Legal

Privacy Policy

Last updated: June 16, 2026

Privacy Policy

Last updated: June 16, 2026

ConvoConnect ("we", "us", or "our") operates the ConvoConnect social commerce platform for WhatsApp (the "Service"), available at our website and related applications. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, create an account, use the Service, or interact with us in other ways.

Please read this policy carefully. By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Who this policy applies to

This policy applies to:

  • Business users — individuals and organizations that register for and use ConvoConnect (account owners, administrators, agents, and staff).
  • Website visitors — people who browse our marketing site, blog, booking pages, or public shop pages.
  • End customers — individuals whose personal data is processed through the Service when our business users communicate with them via WhatsApp, SMS, email, or related channels.

When our business users upload contacts, send messages, or collect orders and bookings through ConvoConnect, those users are generally the data controllers for their end customers' information. ConvoConnect acts as a data processor on their behalf, processing that data according to their instructions and our agreement with them. End customers should contact the relevant business directly for questions about how their data is used.

2. Information we collect

2.1 Information you provide to us

When you register or use the Service, we may collect:

  • Account information — name, email address, phone number, company name, job title, password (stored in hashed form), and billing details.
  • Business profile — subdomain, branding, settings, team members, and role assignments.
  • Communications — messages you send to our support team, feedback, and survey responses.
  • Payment information — billing address and transaction records. Payment card details are processed by our payment providers (such as Stripe) and are not stored on our servers in full.

2.2 Information processed through the Service

When you use ConvoConnect to operate your WhatsApp business, we process data you and your customers generate, including:

  • Contact records — names, phone numbers, email addresses, tags, custom fields, and conversation history.
  • Messages and media — WhatsApp messages, templates, images, documents, voice notes, call metadata, and internal agent notes.
  • Commerce data — product catalogs, orders, carts, invoices, and payment status.
  • Booking data — appointment details, service selections, staff assignments, event registrations, and calendar sync information.
  • Campaign data — broadcast lists, delivery and read receipts, and campaign analytics.
  • Automation data — flow submissions, WhatsApp Flow responses, and workflow events.

2.3 Information collected automatically

When you access our website or Service, we may automatically collect:

  • Device and usage data — IP address, browser type, operating system, referring URLs, pages viewed, and timestamps.
  • Log data — API requests, error reports, and security events.
  • Cookies and similar technologies — see Section 10 below.

2.4 Information from third parties

We may receive information from:

  • Meta / WhatsApp — when you connect a WhatsApp Business account through the official WhatsApp Business Platform (Cloud API), including phone number verification status, message delivery events, and template approval status.
  • Payment providers — such as Stripe or M-Pesa, to confirm transactions.
  • Integrations you enable — such as Shopify, WooCommerce, Google Calendar, Twilio, or SMTP providers, according to the permissions you grant.
  • Authentication providers — if you sign in using a third-party login method.

3. How we use your information

We use personal information to:

  • Provide, operate, maintain, and improve the Service.
  • Create and manage your account and authenticate users.
  • Enable WhatsApp messaging, campaigns, catalogs, bookings, payments, and automations.
  • Process subscriptions, credits, and billing.
  • Send service-related notices, security alerts, and administrative messages.
  • Provide customer support and respond to inquiries.
  • Monitor usage, troubleshoot issues, and prevent fraud or abuse.
  • Comply with legal obligations and enforce our terms.
  • Analyze aggregated or de-identified data to improve our products.

We do not sell your personal information.

4. Legal bases for processing (EEA, UK, and similar jurisdictions)

Where applicable data protection law requires a legal basis, we rely on:

  • Contract — to provide the Service you have requested.
  • Legitimate interests — to secure, improve, and market our platform, provided your rights do not override those interests.
  • Consent — where required, such as for certain cookies or marketing communications.
  • Legal obligation — to comply with applicable laws, regulations, or court orders.

5. WhatsApp and Meta

ConvoConnect integrates with the WhatsApp Business Platform provided by Meta Platforms, Inc. When you use WhatsApp features:

  • Your use of WhatsApp is also subject to WhatsApp's Terms of Service and WhatsApp Business Terms.
  • Message content and metadata are transmitted through Meta's infrastructure.
  • You are responsible for obtaining any required consents from your customers before messaging them on WhatsApp and for using approved message templates where required by Meta's policies.

We do not control Meta's independent processing of data. Please review Meta's privacy policies for more information.

6. How we share information

We may share personal information with:

  • Service providers — hosting, cloud infrastructure, email delivery, analytics, customer support tools, and payment processors who process data on our behalf under contractual safeguards.
  • Integration partners — when you choose to connect third-party services (e.g., Shopify, WooCommerce, Google, Stripe, M-Pesa, Twilio).
  • Other users in your organization — according to the roles and permissions you configure.
  • Professional advisers — lawyers, accountants, or auditors where necessary.
  • Authorities — if required by law, regulation, legal process, or to protect rights, safety, and security.
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality obligations.

We require processors to handle personal data only as instructed and to apply appropriate security measures.

7. International data transfers

ConvoConnect may process and store information in countries other than where you live. Where required, we implement appropriate safeguards for cross-border transfers, such as standard contractual clauses or equivalent mechanisms.

8. Data retention

We retain personal information for as long as necessary to:

  • Provide the Service and fulfill the purposes described in this policy.
  • Comply with legal, accounting, and reporting obligations.
  • Resolve disputes and enforce agreements.

Retention periods may vary depending on data type, your account status, and applicable law. When data is no longer needed, we delete or anonymize it in accordance with our retention procedures. Business users may export or delete certain data through the Service, subject to plan features and technical limitations.

9. Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and monitoring. However, no method of transmission over the Internet or electronic storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for configuring appropriate access controls for your team.

10. Cookies and tracking technologies

We use cookies and similar technologies to:

  • Keep you signed in and remember preferences.
  • Understand how visitors use our website.
  • Improve performance and security.

You can control cookies through your browser settings. Disabling cookies may affect certain features of the Service.

11. Your rights and choices

Depending on your location, you may have rights to:

  • Access personal information we hold about you.
  • Correct inaccurate or incomplete information.
  • Delete personal information, subject to legal exceptions.
  • Restrict or object to certain processing.
  • Port your data to another service.
  • Withdraw consent where processing is consent-based.
  • Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at the address below. We may need to verify your identity before responding. If you are an end customer of one of our business users, please contact that business first.

Marketing communications. You may opt out of promotional emails by using the unsubscribe link in those messages or by contacting us. Service-related messages may still be sent.

12. Children's privacy

The Service is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

13. Business user responsibilities

If you use ConvoConnect to process personal data about your customers, you agree to:

  • Provide a privacy notice to your customers that explains your data practices.
  • Obtain all required consents and permissions before contacting individuals via WhatsApp or other channels.
  • Comply with applicable messaging, marketing, and data protection laws.
  • Use the Service only for lawful purposes and in accordance with Meta's WhatsApp Business policies.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and update the "Last updated" date. We may also notify account holders by email or through the Service. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

15. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at:

ConvoConnect
Email: support@convoconnect.tech
Website: https://convoconnect.tech

This policy is provided for informational purposes. You should consult qualified legal counsel to ensure it meets your specific regulatory obligations.

← Back to home Terms of Service Sign in