Privacy Policy

1. Information we collect
Account & authentication: Name, email, username, password (stored hashed), role, business and location identifiers, OAuth tokens where you connect Google or other integrations, and session/refresh tokens for secure login.
Device & technical: Device type, operating system, app version, IP address, browser type, and diagnostic logs used for security and support.
Push notifications: Expo push tokens registered when you enable alerts (e.g. poor-review notifications).
Usage & analytics: Feature usage, onboarding progress, and product tour state to improve the service.
Communications: SMS and chat content, review data from connected platforms, SMS templates, and provisioned business phone numbers for messaging.
Payment: Subscription status, tier, and transaction metadata. We do not store full payment card numbers on our servers.

2. How we use your information
We use data to provide review management, SMS messaging, team collaboration, billing, customer support, fraud prevention, legal compliance, and service improvements. We may send service-related emails (account, billing, security) and, where permitted, product updates.

3. Payments & third-party processors
Authorized payment processors process web subscriptions and related payments; their privacy policies apply to payment data they collect.
Apple In-App Purchase and Google Play Billing process mobile subscriptions and consumable purchases; Apple and Google receive payment data according to their policies.
Authorized telecommunications carriers provide SMS and phone number routing services; message content and phone numbers are shared to deliver business messaging.
Review platforms(e.g. Google Business Profile) when you connect integrations — governed by those platforms' terms.
Subscriptions automatically renew unless canceled at least 24 hours before the end of the current billing period. Users can manage or cancel subscriptions through Apple ID Account Settings or Google Play Account Settings.

4. Data retention
We retain account data while your account is active. Billing and audit records may be kept longer where required for tax, accounting, or legal obligations. Backup systems may retain deleted data for up to 30 days before purging.

5. Your rights
Depending on your location, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing. Contact us at success@convoia.com to exercise these rights.

6. Account deletion
You may delete your account in-app (Profile → Delete account) or on the web (Profile → Password & security). See our Account deletion page for steps, timelines, and subscription cancellation requirements.

7. Data security
We use industry-standard safeguards including encryption in transit, access controls, and secure credential storage. No method of transmission over the internet is 100% secure. Users are responsible for maintaining the confidentiality of their account credentials.

8. Cookies and tracking
Our web app may use cookies and similar technologies for authentication, preferences, and analytics. You can adjust browser settings to limit cookies; some features may not work without them.

9. Children
Our services are not directed to children under 13 (or the applicable age in your region). We do not knowingly collect data from children.

10. International transfers
Data may be processed in the United States and other countries where our service providers operate, with appropriate safeguards where required by law.

11. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with an updated date.

12. Contact
Privacy-related questions: success@convoia.com · Contact form

Terms of Use
iOS subscriptions: Apple Standard EULA · Terms & Conditions

Effective date: May 18, 2026

Last updated: May 22, 2026