Privacy Policy

KONVOH is a customer-relationship tool for real-estate agents, made by KONVOH LLC in Austin, Texas. This page explains what information KONVOH handles, why, and the choices you have. We keep it in plain language on purpose.

Information we collect

• Your account — name, email address, and password handled by our authentication provider (we never see or store your password itself), plus your subscription status.
• Billing— payments are processed by Stripe. Card numbers go directly to Stripe and never touch KONVOH's servers; we keep only the subscription records Stripe shares with us.
• Your CRM data — the contacts, notes, deals, and related records you enter or import. This data belongs to you; KONVOH stores and processes it only to run the product for you.
• Consent and contact-preference records — KONVOH keeps a permanent record of communication permissions and opt-outs (including a do-not-contact list) because honoring them is a legal obligation.
• Email engagement — when you send email through KONVOH, we record delivery details and basic engagement signals (opens and link clicks) for the messages you sent.

Connected mailboxes (Google and Microsoft)

You can connect your own Gmail or Microsoft/Outlook mailbox so KONVOH can send email as you and detect replies to conversations KONVOH started. We request the narrowest access that makes that possible: permission to send email and to read mail (used only to find replies to messages you sent from KONVOH). KONVOH cannot modify or delete anything in your mailbox — we deliberately do not request that permission.

Access tokens are encrypted at rest in a dedicated secrets vault. We do not copy your mailbox: only replies belonging to conversations you started from KONVOH are stored, so they can appear on the matching contact's timeline. Disconnecting your mailbox in KONVOH destroys the stored credentials.

KONVOH's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

To provide and improve KONVOH for you: storing your CRM data, sending the messages you compose, showing you replies and engagement, enforcing communication permissions, billing your subscription, and keeping the service secure (including tamper-evident audit records). We do not sell personal information, and we do not use your data for advertising.

Who we share it with

Only the service providers that run KONVOH, each handling data solely to provide their service to us: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Google and Microsoft (your connected mailbox, at your direction), Resend (system email such as receipts and password resets), and Telnyx (text messaging, when that feature is enabled). We may also disclose information if the law requires it.

Retention and deletion

Your CRM data stays as long as your account does. Deleting a contact permanently removes that person's records from your account. Two categories are kept longer because the law expects it: consent and opt-out history (so a "stop contacting me" is honored even if the contact record is later deleted) and audit records. To delete your account entirely, contact us at the address below.

Security

All traffic is encrypted in transit. Mailbox credentials are encrypted at rest in a dedicated vault. Every customer's data is isolated by row-level security in the database, and sensitive changes are recorded in an append-only, tamper-evident audit log.

Your choices and rights

You can access, correct, export, or delete your information — most of it directly inside KONVOH, and anything else by asking us. Texas residents have rights under the Texas Data Privacy and Security Act, and we honor equivalent requests from anyone. If you received email sent through KONVOH and want it to stop, use the unsubscribe link in the message or reply asking to be removed — both are honored.

Contact

Questions or requests: info@konvoh.com. We'll respond as quickly as we can, and within any legally required timeframe.