Convalesce Free Beta Privacy Policy
Effective Date: 10-05-2026 Last Updated: 10-05-2026
This Privacy Policy describes how Convalesce collects, uses, discloses, retains, and otherwise processes Personal Data when you access or use our website, applications, software, and related services (collectively, the “Service”).
Convalesce is currently an unincorporated project operated by Samarth KaPatel and Vedanshu Joshi (“Convalesce,” “we,” “us,” or “our”).
This Privacy Policy applies primarily when Convalesce determines the purposes and means of processing Personal Data, such as account information, application usage information, product analytics, security information, and communications with us.
When Convalesce processes Personal Data contained in a customer's connected environment on behalf of that customer, that processing is governed by the Convalesce Free Beta Data Processing Addendum (“DPA”).
Use of the Service is also subject to the Convalesce Free Beta Terms of Service (“Terms”).
1. Personal Data We Collect
The Personal Data we collect depends on how you interact with Convalesce.
1.1 Information You Provide
We may collect information you provide directly to us, including:
- name;
- email address;
- organization or company information;
- account information;
- role or professional information;
- information submitted through forms;
- communications with us;
- support requests;
- feedback;
- survey or research responses; and
- other information you choose to provide.
Certain information may be necessary to create an account, authenticate you, or provide particular features of the Service.
1.2 Information Collected Automatically
When you use Convalesce, we may collect technical and usage information such as:
- IP address;
- device and browser information;
- user or account identifiers;
- application activity; and
- information about how you interact with the Service.
1.3 Information From Organizations and Other Sources
If an organization provides or manages your access to Convalesce, we may receive information such as your name, work email address, organization, role, or account permissions.
We may also receive technical or account information from services you choose to connect where necessary to establish or operate an authorized connection.
Personal Data contained within Customer-controlled infrastructure is governed by the DPA where Convalesce processes that information on behalf of the Customer.
2. How We Use Personal Data
We may use Personal Data to:
- create and manage accounts;
- authenticate users;
- provide and operate the Service;
- communicate with you about your account or the Service;
- provide support;
- understand how users interact with Convalesce;
- measure and improve product functionality and user experience;
- troubleshoot technical or usability issues;
- develop and improve features;
- protect accounts and the Service;
- detect and prevent fraud, abuse, or unauthorized access;
- enforce our Terms;
- comply with legal obligations;
- respond to lawful requests; and
- establish, exercise, or defend legal claims.
If we send optional marketing communications, you may opt out using the instructions included in those communications.
3. Legal Bases for Processing
Where applicable law requires us to identify a legal basis for processing Personal Data, we may rely on one or more of the following.
Performance of a Contract
We may process Personal Data where necessary to provide the Service or perform obligations under our Terms.
Legitimate Interests
We may process Personal Data where reasonably necessary for legitimate interests such as:
- operating and securing Convalesce;
- preventing fraud or abuse;
- understanding how the Service is used;
- improving the Service;
- troubleshooting; and
- protecting our legal rights.
We rely on legitimate interests only where those interests are not overridden by applicable rights and interests of the individual.
Consent
Where required, we may process Personal Data based on your consent.
Where processing depends on consent, you may withdraw that consent as permitted by applicable law. Withdrawal does not affect processing that occurred lawfully before withdrawal.
Legal Obligations
We may process Personal Data where necessary to comply with legal obligations applicable to us.
4. How We Disclose Personal Data
We do not sell Personal Data.
We do not rent Personal Data.
We do not use or disclose Personal Data for cross-context behavioral advertising.
We may disclose Personal Data in the circumstances described below.
4.1 Service Providers
We may use service providers that help us operate, host, secure, maintain, or support Convalesce.
These providers may process Personal Data only as reasonably necessary to perform services for us and subject to applicable contractual and legal requirements.
Where a provider processes Customer Personal Data on behalf of Convalesce in our role as a Processor or Subprocessor, the applicable provider information is described in our DPA.
4.2 Legal and Safety Reasons
We may disclose Personal Data where reasonably necessary to:
- comply with applicable law or valid legal process;
- respond to lawful governmental requests;
- investigate fraud, abuse, or security incidents;
- enforce our agreements; or
- protect the rights, property, security, or safety of Convalesce, our users, or others.
