Privacy policy
Version 1.5 · Last updated: April 2026
1. Information we collect
We collect the following categories of information:
Account information: Name, email address, company name, phone number, and other information you provide when creating an account or updating your profile.
Payment information: Card, bank account, and billing details are processed by our payment processor, Stripe. We do not store your full payment credentials on our servers.
Usage data: Information about how you use the Service, including searches performed, communications sent (SMS, calls, emails), features used, and interactions with the platform.
Property and contact data: When you use our prospecting tools, the Service accesses property records and contact information from public records databases and licensed third-party data providers.
Device and technical data: IP address, browser type, operating system, device identifiers, and similar technical information collected automatically when you access the Service.
Compliance and verification materials: Documents and business information you provide for A2P registration, carrier vetting, or identity verification, including IRS EIN letters, extracted document fields, and related registration materials.
1.5 Lead magnet and free tool data
When you access our free tools and lead magnets (such as the Contract Builder, Creative Finance Analyzer, and other downloadable resources), we collect the following information:
Contact information: Name, email address, and phone number provided through our opt-in forms.
How we use this data: We use the information you provide to (a) deliver the requested free tool or resource, (b) send you the resource via email, and (c) send marketing communications if you have separately consented to receive them (e.g., by opting in to SMS updates).
Retention: Lead magnet submission data is retained for as long as you remain on our mailing list or have an active account. If you unsubscribe from all communications and do not have an active account, your lead magnet data is deleted within ninety (90) days of your unsubscribe request.
2. How we use your information
We use your information to: (a) provide, maintain, and improve the Service; (b) process transactions and send related information; (c) send service-related communications, including account notifications and security alerts; (d) respond to your requests and support inquiries; (e) monitor and analyze usage trends to improve the Service; (f) enforce our Terms of Service and protect against fraud or abuse; (g) complete business verification, A2P registration, and related compliance workflows; (h) generate or host registration-related materials such as policy pages or business identity pages; (i) comply with legal obligations.
We do not use your information to send unsolicited marketing communications unless you have opted in to receive them.
3. Data sharing and third-party services
We share your information with the following categories of service providers:
Payment processing: Stripe processes your payment information. Their privacy policy governs their use of your data.
Communications infrastructure: Twilio and related providers facilitate SMS, voice calls, and related communication features. Message content and metadata are processed through their systems.
Registration and vetting providers: When you use SMS registration or related compliance features, we may share business information, uploaded verification documents, extracted document data, and generated registration materials with Twilio, The Campaign Registry, mobile carriers, vetting providers, and related service providers to complete, support, or maintain your registration.
Cloud infrastructure: We use cloud hosting providers to store and process data.
AI and automated processing: Certain features of the Service use third-party artificial intelligence and machine learning services to generate content, analyze data, and provide automated assistance. When you use these features, your inputs (such as property data, message content, or uploaded documents) are processed by these services to generate responses. We do not use your data to train third-party AI models.
Analytics and session recording: We use analytics tools to understand how the Service is used. On certain pages, we may record anonymized user sessions (such as clicks and page navigation) to improve the user experience. Session recordings do not capture passwords or payment information.
We do not sell your personal information to third parties. We do not sell, rent, or share your phone number or SMS opt-in/opt-out information with third parties for their marketing purposes. We may disclose your information if required by law, subpoena, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
4. Cold outreach and prospecting data
The Service provides access to property records and contact information sourced from public records databases and licensed third-party data providers. This data is provided “as-is” and we do not guarantee its accuracy, completeness, or currency.
You are responsible for: (a) verifying the accuracy of data before using it for outreach; (b) ensuring you have the legal right to contact any individual; (c) complying with all applicable privacy and telemarketing laws; (d) maintaining appropriate records of your data usage and communications.
When customers use communication features, they decide who is contacted, what is sent, and when communications are sent. Covent processes communication data as a technology provider acting on customer instructions, not as the independent sender of customer campaigns.
5. SMS, calling, and communication data
When you use the Service’s communication features:
SMS messages: Message content and delivery status are logged for your compliance records. Logs are retained per applicable regulatory requirements.
Voice calls: Call metadata (duration, time, participants) is logged. If you enable call recording, recordings are stored and accessible through your account. You are responsible for disclosing call recording to participants as required by applicable state and federal law.
Email: Email content and delivery metrics are logged for your records.
Communication logs are retained for a minimum of five (5) years to support TCPA compliance record-keeping requirements.
Message frequency and rates: Message frequency varies based on your account activity and preferences. Message and data rates may apply.
Opt-out and support: You may opt out of text messages at any time by replying STOP to any message. For help, reply HELP or contact help@getcovent.com.
Carrier disclaimer: Carriers are not liable for delayed or undelivered messages.
6. Data retention
Active accounts: We retain your data for as long as your account is active and as needed to provide the Service.
After termination: Upon account termination, your data is retained for ninety (90) days to allow for reactivation or data export. After this period, data is permanently deleted.
Communication logs: Retained for a minimum of five (5) years per regulatory requirements.
Payment records: Retained as required by tax and financial reporting obligations.
Aggregated data: We may retain anonymized, aggregated data that cannot be used to identify you for analytical purposes indefinitely.
7. Security
We implement industry-standard security measures to protect your data, including: encryption in transit (TLS) and at rest (AES-256), access controls and authentication, regular security assessments, and employee access restrictions.
No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
8. Your rights (CCPA and state privacy laws)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
Right to delete: You may request deletion of your personal information, subject to certain exceptions.
Right to opt-out of sale: We do not sell personal information. If this changes, we will provide a “Do Not Sell My Personal Information” link.
Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, contact us at help@getcovent.com. We will respond to verifiable requests within forty-five (45) days.
Residents of other states with privacy laws (Virginia, Colorado, Connecticut, Utah, and others) may have similar rights. Contact us to submit a request.
9. Cookies
We use the following types of cookies:
Essential cookies: Required for authentication, session management, and core functionality. These cannot be disabled.
Analytics cookies: Help us understand how the Service is used. You may disable these through your browser settings.
We do not use third-party advertising cookies or tracking pixels for targeted advertising.
You can manage your cookie preferences via the banner shown on your first visit.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice in the Service at least thirty (30) days before the changes take effect.
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy. If you do not agree to the changes, you should discontinue use of the Service.
11. International users
This service is operated in and intended for users in the United States. If you access the service from outside the US, you do so at your own risk and are responsible for compliance with local laws. We do not knowingly collect data from individuals in the European Economic Area.
12. Contact
Covent LLC, a Wyoming limited liability company.
For privacy-related questions or requests, contact us at: help@getcovent.com