Privacy Policy

This Privacy Policy describes how Conveyly ("we", "us", or "our") handles information when you use our pre-submission document screening service at conveyly.ca (the "Service"). Please read this policy carefully to understand our policies and practices for collecting, processing, and storing your information. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using our Services, you indicate that you understand, accept, and consent to the practices described in this Privacy Policy. This Privacy Policy may change from time to time. Your continued use of the Services after we make changes indicates that you accept and consent to those changes, so please check the Privacy Policy periodically for updates.

Using the Service requires an account. When your firm is given access, we collect and store the email address used to sign in, and the firm name and plan associated with your account. Authentication is handled by Clerk on our behalf (see Section 4).

The primary information processed by Conveyly consists of PDF documents uploaded by users for validation ("Document Data"). Document Data may contain personal information, confidential information, or legally privileged content. Conveyly does not require or request personal information, but such information may be incidentally included in submitted documents.

We also store a record of each screening you run, so that you can review your past screenings within the Service ("Screening History"). A Screening History record contains the file name of the uploaded document, the document type, the date and time of the screening, and the results of each validation check — including the explanatory text describing where in the document an issue was found. Because that explanatory text is drawn from the document itself, it may include personal or client information such as names or legal land descriptions. Screening History does not include the uploaded PDF, which is never stored (see Section 2).

We may automatically collect limited technical information necessary to operate, secure, and improve the Service, including, but not limited to:

• IP address
• browser type and version
• device and system information
• session identifiers and basic log data

This information is used solely for operational, security, and troubleshooting purposes and is not used to identify users.

Documents uploaded to Conveyly are transmitted over encrypted connections to our servers, where they are passed to Anthropic's Claude API for real-time analysis. The uploaded PDF itself is processed in memory only. It is not written to disk, is not stored in a database, and is not retained after the validation session ends. We keep no copy of the document file.

We do, however, retain the results of the screening as part of your Screening History, as described in Section 1. This means that while the document itself is not kept, the validation findings derived from it — including explanatory text quoted or paraphrased from the document — are stored against your account until you delete them or your account is closed. See Section 7 for retention and deletion.

Conveyly does not use uploaded documents to train artificial intelligence models. Documents submitted through the Service are processed solely for the purpose of providing validation results. For firms participating in a Conveyly pilot program, we additionally retain limited screening metadata — firm name, document type, screening date and time, and the number of issues identified — for the purpose of measuring pilot program outcomes. This pilot metadata does not include document content or file names. It is used to prepare pilot summary reports and, in aggregate and anonymized form, may be used in grant applications and marketing materials, as described in your firm's pilot agreement.

We use the limited information we process for the following purposes:

• to operate, deliver, and maintain the Service
• to perform document validation and analysis
• to ensure security and prevent misuse or abuse of the Service
• to diagnose technical issues and improve performance
• to comply with applicable legal obligations

We do not use your Document Data or technical information for advertising or marketing purposes.

Conveyly uses the following third-party services to operate the Service:

Anthropic — Conveyly uses Anthropic's Claude API to perform document analysis. Anthropic's API usage policy prohibits the use of API-submitted data for model training. Document Data submitted via the API is not used to train Anthropic's AI models. For more information, see Anthropic's Privacy Policy.

Vercel — Conveyly is hosted on Vercel's infrastructure, which also provides the database used to store Screening History and the analytics described in Section 6. Vercel provides automatic HTTPS enforcement and enterprise-grade security. For more information, see Vercel's Privacy Policy.

Clerk — Conveyly uses Clerk to manage user accounts, sign-in, and session security. Clerk stores the email address associated with your account, together with the firm name and plan recorded against it. For more information, see Clerk's Privacy Policy.

These service providers may process limited technical data as necessary to provide their services, subject to their own privacy policies and contractual safeguards.

We may disclose information in the following limited circumstances:

• to service providers who assist in operating the Service (as described above)
• where required to comply with applicable law, regulation, legal process, or governmental request
• to protect the rights, property, or safety of Conveyly, our users, or others
• in connection with a business transaction, such as a merger, acquisition, or sale of assets

Conveyly does not use advertising cookies and does not sell or share information with advertisers. The Service uses essential cookies required for basic functionality, including the session cookies that keep you signed in.

We use Vercel Analytics to understand aggregate usage of the Service, such as which pages are visited and overall traffic volume. Vercel Analytics does not use cookies and does not track individual users across sites. It does not receive Document Data or Screening History.

You may control cookies through your browser settings, although disabling essential cookies may affect the functionality of the Service.

Uploaded PDF documents are not retained after processing is complete.

Screening History. The record of each screening — including its results and the explanatory text described in Section 1 — is retained for as long as your account remains active, so that you can return to earlier screenings. We keep the most recent 1,000 screenings per user; older records are discarded automatically as new ones are added.

You can delete this data yourself at any time. The Screening History page lets you delete an individual screening or clear your entire history, and deletion is immediate and permanent. When an account is closed, its Screening History is deleted. You may also contact us at hello@conveyly.ca to request deletion or to ask what information we hold about your account.

Limited technical and log data may be retained for a short period as necessary to:

• maintain system security
• troubleshoot issues
• comply with legal obligations

We retain such data only for as long as reasonably necessary for these purposes.

This means that we may retain Service data for purposes including, without limitation, providing and supporting the Services, account administration, security, fraud prevention, dispute resolution, legal compliance, audit, enforcement of agreements, internal analytics, product improvement, machine learning development and improvement, and restoring access where an account is reactivated.

All Document Data transmitted to and from the Service is encrypted using Transport Layer Security (TLS). We take reasonable technical measures to protect Document Data during processing.

We also implement administrative and technical safeguards designed to protect information against unauthorized access, use, or disclosure. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Conveyly and its representatives will never request your account credentials. You should never share your Conveyly account information with anyone else, including your username and password. We recommend that you use a unique password for your Conveyly account that is not associated with other websites. You are responsible for keeping your password confidential.

The Service is intended for use by legal professionals and is not directed at individuals under the age of 18. We do not knowingly collect information from minors.

The Service is intended for use by legal professionals and others handling sensitive information. Users are responsible for:

• ensuring they have appropriate authority to submit documents
• complying with applicable confidentiality and professional obligations

Information processed through the Service may be transferred to or processed in jurisdictions outside of Canada, including the United States.

These jurisdictions may have data protection laws that differ from those in your location. We take reasonable steps to ensure that:

• transfers are subject to appropriate safeguards
• service providers maintain adequate protections

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Service after any changes constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy, please contact us at hello@conveyly.ca.