Security and data
How Convena handles your data
Postgres on Render, separated per workspace (every query filtered by workspace). Card details go straight to Stripe.
What Convena holds
- Organizer team accounts
- Attendee names, email addresses and answers to the organizer's questions
- Ticket, payment and refund amounts with Stripe's payment reference (never card details)
- Check-in times, consent to future-event emails, unsubscribes and emails sent
- Feedback survey answers
- Event descriptions sent to the AI provider for drafting (never attendee details)
How long it’s kept, and how to export or delete it
Attendee records of events that ended longer ago than the organizer's setting (6 months to 5 years; 2 years by default) are deleted automatically; /try drafts are deleted after 24 hours. Organizers can export everything or delete one person or the whole workspace at any time.
The full detail is in Convena’s data export and deletion policy.
Who processes it
Service providers (subprocessors), each on our instructions and only for the purpose shown:
- Render: hosting, databases and backups, in the United States.
- Stripe: Convena subscriptions, and ticket payments on the organizer's own connected Stripe account (card details go to Stripe, never to us).
- Resend: sending account emails and the attendee emails organizers approve.
- Anthropic: drafting event pages, agendas and emails from the organizer's description (attendee details are never sent).
- Cloudflare: bot checks on public registration forms and the try page (Turnstile), when switched on.
Questions and security reports
Convena is run by New Odyssey. To ask what we hold about you, to have it exported or deleted, or to report a security problem, email clio@new-odyssey.com. The privacy policy covers the rest.