Privacy Policy

We process business account details, staff names and email addresses, access roles, business settings, products and prices. When a customer contacts a business using Convero, we process their channel identifier or phone number, messages, lead details, bookings and related activity. If M-Pesa is used, we also keep payment status and details such as the amount, payer number, reference and receipt. Payment callbacks can contain further information needed to verify or reconcile a payment.

We use this information to run the assistant, deliver and receive messages, manage leads and bookings, request and reconcile payments, provide reports, protect the service and answer support requests. We do not sell customer data. A business decides how to use Convero for its customers; we operate the service on its behalf. We also manage our own account, billing and support records.

Depending on the features a business enables, information may pass through Meta for WhatsApp, Instagram or Messenger, Safaricom for M-Pesa, and Google for AI-generated replies. The service also uses hosting and operational providers. An AI key is optional; without one, the assistant uses its rules-based features. Businesses should tell their customers about the channels and payment services they use.

The application uses tenant-scoped database access and encrypts new integration credentials when they are stored. Older credentials may require migration. These controls reduce risk, but no system can promise that a software error or a stolen database could never expose information. Operational event and audit retention settings differ. Deleting a lead normally hides it first and later purges it after a grace period; a separate erasure request removes linked lead data sooner. Payment, audit and backup records may need separate handling. See our data deletion instructions for the available paths and limits.

If you are a customer of a business using Convero, you can contact that business about access, correction, objection or deletion. You can also write to hello@convero.ai and identify the business and channel involved so we can route the request. We may need to verify the request and consider records that must be kept for a lawful purpose. You can read about your rights on the Office of the Data Protection Commissioner's site.