Privacy Policy

CONVOYA

PRIVACY POLICY

Last Updated: February 12, 2026

1. INTRODUCTION

Convoya LLC (“Convoya,” “we,” “us,” or “our“) is a Utah limited liability company with its principal place of business at 770 S Green St., Unit 7, Salt Lake City, UT 84102. Convoya operates the Convoya mobile application and related website located at convoya.app (collectively, the “Services“). Convoya is a route-sharing platform designed for driving enthusiasts, enabling users to discover, create, share, and navigate driving routes and points of interest (“POIs“).

This Privacy Policy (this “Policy”) describes how we collect, use, disclose, and otherwise process your personal information when you use our Services, and explains the rights and choices available to you with respect to your information. By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree with the practices described in this Policy, please do not use the Services.

This Policy is incorporated into and forms a part of our Terms of Service. Capitalized terms used but not defined in this Policy have the meanings given to them in our Terms of Service.

If you have questions or concerns about this Policy or our data practices, please contact us at [email protected].

2. INFORMATION WE COLLECT

We collect information in several ways, including when you provide it directly, when it is collected automatically through your use of the Services, and when we receive it from third-party sources.

2.1 Information You Provide Directly

Account Registration Information. When you create a Convoya account, we collect your email address. Your email address is required to create and maintain your account, and we use it to communicate with you about the Services.

Profile Information. You may choose to provide additional profile information, including a profile photograph, display name, and vehicle information (such as vehicle make, model, year, and photographs). Providing this information is optional and is done at your discretion.

Route and POI Submissions. When you submit a route or point of interest for publication on the Services, we collect the route data (including GPS coordinates, waypoints, directions, and any descriptive text or photographs you include), as well as any metadata associated with the submission.

Photographs. You may upload photographs to the Services. Photographs may contain metadata, including geolocation data, timestamps, and device information embedded in the image file (EXIF data).

Communications. When you contact us directly (for example, via email at [email protected]), we collect the information you provide in your communication, including your name, email address, and the content of your message.

Business Listing Information. If you are a business owner and elect to list your business on Convoya, we collect information about your business, including business name, address, contact information, business description, photographs, and payment information necessary to process your listing fee.

2.2 Information Collected Automatically

When you access or use the Services, we automatically collect certain information, including:

Location Data. With your permission, we collect precise geolocation data from your mobile device when you use the Services, including when you record a route, use turn-by-turn navigation, or use live location-sharing features. We access your device’s GPS, Wi-Fi, and/or cellular technology to obtain this information. We do not track your location when you are not actively using the Services. We do not store your precise location data on a long-term basis; location data associated with route recordings is retained only as necessary to provide the route-related features of the Services and is processed in accordance with Section 4 of this Policy.

Device Information. We collect information about the device you use to access the Services, including hardware model, operating system and version, unique device identifiers, mobile network information, and browser type.

Usage Information. We collect information about your interactions with the Services, including the features you use, the routes you view or navigate, the pages you visit, the date and time of your visits, and the duration of your sessions.

Log Data. Our servers automatically record information (“log data”) created by your use of the Services, which may include your IP address, device and browser type, operating system, referring and exit URLs, pages viewed, and other information commonly collected in server logs.

2.3 Information from Third-Party Sources

Third-Party Authentication. If you choose to create an account or log in to the Services using a third-party authentication provider (currently Google OAuth or Apple Sign-In), we receive certain information from that provider, which typically includes your name and email address. We do not receive your password from these third-party providers. The information we receive from third-party authentication providers is governed by their respective privacy policies, and we encourage you to review those policies.

Mapbox. Our Services integrate with Mapbox for mapping, navigation, and geospatial services. When you use map-based features, certain information (such as your location and search queries) may be transmitted to Mapbox in accordance with the Mapbox Privacy Policy (https://www.mapbox.com/legal/privacy). We encourage you to review Mapbox’s privacy policy for information about their data practices.