4.3 Business Transfers
If Convalesce is incorporated, reorganized, financed, acquired, merged, sold, or transfers some or all of its business or assets, Personal Data may be transferred as part of that transaction, subject to applicable privacy obligations.
4.4 At Your Direction
We may disclose Personal Data where you direct or authorize us to do so.
5. Data Retention
We retain Personal Data that Convalesce controls for its own purposes only for as long as reasonably necessary for the purposes described in this Privacy Policy or as permitted or required by law.
Retention may depend on factors such as:
- whether your account remains active;
- why the information was collected;
- security and fraud-prevention requirements;
- applicable legal obligations;
- dispute resolution; and
- establishment, exercise, or defense of legal claims.
When Personal Data is no longer reasonably necessary, we may delete or de-identify it, subject to applicable legal requirements.
Retention and deletion of Customer Data processed by Convalesce on behalf of a Customer are governed separately by the Terms and DPA.
6. Security
Security responsibilities relating generally to use of the Service are described in our Terms.
Technical and organizational measures applicable when Convalesce processes Customer Personal Data on behalf of a Customer are described in the DPA.
No internet-connected system or method of electronic storage or transmission can be guaranteed to be completely secure.
7. International Processing
Convalesce is operated from the United States.
If you access the Service from another country, Personal Data may be processed in the United States or other countries in which applicable service providers operate.
Where applicable law requires safeguards for international transfers of Personal Data for which Convalesce acts as the Controller, we will use an appropriate legal mechanism.
International-transfer terms applicable to Customer Personal Data processed on behalf of Customers are described in the DPA.
8. Your Privacy Rights
Depending on where you live and applicable law, you may have rights relating to your Personal Data, including the right to:
- request access to Personal Data we maintain about you;
- request correction of inaccurate Personal Data;
- request deletion of Personal Data;
- request restriction of certain processing;
- object to certain processing;
- receive certain Personal Data in a portable format;
- withdraw consent where processing is based on consent;
- opt out of certain processing where required by law; and
- lodge a complaint with an applicable privacy or data-protection authority.
These rights are not absolute and may be subject to exceptions under applicable law.
We do not currently sell Personal Data or share Personal Data for cross-context behavioral advertising.
To exercise an applicable privacy right, contact us using the information in Section 12.
We may need to verify your identity before fulfilling a request.
Where applicable, an authorized agent may submit a request on your behalf. We may require reasonable evidence of the agent's authority.
We will respond within the period required by applicable law and will not unlawfully discriminate against you for exercising an applicable privacy right.
9. Personal Data Controlled by Our
Customers
If your Personal Data is contained within infrastructure connected to Convalesce by one of our Customers, Convalesce generally processes that information on behalf of the Customer rather than for our own purposes.
In those circumstances, the Customer generally determines how that Personal Data is used.
Requests concerning such information should normally be directed to the relevant Customer.
If you contact Convalesce regarding Customer-controlled Personal Data, we may refer your request to the relevant Customer and provide assistance as required under our DPA or applicable law.
More information about Convalesce's obligations when processing Customer Personal Data is available in the DPA.
10. Age Requirements
Eligibility requirements for the Service, including our minimum age requirement, are described in our Terms.
We do not knowingly collect Personal Data directly through Convalesce accounts from individuals who are not eligible to use the Service.
If you believe Personal Data has been provided to us in violation of those requirements, please contact us.
11. Changes to This Privacy Policy
We may update this Privacy Policy as Convalesce develops, our practices change, or legal requirements evolve.
When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.
If a change is material, we may provide additional notice where appropriate or required by law, including through email, the Service, or our website.
Where applicable law requires consent before Personal Data is used for a materially different purpose, we will obtain that consent.
12. Contact Us
Questions about this Privacy Policy, our privacy practices, or requests concerning your Personal Data may be directed to:
Convalesce Operated by Samarth KaPatel and Vedanshu Joshi
Website: https://convalesce.io/ Privacy Contact: privacy@convalesce.io
If your request concerns Personal Data processed through a Convalesce Customer, please identify the applicable organization if known so we can appropriately direct the request.