Privacy Policy

ConvoHub ("we", "us") is software that helps small businesses reply to customer messages on WhatsApp, Instagram and their website, and manage the resulting leads. This policy explains what data we handle, why, and the choices you have.

There are two kinds of people whose data we handle: businesses that sign up for ConvoHub and their team members, and customers who message those businesses. For customer messages, the business is responsible for its own use of the data and we process it on the business's behalf.

Data we collect

• Account data: names, email addresses and passwords (stored only as secure hashes) of business owners and team members.
• Business data: business name and type, products, prices, documents uploaded to the knowledge base, appointment availability and settings.
• Messages from customers: when a customer messages a connected business on WhatsApp, Instagram or the website chat widget, we receive the message text and the details the platform provides — for example the WhatsApp phone number and profile name, or the Instagram-scoped user ID and username.
• Lead and CRM data: contact details, notes, follow-ups, appointments and AI-generated lead summaries and scores.
• Connection credentials: access tokens a business provides to connect its WhatsApp or Instagram account. These are encrypted at rest.
• Billing data: plan and payment status. Card, UPI and bank details are entered on and handled by our payment provider, Razorpay; we never see or store them.
• Technical data: basic logs such as IP address, browser type and error reports, used to run and secure the service.

How we use data

• To receive customer messages and send replies on behalf of the business, including AI-written replies.
• To qualify leads, schedule follow-ups and appointments, and show the business its conversations and reports.
• To provide, secure, maintain and improve the service, and to process subscription payments.
• To contact businesses about their account, billing and important service changes.

We do not sell personal data, use customer messages for advertising, or use data received from WhatsApp or Instagram for any purpose other than providing the messaging features the business has turned on.

Data from Meta platforms (WhatsApp and Instagram)

When a business connects its WhatsApp Business or Instagram professional account, we receive messages sent to that account through Meta's official APIs, and we send replies through the same APIs. We use this data only to deliver those conversations to the business and to generate replies, and we handle it in line with Meta's Platform Terms and Developer Policies. A business can disconnect its account at any time from Settings, and you can request deletion as described in our data deletion instructions.

Who we share data with

We share data only with service providers that help us run ConvoHub, under contracts that protect it:

• Meta Platforms (WhatsApp and Instagram messaging APIs)
• AI model providers (OpenAI or Google) to generate replies and summaries — data is sent only to produce the response
• Razorpay, for subscription payments
• Our cloud hosting, database and email-delivery providers

We may also disclose data if required by law or to protect the rights and safety of our users or the public.

How long we keep data

We keep account, business and conversation data for as long as the business's account is active. When a business closes its account or asks us to delete it, we delete or anonymise its data within 30 days, except where we must keep limited records (for example payment records) to meet legal obligations.

Security

Data is transferred over encrypted connections, passwords are hashed, messaging access tokens are encrypted at rest, and each business can only access its own data. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.

Your rights

You can ask to access, correct or delete your personal data, or object to how it is used. Business users can update most of their information in Settings. Customers who messaged a business can contact that business or us. See how to request deletion.

Children

ConvoHub is a business tool and is not directed at children under 13 (or the minimum age in your country).

Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, notify business account owners.

Contact us

Questions or requests about privacy: mr.abhishek1503@gmail.com.