Legal

Privacy Policy

Effective September 25, 2026. This operational policy should receive jurisdiction-specific legal review before public launch.

Information we process

Account and business profile details, customer contacts, WhatsApp conversations and media, knowledge-base content, AI configuration, usage events, support correspondence, and security/session records.

How information is used

To operate the inbox, authenticate users, deliver messages, generate requested AI assistance, enforce plan limits, diagnose failures, prevent abuse, and improve product reliability.

Analytics and location

ConvoDesk records product page paths, device category, referrer, and an approximate city/region/country derived from request metadata. A rotating one-way visitor hash is used instead of storing raw IP addresses for page-view analytics.

Service providers

Data may be processed by infrastructure and database providers, Meta for WhatsApp, Google for configured Gemini AI processing, and Resend for transactional email. Their processing is governed by their applicable terms.

Retention and security

Data is retained while a workspace is active and as needed for security, recovery, legal obligations, and service operation. Access uses HttpOnly sessions, tenant isolation, verified webhooks, and encryption for stored integration tokens. No system can guarantee absolute security.

Your choices

Workspace owners may update account information and remove contacts or conversations through the product. For access, correction, deletion, or privacy questions, contact the address below. Some records may be retained where legally or operationally required.

Privacy contact: handle.merchantdesk@gmail.com