Privacy Policy
Last updated: August 5, 2026
Table of Contents
Introduction
Welcome to Convora ("we," "our," or "us"). Convora is a global SaaS platform specializing in WhatsApp Business API automation, conversational marketing, and customer engagement solutions. We are committed to protecting your privacy, ensuring data transparency, and managing your personal information responsibly.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our WhatsApp Business API platform, or interact with any of our related services.
By accessing or using Convora's services, you agree to the terms of this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our services.
Information We Collect
We collect various categories of information to provide, improve, and secure our services:
A. User-Provided Information:
B. Automatically Collected Information:
C. Third-Party and Integration Data:
D. Cookies and Tracking Technologies:
We use cookies and similar technologies to track user interactions and improve our services. See our Cookie Policy for details.
E. Aggregated Data:
We may generate anonymized, de-identified data for platform optimization and reporting that cannot be linked back to any individual.
How We Use Your Information
We use the collected information for the following purposes:
Service Provision & Operations:
Personalization & Enhancement:
User Communications:
Analytics & Performance Monitoring:
Security & Abuse Prevention:
AI & Machine Learning:
We do not use your personally identifiable data, customer records, or subscriber information to train generalized AI or machine learning models. Any AI features within the platform operate solely on your own data to enhance your experience.
Legal Compliance:
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data under the following legal bases:
• **Contract Performance:** Processing necessary to fulfill our service agreement with you • **Consent:** Where you have given explicit consent for specific processing activities • **Legitimate Interests:** Processing necessary for our legitimate business interests, such as platform security, fraud prevention, and service improvement • **Legal Obligations:** Processing required to comply with applicable laws and regulations • **Vital Interest Protection:** Processing necessary to protect your vital interests or those of another person
You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
Data Sharing & Disclosure
We do not sell your personal information. We may share your data in the following circumstances:
Service Providers:
We work with trusted third-party service providers who assist us in operating our platform:
WhatsApp / Meta:
As an official Meta Business Partner and WhatsApp Business API provider, certain data is shared with Meta in accordance with their platform policies and our partnership agreement.
Legal Requirements:
We may disclose information when required by law, court order, subpoena, or government request.
Business Transfers:
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such transfer.
With Your Consent:
We may share information with your explicit consent for purposes not covered by this policy.
Data Security
We implement comprehensive technical and organizational security measures to protect your information:
Technical Safeguards:
Organizational Safeguards:
Payment Security:
We do not store credit card numbers. All payment processing is handled by PCI-DSS compliant third-party providers (Stripe).
Your Responsibility:
You are responsible for maintaining strong passwords, enabling two-factor authentication, avoiding credential sharing, and reporting any suspicious account activity promptly.
While we strive to protect your information using industry-standard measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
Data Retention
We retain your personal information for as long as your account remains active or as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements.
• **Active Accounts:** Data is retained throughout the duration of your account and service usage • **Account Deletion:** Upon request, your data will be deleted within 30 days, subject to backup retention schedules • **Legal Requirements:** Certain data may be retained longer as required by tax, accounting, or legal regulations • **Anonymized Data:** Aggregated, anonymized data may be retained indefinitely for analytics purposes
Your Rights
You have the following rights regarding your personal information:
Access & Portability:
Correction:
Deletion:
Restriction & Objection:
Consent Withdrawal:
To exercise these rights, contact us at support@convora.io or through your account settings.
California Resident Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
• **Right to Know:** Request details about the categories and specific pieces of personal information we collect • **Right to Delete:** Request deletion of your personal information • **Right to Opt-Out:** We do not sell personal information; therefore, no opt-out is necessary • **Right to Correct:** Request correction of inaccurate personal information • **Right to Limit Use of Sensitive Information:** Request limitation on how we use sensitive personal data • **Non-Discrimination:** We will not discriminate against you for exercising any of your privacy rights
To exercise these rights, contact us at support@convora.io.
International Data Transfers
Convora operates globally from India and serves users worldwide. Your information may be transferred to and processed in countries other than your own, including the United States, European Union, and other jurisdictions.
Data Transfer Safeguards:
Regional Compliance:
We ensure that all international transfers comply with applicable data protection laws and provide adequate protection for your information. By using our services, you consent to the transfer of your data to these jurisdictions.
Third-Party Services & Certifications
Our platform integrates with third-party services that operate under their own privacy policies. These include:
• **Meta/WhatsApp** — WhatsApp Business API and messaging services • **Stripe** — Payment processing and subscription management • **Google** — Analytics and authentication services • **E-commerce platforms** — Shopify, WooCommerce integrations
We encourage you to review the privacy policies of these third-party services.
Third-Party Security Standards:
Our key partners maintain industry-standard security certifications including:
We conduct regular vendor assessments through security reviews and data processing agreements to ensure ongoing compliance.
Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at support@convora.io and we will promptly delete such information.
Account Deletion
You can delete your Convora account at any time through your account settings or by contacting our support team.
Upon account deletion: • Your personal data will be removed from our active systems within 30 days • Backup copies may take up to an additional 30 days to fully purge • Data required for legal compliance (tax records, transaction history) may be retained as required by law • Anonymized, aggregated data that cannot identify you may be retained for analytics
To request account deletion, contact support@convora.io or use the account settings in your dashboard.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
We will notify you of material changes by: • Posting the updated policy on our website with a revised "Last Updated" date • Sending an email notification to your registered email address • Displaying a prominent notice in your dashboard
Your continued use of our services after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Support: support@convora.io
Response Time:
We aim to respond to all privacy-related inquiries within 48 hours.
For urgent privacy concerns or data breach reports, please include "URGENT" in your email subject line for expedited review.