Conveyor Home

Privacy Policy

Last updated 28 July 2026

What stays on your machine

• All email content — subjects, bodies, attachments, addresses. Conveyor connects to your mailboxes directly over IMAP from your own computer.
• Mailbox credentials — app passwords and OAuth refresh tokens, encrypted at rest using a key held in your operating system's credential store.
• Your pipeline data — the local cache, settings, and export files, all in Conveyor's data folder on your machine.

There is no cloud sync, no server-side mailbox access, and no telemetry of what you read or do in the app.

What the licensing service receives

When the app activates or re-checks a licence, it sends exactly:

• Your licence key, which contains the email address it was issued to, its tier, seat count, and expiry. We store a hash of the key as its identifier.
• A machine fingerprint — a one-way hash built from a random per-install identifier plus coarse facts about the device (operating system, architecture, hostname). It lets us count seats; it is not reversible into your identity, and it is not an advertising identifier.
• The app version, so support can tell which build you are on.

We keep, per licence: the key hash, the machine fingerprints using its seats, the licence status, and activation timestamps — plus, for each machine, a few salted, truncated tokens derived from the networks it activates from (four bytes each, one-way, not an address and not reversible into one). Those exist only so an unusual spread of networks on one seat can be flagged to us as possible key-sharing; they are never used to advertise to you or to track where you are. Standard Cloudflare request logs (including full IP addresses) apply to our service as they would to any website, and are retained only briefly.

The website and Discord

If you sign in to your account page with Discord, we receive your Discord user ID, username, and avatar, and store your ID and username so we can link your licence to your Discord account for support and role assignment. When you link a key to your account, we also store the key itself (not only its hash) on that link, so your account page can show the key back to you. A session cookie keeps you signed in; it is strictly necessary and there is no advertising or analytics tracking on this site. If you use the support server, Discord's own privacy policy governs what happens there.

Updates

The app checks our update feed for new versions. That is an ordinary HTTPS request for a small manifest file — it carries no licence key and no personal data.

Who else sees your data

We do not sell your data and we do not share it for advertising. The only third parties involved are the infrastructure providers that run the service: Cloudflare (hosting the licensing service, website, and update files) and Discord (if you sign in or use the support server). Payments, where taken, are handled by the payment provider — we never see your card details.

Your rights

Because we hold so little, most requests are quick: you can ask what is stored against your licence, ask us to correct it, or ask us to delete it. Because the licence key is a signed token, simply deleting the record would not stop the app — a still-installed copy would just re-create it on its next check. So an erasure request for a live licence is honoured by revoking it: that stops the app at its next check and leaves only a minimal record that the licence was revoked, which we then delete once the licence has expired. We will confirm before doing it. Contact us in the support server. If you are in the UK or EU, you also have the right to complain to your data protection authority.

Children

Conveyor is a business tool and is not directed at children under 13 (or the minimum age in your country).

Changes

If this policy changes materially, we will note it in the release notes and update the date above.