1. Who we are
Convotra AI ("Convotra", "we", "us") provides an AI-powered platform for generating websites, chatbots, advertising campaigns, and social media content on behalf of businesses. This policy explains what data we collect, why, and how it's handled.
2. Information we collect
- Account information: name, email address, and business/tenant details you provide at signup.
- Content you provide: business descriptions, images, captions, and ad prompts you submit for AI generation.
- Connected account data: when you connect Google Ads, Meta, Pinterest, or other third-party accounts via OAuth, we store an encrypted access/refresh token and basic account identifiers (account name, ID) needed to act on your behalf.
- Leads: contact details submitted by visitors through your chatbot or lead forms are stored so you can access them.
- Payment data: ad wallet top-ups are processed by Razorpay; we store the transaction record and status, never your card or bank details directly.
- Usage analytics: we use Google Analytics (GA4) to understand aggregate product usage (page views, feature interactions).
3. How we use your information
- To generate and host websites, chatbots, ad campaigns, and social media posts on your behalf.
- To publish content to third-party platforms (Google Ads, Meta, Pinterest, etc.) you've explicitly connected.
- To process payments for ad wallet top-ups via Razorpay.
- To send you notifications about publishing status, account issues, or token expiration.
- To improve the product based on aggregate, anonymized usage patterns.
4. AI processing
Content you submit (business descriptions, captions, ad prompts) is sent to AI model providers (including OpenAI and a self-hosted Ollama instance) to generate refined copy, campaign plans, and website content. We do not use your business data to train third-party foundation models beyond the scope of a single generation request.
5. Third-party services
We integrate with the following third parties, each governed by their own privacy policy:
- Google (Sign-In, Google Ads, Google Analytics)
- Meta (Facebook/Instagram Ads)
- Pinterest (content publishing)
- Razorpay (payment processing)
- OpenAI (AI content generation)
6. Data security
OAuth tokens and other credentials are encrypted at rest. Access to your data is scoped to your account/tenant and enforced on every request. No system is perfectly secure, but we take reasonable technical measures to protect your information.
7. Data retention & your rights
We retain your data for as long as your account is active. You may request export or deletion of your data, or disconnect any third-party account, at any time from your dashboard or by contacting us. Disconnecting a third-party account revokes our access to it going forward.