Privacy Policy

1Who we are

Celvo ("we") runs the website and the application. For any question about this policy or your data, write to us at hello@celvo-tech.com.

2Your company's data, and ours

We handle two kinds of data:

• Company data: everything a subscribing company and its users enter, such as suppliers, items, projects, requisitions, quotations, purchase orders, deliveries, payments, contracts and memos, users' names and roles, the logo and signature blocks. The company decides what goes in; we process it on the company's behalf to provide the service, and only on its instructions.
• Account and service data: what we keep for our own purposes, as the rest of this policy describes.

If your company invited you to Celvo, its administrators manage your login and its data, so take questions about it to them first.

3What we collect

• When you sign up for the free trial: your name, your company's name, your preferred language, your e-mail address, your password, whether you asked for sample data, and when you accepted the Terms of Service and this policy. Passwords are stored only in one-way hashed form by our sign-in provider; we cannot read them.
• When your company invites you: your e-mail address and the role it gives you.
• While you use Celvo: what you enter, as above, and the history of changes (who changed a record and when), for your company to see.
• Error reports: when the app meets an error or cannot save, it sends us a technical report: the error message, the screen, the app version, the browser type, your company's id and your role. Before sending, the app masks quoted text, e-mail addresses and numbers of four or more digits. A report never holds document contents, prices, or the names of suppliers or people.
• Feedback you send us from the app, with your role and the screen you sent it from.
• Subscription and billing records: the plan, the number of users, the dates, and the invoices we issue.
• The trial record: to allow one free trial per e-mail address, we keep a one-way hash of the address, not the address itself.
• Technical logs: our hosting and database providers record IP addresses and request details in their logs, to run and protect the service.

4What we don't do

• We do not sell your data, use it for advertising, or share it with anyone for marketing.
• There are no analytics, tracking scripts or advertising cookies on the website or in the app.
• We do not read your company's records. Our staff see counts only (such as the number of users and documents), the company's name, and a trial owner's name and e-mail address, to manage subscriptions. We open your company's records only if you ask us to investigate a problem and allow it; any such access is read-only and recorded.

5How we use it

• To provide the service: signing in, running your company's workspace, and sending account e-mails (confirming your address, resetting your password, changing your e-mail).
• To find and fix errors.
• To manage trials and subscriptions, and to invoice.
• To answer you, and to follow up with a trial's owner about their trial.
• To protect the service and meet our legal obligations.

6Cookies and browser storage

Celvo does not use cookies. The app keeps your sign-in in your browser until you close the window, or until you sign out if you asked to be remembered, and a few preferences, such as the interface language, digit style, document language and some view choices.

The website and the app load their fonts from Google Fonts, so your browser contacts Google's servers, which receive your IP address.

7Where your data is kept, and who helps us

• Supabase: the database and sign-in, in Frankfurt, Germany (EU).
• Cloudflare: hosting for the website and the app, and domain names, on its global network.
• Resend: sending account e-mails, from the EU (Ireland).
• Google Fonts: fonts.

Each processes data only to provide its service to us, under its own terms. Your data is therefore kept outside Egypt.

8How we protect it

• Each company's data is separated inside the database itself: every record carries its company's id, and the database refuses any access to it from another company.
• Connections are encrypted, passwords are one-way hashed, and every change is recorded.
• Our staff's access is limited as described above.
• The database is backed up every day, and backups are kept for 7 days.

9How long we keep it

• Company data: for as long as the company has an account. When a trial or subscription ends, the company becomes read-only and nothing is deleted, so it can still view, print and export its data.
• If we delete a company at its request, all its records, its users' logins, its change history, error reports and feedback are deleted. Backups that hold it expire within 7 days.
• We keep invoices in our financial records for as long as the law requires, and the hashed trial e-mail permanently, so a trial cannot be repeated.
• Error reports are deleted automatically after 90 days.

10Your choices and rights

• A company's owner and administrators can download a full backup of its data at any time, also after the subscription ends.
• Administrators can edit users' details and remove users.
• To ask to see, correct or delete your data: if your company invited you, contact its administrators; otherwise write to us at hello@celvo-tech.com, and we will answer within 30 days.

11Children

Celvo is a service for companies and is not meant for anyone under 18.

12Changes to this policy

We may change this policy and will publish the new version here with its date. If a change is material, we will e-mail company owners before it takes effect.

13Contact

For any question or request about your data, write to us at hello@celvo-tech.com.