Privacy Policy

This policy explains what information Convervo ("we," "us") collects, how we use it, and the choices you have. It applies to our website, dashboard, QR landing pages, and website voice widget.

1. Information we collect

Account & business information: your email address, and business details you provide (name, industry, website, phone, address, and similar settings).

Voice call data: when someone talks to your AI assistant — via a QR code, the website widget, or a test call — we process and store the call's audio, transcript, an AI-generated summary, and any information the caller shares (like their name, phone number, or email) as a lead record.

Knowledge base & product content: documents, FAQs, and product catalogs you upload so your assistant can answer questions from them.

Usage & device data: QR scan events (device type, coarse location if available, a hashed — not raw — IP address, referrer), and standard web server logs.

Cookies: a session cookie to keep you signed in, and a short-lived cookie on QR landing pages to distinguish a repeat scan from a new one. We don't use third-party advertising or tracking cookies.

2. How we use it

• To operate the service — running your AI assistant, recording calls, capturing leads, and showing you the resulting data in your dashboard.
• To improve reliability and support — diagnosing errors, responding to help requests.
• To send account-related and (if you've enabled them) lead-notification emails.
• To meet legal obligations, like responding to the privacy requests described below.

We do not use your business's call data or customer data to train our own general-purpose AI models.

3. Who we share it with

We share information only with the service providers that make the product work, each acting under their own privacy and security commitments:

• Retell AI — powers the voice conversations themselves (speech, transcription, call analysis).
• OpenAI — generates the embeddings used to search large product catalogs during a call.
• Supabase — our database, authentication, and file storage provider.
• Resend — sends transactional emails (lead notifications, account emails), where enabled.
• Stripe — processes payment if you subscribe to a paid plan.

We do not sell personal information. See our CCPA rights page for California-specific detail.

4. AI disclosure & call recording

Calls handled by an AI voice assistant are disclosed as such at the start of the conversation. Call recording is subject to your own configuration and applicable law — consent requirements for recording a call vary by state and country (some require only one party's consent, others require all parties'), and it's each business's responsibility to configure disclosure appropriately for where their callers are located.

5. Data retention

We retain account and call data for as long as your account is active, plus a reasonable period afterward for legal and operational purposes, unless you request earlier deletion (see below) or your organization has configured a shorter transcript retention period.

6. Your rights & choices

You can update your account and business information directly in your dashboard settings at any time. To request access to, correction of, or deletion of your personal information — including as a California resident under the CCPA — visit our Your Privacy Choices page.

7. Security

We use industry-standard measures to protect your information, including encryption in transit, database-level access controls scoped to your own organization's data, and restricted internal access to production systems. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

8. Children's privacy

This service is intended for business use and is not directed at children under 16. We do not knowingly collect personal information from children.

9. Changes to this policy

We'll update the date at the top of this page when this policy changes, and post the updated version here.

10. Contact us

Questions about this policy or your data? Email us at cyberdudeco@gmail.com.