Privacy Policy

1. What this policy covers

This Privacy Policy explains how Qonva collects, uses and protects information when you use qonva.net and the Qonva application.

2. Information we collect

We collect limited information needed to operate and improve the service. This may include your account email address, authentication identifiers, timestamps, basic product usage events, limited analysis metadata, and privacy-safe derived statistics from real analyses such as signal categories, sample sizes, won/lost frequencies, observed lift, confidence buckets and recommendation outcomes.

3. Uploaded conversation, CRM and marketing data

Qonva is designed to minimize exposure of sensitive business information. In the current product version, uploaded file contents are processed locally in your browser and are not transmitted to or stored on Qonva application servers. This includes raw message text, lead IDs, rep names, creative names, campaign names and other raw contents contained in the files you select for analysis.

For real analyses that include CRM outcomes, Qonva may retain privacy-safe derived statistics used to build your company-specific Sales Brain. These derived records describe aggregate patterns rather than the underlying customer messages or uploaded files.

Because browser-based processing depends on the version of the product you are using, we will update this policy before introducing any feature that requires server-side storage or processing of uploaded raw data.

4. Information stored by our service providers

We use service providers to operate Qonva. Supabase provides authentication and database services and therefore stores account-related information such as your email address and authentication records. Vercel hosts the application and may process standard infrastructure logs. PostHog is used for limited product analytics and receives product-usage metadata rather than the contents of uploaded customer conversations.

These providers may process information in regions outside Malaysia depending on their infrastructure and project configuration. Where cross-border privacy requirements apply, users should consider whether their own use of Qonva and these providers satisfies their legal obligations.

5. How we use information

We use collected information to provide authentication, maintain account security, understand product usage, measure activation and feature adoption, diagnose technical problems, improve Qonva, and communicate with you about the service.

6. Product analytics, advertising measurement and browser storage

Qonva's analytics implementation is designed not to send raw customer conversation text, uploaded CRM records, uploaded marketing records, or other uploaded file contents to PostHog. Autocapture and session recording are disabled in the current implementation. Qonva configures PostHog persistence in local browser storage rather than analytics cookies.

Qonva also uses the Meta Pixel for advertising measurement. Meta may receive browser and device information, page-view events and a registration-completion event when a new user successfully completes the magic-link signup flow and enters the Qonva dashboard. Meta may use cookies or similar technologies according to its own policies. Raw uploaded CSV contents and customer conversation text are not intentionally included in these Meta events.

7. Qonva Learning Network

Qonva may offer an optional Learning Network that combines privacy-safe derived statistics across participating companies to create industry benchmarks. Participation is opt-in. Qonva does not include your raw uploaded files or customer conversation text in this benchmark dataset, and aggregate benchmarks are only displayed when a minimum cohort size is met.

8. Data sharing

We do not sell your personal information or uploaded business data. We may share limited information with infrastructure and service providers that process data on our behalf, when required to comply with law, or when necessary to protect the security and integrity of Qonva.

9. Data retention and account deletion

Account information and limited product-usage metadata may be retained while your account remains active and for a reasonable period afterward for security, operational, legal and analytical purposes. Uploaded file contents are not retained by Qonva application servers in the current version because they are processed in the browser.

During beta, account deletion and data-access requests can be submitted to contact@qonva.net. We will verify the requester before acting on account-level information.

10. Security

We use technical and organizational measures intended to protect information handled by Qonva, including authenticated access to protected application areas and row-level access controls in the application database. No online service can guarantee absolute security. See our Security & Data Architecture page for the current technical design.

11. Your privacy rights

Depending on applicable law, you may have rights to request access to, correction of, deletion of, or information about personal data associated with your Qonva account. Send requests to contact@qonva.net. We may need to verify your identity before completing a request.

Depending on location and context, laws such as Malaysia's Personal Data Protection Act 2010 or the EU/UK GDPR may apply to a user's own processing activities. This policy does not represent a legal determination that every privacy regime applies to Qonva or to every user.

12. Your responsibilities

You are responsible for ensuring that you have the right to use and analyze any data you upload to Qonva, including customer, employee, prospect or third-party information contained in your files.

13. Data processing terms

Organizations that require data-processing terms or additional vendor-review information during beta can contact us. Because Qonva's current beta processes raw uploads in the browser, any future change that introduces server-side raw-data processing would require corresponding updates to our documentation and contractual terms.

14. Changes to this policy

We may update this Privacy Policy as Qonva evolves. Material changes will be reflected on this page with an updated effective date.

15. Contact

For privacy questions or requests, contact us at contact@qonva.net or through our Contact page.