Privacy Policy

Last updated: June 9, 2026

This Privacy Policy explains how Convolyn ("Convolyn," "we," "us," or "our") collects, uses, and protects information in connection with our AI chatbot platform and related services (the "Service"). By using the Service, you agree to the practices described in this Policy.

If you do not agree with this Policy, please do not use the Service.

1. Who this Policy applies to

This Policy applies to two groups of people:

Customers — businesses and individuals who create an account with Convolyn to build, configure, and deploy chatbots.
End Users / Visitors — people who interact with a chatbot that a Customer has embedded on their website.

If you are a Visitor chatting with a Convolyn-powered chatbot, please note that the Customer who operates that chatbot is responsible for their own use of your information. We process that information on the Customer's behalf.

2. Information we collect

2.1 Information you provide as a Customer

Account information: your name and email address (including when you sign up via Google sign-in).
Billing information: when you subscribe to a paid plan, payment is processed by our payment provider (Polar). We do not store your full card details; we receive limited billing and subscription status information.
Content you upload: documents, PDFs, text, website content, and other material you provide to train your chatbot ("Knowledge").
Configuration data: chatbot settings, widget customization, team/agent details, and notification preferences.
Communications: messages you send us for support or via contact forms.

2.2 Information collected from Visitors

When a Visitor interacts with a Customer's chatbot, we may process:

Conversation content: the messages exchanged between the Visitor and the chatbot, including any information the Visitor chooses to share.
Lead information: contact details (such as name, email, or phone number) that a Visitor submits through the chatbot's lead-capture feature.
Technical data: IP address, approximate location, browser/device information, and timestamps, used for security, rate limiting, and analytics.

2.3 Information collected automatically

Usage and analytics data: how the Service is used, message counts, conversation metrics, and similar information.
Cookies and similar technologies: we use essential cookies for authentication and session management. We may use limited analytics to improve the Service.

3. How we use information

We use information to:

Provide, operate, and maintain the Service;
Create and manage accounts and authenticate users;
Generate chatbot responses based on Customer Knowledge;
Process payments and manage subscriptions;
Capture and deliver leads to the relevant Customer;
Send service-related and notification emails;
Provide analytics and reporting to Customers;
Protect the Service against abuse, fraud, and security threats (including rate limiting);
Comply with legal obligations.

We do not sell personal information.

4. AI processing

To generate chatbot responses, we use third-party AI providers. Customer Knowledge and Visitor messages may be sent to these providers solely to produce responses. We do not use your content to train our own models, and our AI providers process this data under their own commitments. See "Third-party service providers" below.

5. Third-party service providers (subprocessors)

We rely on trusted third parties to operate the Service. These may include:

Supabase — database, authentication, and file storage;
Anthropic — AI language model used to generate chatbot responses;
OpenAI — generation of text embeddings used for search/retrieval;
Polar — payment and subscription processing;
Resend — transactional and notification email delivery;
Upstash — rate limiting and abuse prevention;
Vercel — application hosting and infrastructure.

Each provider processes data only as needed to perform its function. This list may change as the Service evolves.

6. How we share information

We may share information:

With service providers listed above, to operate the Service;
With the relevant Customer, where you are a Visitor interacting with their chatbot (conversation and lead data belong to that Customer);
For legal reasons, if required by law or to protect rights, safety, and security;
In a business transfer, such as a merger, acquisition, or sale of assets.

7. Data retention

We retain information for as long as needed to provide the Service and for legitimate business or legal purposes. Customers can delete chatbots, Knowledge, conversations, and leads from their account; deleted data is removed in accordance with our standard processes. If you close your account, we will delete or anonymize your personal information within a reasonable period, unless retention is required by law.

8. Security

We implement technical and organizational measures to protect information, including encryption in transit, access controls, row-level data isolation between accounts, and rate limiting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at the email below.

If you are a Visitor and wish to exercise rights regarding data held by a Customer's chatbot, please contact the Customer who operates that chatbot; we will assist them as their processor where applicable.

10. International data transfers

We and our service providers may process information in countries other than your own. Where we transfer personal information, we take steps to ensure it receives an appropriate level of protection.

11. Children's privacy

The Service is not directed to children under 16 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, please contact us so we can delete it.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date. Material changes may be communicated through the Service or by email.

13. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at:

support@convolyn.com