Future Analytics Providers. As our Services grow, we may implement analytics tools and services provided by third parties to help us understand usage patterns, improve the Services, and monitor performance. If and when we do so, we will update this Policy to reflect the specific providers and the information collected through those tools.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

3.1 To Provide and Maintain the Services

  • Create and manage your account and authenticate your identity.
  • Enable you to discover, create, share, and navigate driving routes and POIs.
  • Provide turn-by-turn navigation and route-tracking functionality.
  • Enable live location sharing with other users you have authorized (when this feature becomes available).
  • Process and review route and POI submissions for publication.
  • Display business listings on the Services.
  • Process payments from business owners for listing services.
  • Respond to your inquiries, comments, and support requests.

3.2 To Improve and Develop the Services

  • Understand how users interact with the Services to identify trends, usage patterns, and areas for improvement.
  • Develop, test, and implement new features, products, and functionalities.
  • Conduct research and analysis to improve user experience and the quality of routes and POIs available on the platform.

3.3 To Communicate With You

  • Send you service-related notices, including account verification, technical notices, updates, security alerts, and administrative messages.
  • Notify you of changes to this Policy, our Terms of Service, or other policies.
  • Send you information about new features, promotions, or other news about Convoya, subject to your communication preferences.

3.4 To Ensure Safety and Security

  • Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.
  • Monitor and enforce compliance with our Terms of Service and other applicable policies.
  • Protect the rights, property, and safety of Convoya, our users, and the public.
  • Verify accounts and moderate content, including route and POI submissions.

3.5 To Comply With Legal Obligations

  • Comply with applicable laws, regulations, legal processes, and governmental requests.
  • Establish, exercise, or defend legal claims.
  • Enforce our agreements, including our Terms of Service and this Policy.

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We do not currently use third-party advertising networks. We may share your information in the following limited circumstances:

4.1 With Other Users

Certain information you provide may be visible to other users of the Services. This includes your display name, profile photograph, vehicle information (if provided), and any routes, POIs, or photographs you have shared publicly. If you elect to use the live location-sharing feature (when available), your real-time location will be visible to the specific users you have authorized.

4.2 With Service Providers

We may share your information with third-party service providers who perform services on our behalf, including hosting and infrastructure providers, payment processors, email delivery services, and customer support tools. These service providers are contractually obligated to use your information only for the purposes for which we have engaged them and in accordance with this Policy.

4.3 With Mapbox

As described above, certain information is transmitted to Mapbox to enable mapping and navigation features. This may include your location data, search queries, and device information. Mapbox’s use of this information is governed by its own privacy policy.

4.4 For Legal Reasons

We may disclose your information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our Terms of Service or other agreements, including investigation of potential violations; (c) detect, prevent, or otherwise address fraud, security, or technical issues; or (d) protect the rights, property, or safety of Convoya, our users, or the public as required or permitted by law.

4.5 In Connection With a Business Transfer

If Convoya is involved in a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar transaction, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.6 With Your Consent

We may share your information for any other purpose disclosed to you at the time we collect the information or pursuant to your consent.

4.7 Aggregated or De-Identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you. For example, we may share aggregate statistics about the number of routes in a particular region or general usage trends. Such information is not subject to this Policy.

5. DATA RETENTION

We retain your personal information for as long as your account is active or as needed to provide you with the Services. We retain certain information as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes.

Specifically:

  • Account Information: Retained for as long as your account remains active. Upon account deletion, we will delete or de-identify your account information within thirty (30) days, except as required by law or for legitimate business purposes.
  • Location Data: Precise location data collected during route recording, navigation, and live location sharing is not stored on a long-term basis. Route data that you choose to submit for publication is retained as part of the route content. Transient location data used for navigation and live location sharing is deleted after the session concludes.
  • Route and POI Data: Routes and POIs that have been approved and published may remain on the Services even after you delete your account, as described in our Terms of Service. You may request removal of published routes or POIs by contacting us.
  • Log Data and Usage Information: Retained for a reasonable period for security, troubleshooting, and analytical purposes, after which it is deleted or de-identified.
  • Business Listing Information: Retained for as long as the business listing remains active and for a reasonable period thereafter for billing and compliance purposes.

