Cookies Policy

Effective date: 1 July 2025 · Last updated: 1 July 2025

This policy explains how Konvas, operated by Wits Africa Limited, uses cookies and similar browser storage on the Konvas web application. We keep our use of cookies minimal — strictly what is necessary to run a secure, authenticated service.

1. What are cookies?

Cookies are small text files placed on your device when you visit a website or use a web application. They allow the service to remember information about your visit — such as your login session or preferences — so you don't have to re-enter it every time. Some cookies are essential for the service to function; others are used to improve performance or the user experience.

2. How Konvas uses cookies

Konvas uses cookies and similar browser storage mechanisms (such as localStorage and sessionStorage) strictly to operate the service. We do not use advertising cookies, third-party tracking cookies, or behavioural profiling cookies. Our use of cookies is limited to: maintaining your authenticated session; storing your workspace preferences and UI state; and enabling secure cross-request authentication tokens.

3. Essential cookies

Essential cookies are required for Konvas to function. Without them, you cannot sign in or use the platform. These include: session authentication tokens issued by Supabase (our authentication and database provider); CSRF protection tokens; and short-lived security tokens used during the OAuth authorisation flow when connecting channels such as WhatsApp, Instagram, or TikTok. These cookies are first-party, session-scoped or short-lived, and cannot be disabled without breaking core functionality.

4. Functional storage (localStorage / sessionStorage)

In addition to cookies, Konvas uses browser localStorage and sessionStorage to persist workspace UI state — such as your selected inbox filters, sidebar collapse state, and draft message content. This data never leaves your device and is not transmitted to our servers.

5. Third-party cookies

Konvas does not set third-party cookies. However, when you connect a channel such as WhatsApp (via Meta) or TikTok, the authorisation flow briefly redirects you to that platform's own login page. During that redirect, the third-party platform may set its own cookies on your device. Those cookies are governed by the respective platform's own cookie and privacy policies — Meta's Cookie Policy and TikTok's Privacy Policy — not by this document.

6. Analytics

Konvas does not currently use any third-party analytics or tracking tools (such as Google Analytics or Mixpanel) that would set cookies. Any future use of analytics will be disclosed in an update to this policy and, where required by law, will be subject to your consent.

7. Managing cookies

You can control or delete cookies through your browser settings. Most browsers allow you to view, block, or delete cookies at any time. Note that blocking essential cookies will prevent you from signing in to Konvas. Browser settings for managing cookies are typically found under Settings → Privacy or Settings → Security. Clearing your browser's cookies will sign you out of any active Konvas session.

8. Changes to this policy

We may update this Cookies Policy from time to time to reflect changes in the technology we use or applicable regulations. When we make material changes, we will update the "Last updated" date at the top of this page. The current version is always available at https://konvas.app/cookies.

9. Contact

If you have any questions about our use of cookies, contact: privacy@witsafrica.co.ke. Wits Africa Limited, Nairobi, Kenya. We aim to respond within 5 business days.