Legal

Privacy Policy

Effective: 23 September 2026

Your sensitive uploaded business data stays in your browser.

In the current version of Qonva, the contents of CSV files you upload—such as sales conversations, CRM records and marketing attribution data—are processed locally in your browser for analysis. Qonva does not upload or store the contents of those files on our application servers.

1. What this policy covers

This Privacy Policy explains how Qonva collects, uses and protects information when you use qonva.net and the Qonva application.

2. Information we collect

We collect limited information needed to operate and improve the service. This may include your account email address, authentication identifiers, timestamps, basic product usage events, limited analysis metadata, and privacy-safe derived statistics from real analyses such as signal categories, sample sizes, won/lost frequencies, observed lift, confidence buckets and recommendation outcomes.

3. Uploaded conversation, CRM and marketing data

Qonva is designed to minimize exposure of sensitive business information. In the current product version, uploaded file contents are processed locally in your browser and are not transmitted to or stored on Qonva application servers. This includes raw message text, lead IDs, rep names, creative names, campaign names and other raw contents contained in the files you select for analysis.

For real analyses that include CRM outcomes, Qonva may retain privacy-safe derived statistics used to build your company-specific Sales Brain. These derived records describe aggregate patterns rather than the underlying customer messages or uploaded files.

Because browser-based processing depends on the version of the product you are using, we will update this policy before introducing any feature that requires server-side storage or processing of uploaded raw data.

4. Information stored by our service providers

We use service providers to operate Qonva. Supabase provides authentication and database services and therefore stores account-related information such as your email address and authentication records. Vercel hosts the application and may process standard infrastructure logs. PostHog is used for product analytics and receives product-usage metadata rather than the contents of uploaded customer conversations.

5. How we use information

We use collected information to provide authentication, maintain account security, understand product usage, measure activation and feature adoption, diagnose technical problems, improve Qonva, and communicate with you about the service.

6. What we do not intend to collect through analytics

Qonva's analytics implementation is designed not to send raw customer conversation text, uploaded CRM records, uploaded marketing records, or other uploaded file contents to PostHog. Session recording is disabled in the current implementation.

7. Qonva Learning Network

Qonva may offer an optional Learning Network that combines privacy-safe derived statistics across participating companies to create industry benchmarks. Participation is opt-in. Qonva does not include your raw uploaded files or customer conversation text in this benchmark dataset, and aggregate benchmarks are only displayed when a minimum cohort size is met.

8. Data sharing

We do not sell your personal information or uploaded business data. We may share limited information with infrastructure and service providers that process data on our behalf, when required to comply with law, or when necessary to protect the security and integrity of Qonva.

9. Data retention

Account information and limited product-usage metadata may be retained while your account remains active and for a reasonable period afterward for security, operational, legal and analytical purposes. Uploaded file contents are not retained by Qonva application servers in the current version because they are processed in the browser.

10. Security

We use technical and organizational measures intended to protect information handled by Qonva, including authenticated access to protected application areas and row-level access controls in the application database. No online service can guarantee absolute security.

11. Your responsibilities

You are responsible for ensuring that you have the right to use and analyze any data you upload to Qonva, including customer, employee, prospect or third-party information contained in your files.

12. Changes to this policy

We may update this Privacy Policy as Qonva evolves. Material changes will be reflected on this page with an updated effective date.

13. Contact

For privacy questions or requests, contact us at contact@qonva.net or through our Contact page.