Share Your Information

Within a hangout. Other attendees of a hangout — including registered users and guests — can see the votes, RSVPs, place suggestions, time-slot proposals, sticky notes, vibe selections, group chat messages, and similar content you submit within that hangout.

Friend discovery. Other Convive users can find your account by searching for your phone number or display name. We use your phone number to match search queries from other users who already know how to reach you (this is how friends connect on Convive). We do not display your phone number to other users, including when you appear in a search result — only your display name and avatar are shown. If you do not want to be findable by phone number, do not sign up with that phone number.

Public-by-choice content. Reviews of places, ratings, and place interactions (such as "been" or "want to go") have a visibility setting you control. By default these are visible only to people you have added as friends on Convive. If you set a review, rating, or place interaction to public, it will be visible on that place's detail page to any user of Convive. You can change the visibility of each item, and you can change your default visibility, in account settings.

Avatars. If you upload an avatar image, that image is stored in our cloud storage and may be reachable by direct URL. Treat it as visible to other Convive users.

Service providers. We share data only as needed with providers that help us operate the product:

Supabase — database and authentication.
Vercel — web hosting and cookieless analytics.
Twilio — delivery of authentication SMS one-time codes.
Cloudflare Turnstile — invisible bot-detection CAPTCHA on guest join and share-link flows. Turnstile processes minimal client-side signals (such as IP address, TLS fingerprint, user-agent, and site origin) solely to distinguish human visitors from bots and block abusive traffic. We use Turnstile in invisible mode, so you will not see a visible security challenge unless Cloudflare determines one is necessary. Cloudflare's collection and use of Turnstile data is described in the Cloudflare Turnstile Privacy Addendum (which supplements Cloudflare's Privacy Policy). For questions about Cloudflare's processing of Turnstile signals on our site, contact us at privacy@conviveapp.com or Cloudflare's Data Protection Officer as described in the Addendum.
Google Places API — place and venue data used for place search.
Mapbox — maps, map tiles, and location visualization.
Anthropic and Google (AI) — processing of private AI-assistant conversations, as described above.

These providers process data on our behalf and in line with our instructions.

Legal requirements. We may disclose information when required by law or to protect our or others' rights and safety.

We do not share your information with third parties for their own marketing.

Authentication via SMS

By providing your phone number to sign up or sign in to Convive, you consent to receive automated SMS one-time codes from us for authentication purposes. These messages are transactional and required to use the service; you cannot opt out of authentication SMS while maintaining an account. Standard message and data rates from your carrier may apply. We do not currently send marketing or non-transactional messages via SMS.

Data Retention

Account data: We retain your account and the content associated with it until you request deletion or until you delete the account.
Reviews, ratings, place interactions, and avatar images are retained until you delete them or your account is deleted.
Guest sessions: We may periodically remove anonymous guest session data that is no longer associated with an active hangout.
AI: Messages you send to the AI assistant in a private conversation are processed by our AI providers; their retention and use of that data are governed by their policies and our agreements with them.

Your Rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your data (subject to legal exceptions).
Data portability (receive a copy of your data in a portable format).
Opt out of certain processing where applicable.

Account deletion. To delete your account, email privacy@conviveapp.com from a method tied to your account so we can verify your identity. Self-service in-app account deletion is not currently available; we aim to honor verified deletion requests within 30 days. We may retain anonymized, non-identifying data for analytics after deletion.

To exercise any of these rights, contact us at privacy@conviveapp.com. We will respond within the time required by applicable law. If you are in the European Economic Area, you may also have the right to lodge a complaint with a supervisory authority.

Local Storage

We use:

Local storage for session and authentication tokens and for user preferences. This is required for the service to work (e.g., keeping you logged in).
Cookieless analytics (Vercel Analytics) for usage and performance metrics. We do not set tracking or advertising cookies.
Cloudflare Turnstile may use strictly necessary cookies or similar browser mechanisms when you use guest flows protected by our invisible CAPTCHA. See the Cloudflare Turnstile Privacy Addendum linked in Service providers above.

You can clear local storage in your browser settings; doing so may log you out.

Security

We take reasonable measures to protect your data, including encryption in transit (HTTPS), secure authentication, and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. For most updates, we will notify you in the product, and your continued use of the service — or your dismissal of any notice we provide regarding such changes — constitutes your acceptance of the updated policy. For material changes that affect your fundamental rights (including fundamentally new uses of your personal data or new categories of sharing), we will require your explicit acceptance before you continue to use the service.

We will post the updated policy on this page and update the "Last updated" date. If you do not access the service during a notice period, you will be notified when you next access the service. You are responsible for keeping informed of changes by reviewing this policy periodically.

Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@conviveapp.com.