Privacy Policy

Last updated: 3 September 2026

Quvert ("we", "us" or "our") provides operational workflow management and communication hosting infrastructure. This Privacy Policy explains how we collect, use, store and protect personal data when you use our platform, websites and services.

1. Information we collect

We collect the minimum information needed to operate our platform and manage directories on behalf of our users. This may include:

  • Account details such as name, email address and company name.
  • Transactional message metadata such as message type, category and delivery status.
  • Technical logs such as IP addresses, timestamps and error traces for reliability and security.

2. Google OAuth Data & Purpose Isolation

If you choose to connect a Gmail account, we access Google OAuth APIs strictly to process and parse inbound transactional communications within the Quvert platform. We do not use Google OAuth tokens to send, write, or delete emails.

All data fetched via Google OAuth APIs is strictly isolated from our general operations. We do not use Gmail data for advertising personalisation, we do not combine it with data from other Google services, and we do not share it with third parties. Access is limited to the scopes you authorise and can be revoked at any time.

3. Google API User Data & Limited Use Policy Compliance

Quvert's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We strictly collect and use Google user data (specifically via the gmail.readonly scope) solely for the purpose of providing and improving our core application functionality—specifically, automating data extraction from incoming transactional emails to create and update recipient records. This data is processed securely within our backend database and is never:

  • Shared with or transferred to third-party ad networks or data brokers.
  • Used for marketing, retargeting, or advertising purposes.
  • Transferred to third-party AI/ML services for the purpose of training generalized or foundational machine learning models.

4. How we use information

We use the general platform information we collect to:

  • Operate, maintain and improve the Quvert platform workflow engine.
  • Populate user dashboard contact metrics and recipient directories.
  • Provide support, billing and security protections.
  • Comply with legal obligations and enforce our terms.

(Note: Google API data obtained via the gmail.readonly scope is strictly excluded from general business analytics and is solely processed for the specific user-directed record creation specified in Section 3).

5. Data sharing

We do not sell or share user data. Personal information is not sold, rented, traded or otherwise disclosed to third parties for their own marketing or commercial purposes. We only share data with service providers who perform functions on our behalf under strict confidentiality obligations, or when required by law.

6. Data security

We apply industry-standard technical and organisational measures to protect data, including encryption in transit, access controls, audit logging and regular security reviews. Access to production systems is limited to authorised personnel.

7. Data retention

We retain data only for as long as necessary to provide the service, fulfil the purposes described in this policy, meet legal obligations and resolve disputes. When data is no longer needed, we delete or anonymise it.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to the processing of your personal data. To exercise these rights, contact us at the address below.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated effective date.

10. Contact us

If you have questions or concerns about this Privacy Policy or our data practices, please email privacy@quvert.co.za.