The CONWE Privacy Policy

Effective date: 22 October 2026

This policy explains how The CONWE (the website theconwe.com and The CONWE app; "we", "us" or "the service") collects, uses, shares and protects your personal data, and how you can manage it. By using the service you confirm that you have read and understood this policy.

1. Data we collect

Category	What and where from
Account	The email address, display name, username and password you give when you sign up (passwords are stored only in a form that cannot be reversed).
Member details	Your name, mobile number, city, occupation or industry and birth year, if you choose to provide them.
Properties and photos	Property details, photos, videos and documents you list or manage. Location and other metadata are removed from photos on upload.
Identity and authority	Documents and photos you submit to prove rights to a property or a company.
Conversations	Messages you exchange with other users in the service.
Service requests and work reports	Needs you post, jobs you take, work photos and completion reports.
Transactions and receipts	Payments, accounts and receipt photos recorded by you or people you authorise.
Subscriptions and payments	Your plan and its end date; the purchase reference and status of a Google Play or App Store subscription; the amount, date and transfer reference when a bank transfer activates a plan. We never receive or store your card number.
Personality assessment	Your answers to the 50 questions and the result, visible only to you.
Promoter programme	Details you give when applying as a promoter, and the number and dates of people who sign up through your link.
Location	Only when you tap “Use my location”, to show nearby services and listings; it is not stored with your account.
Usage records	Records of sign-ins and important actions, error logs, and IP addresses counted briefly to prevent abuse.

2. How we use data

To provide, maintain and improve the service — for example showing listings, matching requests, producing owner monthly reports and activating plans.
To verify your identity, keep accounts secure and prevent fraud, abuse and unauthorised access.
To process payments and subscriptions and tell you about expiry, renewal or payment problems.
To answer your questions and support requests.
To meet legal obligations and handle disputes.

We do not sell your personal data and do not use it for third-party advertising.

3. Who can see your data

People you authorise: for example members of your company, property managers you appoint, people you share a monthly report with, and users you talk to. Each item is available only to people with permission.
Public content: property details and photos you choose to publish can be seen by anyone; private contact details are not shown publicly.
Service providers: hosting and storage (Cloudflare), maps (Google Maps, OpenStreetMap), email delivery, and app store payments (Google Play, Apple App Store). They may process data only to provide their service.
Legal requirements: when required by law, a court or an authority, or to protect the safety of users and the public.

4. Storage and transfers

The service runs on Cloudflare’s global network, so data may be processed and stored outside Cambodia. We take reasonable measures to protect data in transit and at rest.

5. How long we keep data

Account and member details: until you delete your account. After a deletion request you have 7 days to cancel; the account is then deleted and de-identified.
Properties, photos and documents: until you or an authorised person deletes them, or the account is deleted; deleted files are removed from storage.
Conversations: until the account is deleted. Messages you already sent remain in the other person’s conversation without showing who you are.
Transactions, receipts and payment records: for the period required by law and accounting rules; information that directly identifies you is removed when the account is deleted.
Monthly report share links: stop working automatically after 7, 14 or 30 days, as set.
Security and anti-abuse records: only as long as needed; IP counts used to limit sign-in attempts are not kept long term.

6. Your rights

Access and download: signed in, open “My account” to download your data.
Correction: change your details in “My account” or on the relevant page.
Deletion: request account deletion in “My account”, or write to support@theconwe.com.
Withdrawing consent: you can stop providing optional details or cancel a subscription at any time.

For help, contact us from the email address you signed up with; to protect your account we may need to confirm your identity.

7. Security

We protect data with encrypted connections, password hashing, access controls, sign-in attempt limits and activity records. No system is completely secure; if an incident affects your rights we will notify you as the law requires.

8. Children

The service is only for people aged 18 or over. If we learn that we have collected data from someone under 18, we will delete it.

9. Cookies and browser storage

We use only the cookie needed to keep you signed in. Preferences such as language, theme and favourites are kept in your browser. Site statistics use Cloudflare Web Analytics, which does not use tracking cookies.

10. Changes to this policy

We may update this policy. Updates are published on this page with a new effective date; for significant changes we will tell you on the website or by email.

11. Contact us

For any question about this policy or your data, write to support@theconwe.com.

Data flows in the running system

Hosting and storage: the site, database and files are hosted on Cloudflare (Workers, D1, R2). Cloudflare is a global network, so data may be processed and stored outside Cambodia.
Address search: text you type in the address field is sent to OpenStreetMap Nominatim to find coordinates.
Receipt reading: receipt photos you upload are sent to Cloudflare Workers AI to read the amount; a person must check the result.
Shared reports: when a manager shares a monthly report, only signed-in people allowed to see that report (the linked owner or authorised staff of their company) can open it and its attachments through the link; sharing can be stopped at any time.
Export and deletion: signed in, open “My account” to download your data and to request account deletion; you can cancel for 7 days, after which the account is deleted automatically.
Maps: maps on property pages are embedded from Google Maps; when a map loads, your browser connects to Google, which receives connection details such as your IP address.
Site statistics: Cloudflare Web Analytics counts page views and loading speed without tracking cookies.
Email: sign-up and password-recovery emails are sent through Cloudflare Email Service (or Resend), which receives the recipient address and the message.
Shared links: monthly report share links stop working after 7, 14 or 30 days as the manager chooses (30 by default).
Security: to stop repeated sign-in attempts, your IP address is counted for a short time (not stored); the source of sign-up and recovery requests is stored only as an irreversible hash.
Browser storage: your language, favourites and install-prompt choice are kept in your browser only and are not sent to our servers.
Membership payments: when a transfer activates membership we record the amount, date and transfer reference; on account deletion the reference is removed and the amount and date are kept as financial records.

Member details and the full assessment reading

The CONWE provides full personality assessment interpretations to members with complete member profiles. The required fields are full name, mobile number, city of residence, occupation or industry, and birth year. Your name identifies you in the member profile; your mobile number is member contact information; city, occupation or industry, and birth year form part of your basic member profile. Birth year is also checked against the allowed year range. All five fields are used to determine profile completeness and access to the full interpretation. These fields are not inputs to personality score calculations, and entering a mobile number does not verify identity. You may decline to provide or remove these details. While required fields are incomplete, the full interpretation is unavailable; signed-in users can still view basic results. This membership condition does not mean the assessment can diagnose a condition, predict job performance, or determine suitability for employment.

Data each feature uses

When you use the personality assessment, we store your responses, scores, assessment version, completion time, and sharing choice to generate insights, let you review them, and share them only as you choose.
When you create a member profile, we collect your name, phone number, city of residence, occupation or industry, and birth year to provide membership features and determine whether the information needed for a full interpretation is complete.
When you use receipt recognition, we process the receipt image and recognized merchant, amount, date, receipt number, currency, and items, and record recognition usage to provide results, limit request frequency, and control service costs.
When you use shop and delivery features, we process merchant and product data, the buyer's name and phone number, delivery address, order details, delivery status, and inventory records to fulfil orders, arrange delivery, manage stock, and prepare reports.
When you make a charity pledge, we store the pledged quantity, notes, contact phone number, name-display choice, delivery status, and photo evidence to match needs, coordinate contact and delivery, and verify fulfilment.
When you use prediction features, we store your free-points balance, daily claims, outcome holdings, trades, and settlements to operate the prediction market and calculate points; points cannot be purchased, withdrawn, or exchanged for cash.
When you use BSM service matching, we store case outcomes, resolution status, outcome notes, the recorder, timestamps, follow-up case relationships, and professional performance statistics to preserve acceptance results, continue unresolved needs, and improve recommendations.