Privacy Policy
At Convora AI ("we", "our", "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI chatbot platform at convora.ai and any related services.
1. Information We Collect
We collect information in the following ways:
Information you provide
- Account registration details (name, email, password)
- Workspace configuration and settings
- Documents and content you upload for AI training
- Chat messages and conversations with the AI assistant
- Payment information (processed by third-party providers)
Information collected automatically
- IP address and approximate geolocation
- Browser type, device information, and operating system
- Pages visited and interaction patterns
- Chat widget usage data (messages sent, sessions started)
- Cookies and similar tracking technologies (functional only)
Visitor information
When end-users interact with a Convora widget embedded on your website, we may collect their IP address, browser information, chat messages, and any information they voluntarily provide (such as name or email through lead capture forms).
2. How We Use Your Information
We use the collected information for the following purposes:
- Provide and maintain the service — powering AI responses, managing workspaces, and delivering chat functionality
- Analytics and insights — generating conversation analytics, visitor tracking, and usage reports for workspace owners
- Improve our product — understanding usage patterns to enhance features and performance
- Communication — sending service updates, security alerts, and support responses
- Security — detecting and preventing fraud, abuse, and unauthorized access
- Legal compliance — meeting regulatory requirements and responding to legal requests
3. Data Storage & Security
We take data security seriously:
- Encryption in transit — all data is transmitted over TLS 1.3
- Encryption at rest — stored data is encrypted using AES-256
- Tenant isolation — each workspace's data is logically isolated; no cross-tenant data access is possible
- Access controls — strict role-based access controls and JWT authentication
- Infrastructure — hosted on secure cloud infrastructure with regular security updates
4. Third-Party Services
We use the following third-party services to provide our platform:
- Qdrant — vector database for storing and retrieving document embeddings used in AI responses
- Groq — AI inference provider for generating fast, accurate chat responses
- Google Gemini — AI model provider for advanced language understanding and generation
These providers process data solely to deliver our service. Your data is not used to train their models. We have data processing agreements in place with each provider.
5. Data Retention
- Your data is retained for as long as your account is active
- Upon account cancellation, all associated data (documents, conversations, embeddings, and analytics) is permanently deleted within 30 days
- We may retain anonymized, aggregated data for statistical purposes
- Backup copies are purged according to our backup rotation schedule (maximum 30 days)
6. Your Rights
You have the following rights regarding your data:
- Access — request a copy of all data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your data at any time
- Export — export your data in a machine-readable format
- Restriction — request restriction of processing in certain circumstances
- Objection — object to processing based on legitimate interests
To exercise any of these rights, contact us at hello@convora.ai. We will respond within 30 days.
7. Cookies
We use minimal, functional cookies only:
- Session cookies — to maintain your login state
- Preference cookies — to remember your theme and language settings
- Widget cookies — to maintain chat session continuity for end-users
We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required as we only use strictly necessary cookies.
8. Children's Privacy
Convora is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at hello@convora.ai.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify registered users via email for significant changes
- Provide a summary of changes on our website
Continued use of the service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us:
- Email: hello@convora.ai
- Website: convora.ai
- Location: India