Colvio — Privacy Policy

At Colvio ("we", "our", or "us"), a trade name (d/b/a) of Logos Agent Co., Ltd., a company organized under the laws of Japan, your privacy and enterprise data security are our highest priorities. This Privacy Policy describes how we collect, use, and handle your information when you visit our website (colvio.io) or use our applications (including ParcelTrackAction, CrossDiffAction, and future tools).

1. Zero-Customer-Data-Retention Architecture

Our applications, including ParcelTrackAction and CrossDiffAction, are built on a Zero-Data-Retention principle. Business records, recipient names, addresses, and internal metadata stored in your Salesforce or other supported enterprise environment remain exclusively within your environment and are never transmitted to, stored on, or harvested by Colvio servers.

2. Information We Process

• Direct Inquiries & Support: When you email our support team ([email protected]), we receive your email address and communication history solely to resolve your request.
• API Integration (Tracking): When querying carrier tracking APIs (e.g., Shippo, AfterShip), only tracking numbers and carrier codes are sent to third-party endpoints. In Bring-Your-Own-Key (BYOK) configurations, your credentials are encrypted and used exclusively for direct carrier communication.
• Website Telemetry: We may collect anonymized, aggregated traffic data (e.g., page views, country-level geographic location) via Cloudflare to ensure performance and uptime. No intrusive advertising trackers or third-party cookies are used.

3. Data Sharing & Third Parties

We do not sell, rent, or monetize any user data. Data is shared with third-party service providers (e.g., Stripe for payment processing, Cloudflare for edge routing, Shippo/AfterShip for shipping data) only as necessary to fulfill core application functionality.

4. Security & Compliance

We adhere to Salesforce AppExchange Security Review standards. All communications with external APIs occur over TLS 1.3 encryption. We employ industry-standard access controls and edge security.

5. Your Data Rights

You may request access to, correction of, or deletion of any personal information we hold about you (such as support correspondence) by emailing [email protected]. We will respond to verified requests within 30 days. Given our Zero-Data-Retention architecture, the scope of personal information we may hold is limited to direct support communications.

6. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of Japan. Any dispute arising out of or in connection with this Privacy Policy shall be submitted to the exclusive jurisdiction of the Tokyo District Court as the court of first instance.

7. Contact Us

If you have any questions about this Privacy Policy or our security practices, please contact us at [email protected].