6. YOUR PRIVACY RIGHTS AND CHOICES

6.1 Account Controls

You may update, correct, or delete your account information at any time by accessing your account settings within the Services. You may delete your account by contacting us at [email protected]. Please note that deletion of your account may not result in the immediate removal of all content you have posted or submitted, as described in Section 5 above and in our Terms of Service.

6.2 Location Permissions

You may control the collection of precise location data through your mobile device’s operating system settings. Please note that disabling location services may limit or prevent the use of certain features of the Services, including route recording, turn-by-turn navigation, and live location sharing.

6.3 Communication Preferences

You may opt out of receiving promotional or marketing communications from us by following the unsubscribe instructions included in such communications or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, we may still send you non-promotional, service-related communications, such as those related to your account, transactions, or our ongoing business relationship.

6.4 Rights Under Utah Privacy Law

If you are a resident of the State of Utah, you may have certain rights under the Utah Consumer Privacy Act (UCPA), including:

  • Right to Know: The right to confirm whether we are processing your personal data and to access such data.
  • Right to Delete: The right to request deletion of your personal data that you have provided to us.
  • Right to Data Portability: The right to obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format.
  • Right to Opt Out of Targeted Advertising: The right to opt out of the processing of your personal data for purposes of targeted advertising. As of the effective date of this Policy, we do not engage in targeted advertising.
  • Right to Opt Out of Sale: The right to opt out of the sale of your personal data. As of the effective date of this Policy, we do not sell personal data.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the time period required by applicable law. We may need to verify your identity before processing your request.

6.5 Rights Under Other U.S. State Privacy Laws

Residents of certain other U.S. states, including California, Colorado, Connecticut, Virginia, and others, may have additional rights under their respective state privacy laws. These rights may include the right to access, correct, delete, and port personal information, and the right to opt out of the sale of personal information, targeted advertising, and certain profiling. If you are a resident of one of these states and wish to exercise your rights, please contact us at [email protected].

We will not discriminate against you for exercising any of your privacy rights.

7. CHILDREN’S PRIVACY

The Services are not directed to, and we do not knowingly collect personal information from, children under the age of sixteen (16). The Services are designed for driving enthusiasts who hold valid driver’s licenses. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information as promptly as possible. If you believe that a child under 16 has provided us with personal information, please contact us at [email protected].

8. DATA SECURITY

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, alteration, and destruction. These measures include encryption of data in transit, secure server infrastructure, and access controls limiting access to personal information to authorized personnel.

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

9. THIRD-PARTY LINKS AND SERVICES

The Services may contain links to third-party websites, services, or applications that are not operated or controlled by Convoya. This Policy does not apply to third-party services. We are not responsible for the privacy practices of any third-party services. We encourage you to review the privacy policies of any third-party services you access through the Services.

Our use of information received from Google APIs, if applicable, will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. INTERNATIONAL DATA TRANSFERS

Convoya is based in the United States and the Services are directed to users in the United States. If you access the Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. The data protection and privacy laws of the United States may differ from those of your jurisdiction. By using the Services, you consent to the transfer of your information to the United States.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, and other factors. If we make material changes to this Policy, we will notify you by updating the “Effective Date” at the top of this Policy and, where required by applicable law, by providing additional notice (such as via email or through a notice within the Services). Your continued use of the Services after the effective date of any updated Policy constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

12. DO NOT TRACK SIGNALS

Certain web browsers may transmit “Do Not Track” (DNT) signals. Because there is no common industry standard for interpreting DNT signals, the Services do not currently respond to DNT signals.

13. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Convoya LLC

770 S Green St., Unit 7

Salt Lake City, UT 84102

Email: [email protected]

Website: https://convoya.app