Converana

Privacy Policy

Effective January 1, 2026

This Privacy Policy explains what information Converana collects, how it is used, and the choices available to you. Converana is software used by businesses to manage their own customers' contact information — businesses are the data controller for the lead data they store in Converana, and are responsible for how they collect and use it.

1. Information we collect

  • Account information: name, email, and authentication details.
  • Business information you provide: business name, services, service area, hours, and AI assistant configuration.
  • Lead data your business collects: names, contact details, messages, and conversation history submitted through your lead sources (embed form, API, or manual entry).
  • Billing information, processed directly by our payment processor (Stripe).
  • Usage data (e.g., feature usage, log data) used to operate and improve the Service.

2. How we use information

We use information to provide the Service (storing leads, generating AI qualification and replies, sending follow-ups you configure, processing billing), to secure accounts, and to communicate with you about your account.

3. AI processing

Lead conversations may be sent to our AI provider (Anthropic) to generate qualification summaries and suggested replies. We do not sell lead data to third parties.

4. Third-party services

Converana relies on service providers to operate: Supabase (authentication and database hosting), Anthropic (AI), Stripe (billing), Resend (email delivery), and Twilio (SMS delivery), each of which processes data solely to provide their respective service to Converana.

5. Data isolation and security

Each business account's data is isolated at the database and application layer. We use encryption in transit, hashed API keys, and server-side authorization checks so that a business can never access another business's leads, conversations, or settings.

6. SMS and email consent

Converana provides consent and opt-out fields for leads so businesses can track and honor communication preferences, including STOP requests for SMS. Businesses are responsible for obtaining appropriate consent before contacting a lead, consistent with applicable law.

7. Data retention and deletion

We retain account and lead data for as long as an account is active. You can request deletion of your account and associated data by contacting us.

8. Your choices

You can access, update, or delete business and lead data directly within the dashboard, and manage notification preferences in Settings.

9. Changes to this policy

We may update this policy from time to time and will post the current version here.

10. Contact

Questions about this policy can be sent to privacy@converana.com.