Privacy Policy

Last updated: 15 August 2026

This Privacy Policy explains how Convowa ("Convowa", "we", "us", or "our") collects, uses, shares, and protects information when you use our website at convowa.com and our WhatsApp CRM and marketing automation platform at app.convowa.com (together, the "Service").

By using the Service, you agree to the practices described in this policy. If you have any questions, contact us at support@convowa.com.

1. Information We Collect

1.1 Account data

When you register for the Service, we collect information you provide directly, such as:

• Your name, email address, and phone number;
• Your business name and business details;
• Login credentials (passwords are stored in hashed form);
• Billing and subscription information, where applicable.

1.2 Contact and message data (processed on behalf of businesses)

Businesses that use Convowa ("Customers") upload and manage information about their own customers and contacts, including names, phone numbers, tags, custom fields, and the content of WhatsApp conversations, templates, and campaigns. For this data:

• The Customer is the data controller — they decide what data is collected and how it is used;
• Convowa acts as a data processor, handling this data only to provide the Service on the Customer's behalf and according to their instructions;
• We do not sell contact or message data, and we do not use it for advertising or to build marketing profiles for our own purposes.

If you are an end user whose data was uploaded to Convowa by a business, please direct privacy requests to that business first. We will assist our Customers in responding to such requests.

1.3 Usage and technical data

We automatically collect certain technical information when you use the Service, such as IP address, browser type, device information, pages viewed, and actions taken in the app. We use this to operate, secure, and improve the Service.

2. Meta / WhatsApp Cloud API Data

Convowa integrates with the WhatsApp Business Platform (Cloud API) provided by Meta Platforms, Inc. When you connect your WhatsApp Business number to Convowa:

• We access and process data made available through the WhatsApp Cloud API, including your WhatsApp Business Account details, phone number metadata, message templates, and messages sent and received through your connected number;
• This data is used solely to provide Service features you request — such as the shared inbox, broadcasts, automations, and analytics — and is not sold or used for unrelated purposes;
• Our use of data received from Meta APIs complies with the applicable Meta Platform Terms and Developer Policies, including the WhatsApp Business Terms of Service;
• Your use of WhatsApp through the Service is also subject to Meta's and WhatsApp's own terms and privacy policies, which we encourage you to review.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Set up and manage your WhatsApp Business API connection;
• Deliver messages, campaigns, and automations you configure;
• Provide customer support and respond to your requests;
• Process payments and manage subscriptions;
• Monitor usage, prevent abuse, and keep the Service secure;
• Improve features and develop new functionality;
• Send service-related notices (e.g., billing, security, or feature updates);
• Comply with legal obligations.

4. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used, for example:

• Essential cookies — required for authentication, security, and core functionality;
• Preference cookies — remember settings such as language or interface options;
• Analytics cookies — help us understand aggregate usage so we can improve the Service.

You can control cookies through your browser settings. Disabling essential cookies may prevent parts of the Service from working.

5. How We Share Information

We do not sell your personal information. We share information only:

• With Meta / WhatsApp, as necessary to deliver messages through the WhatsApp Business Platform;
• With service providers that help us run the Service (e.g., cloud hosting, payment processing, email delivery), under confidentiality obligations;
• To comply with law, enforce our terms, or protect the rights, safety, and security of Convowa, our users, or others;
• In connection with a business transfer such as a merger or acquisition, in which case this policy will continue to apply to your data.

Government and law enforcement requests

We may receive requests from public authorities for personal data. We apply the following practices to every such request:

• Legality review. Every request is reviewed to confirm it is lawful, validly issued by an authority with jurisdiction over us, and specific enough to act on. We do not disclose data in response to informal or unverified requests.
• Challenging unlawful requests. Where a request appears overbroad, defective, or unlawful, we will object to it, seek to narrow it, or challenge it through the appropriate legal channel before disclosing anything.
• Data minimisation. If disclosure is legally required, we release only the minimum information necessary to satisfy the request — never a broader export of an account or workspace.
• Documentation. We record each request, the legal basis cited, our assessment, everyone involved on both sides, and exactly what was disclosed.
• Notice. We notify the affected customer before disclosing their data, unless we are legally prohibited from doing so.

Requests should be sent to support@convowa.com.

6. Data Retention

We retain account data for as long as your account is active and as needed to provide the Service. Contact and message data processed on behalf of Customers is retained according to the Customer's configuration and our operational requirements. When data is no longer needed, we delete or anonymize it. We may retain limited information where required by law (e.g., billing records).

7. Data Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit, access controls, and hashed credential storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continuously to protect your information.

8. Your Rights and Data Deletion Requests

Depending on your location, you may have rights to access, correct, export, restrict, or delete your personal data.

If you are an end user of a business that uses Convowa, contact that business directly; we will support them in fulfilling your request. You may also contact us and we will refer your request to the relevant business where appropriate.

9. International Data Transfers

Your information may be processed and stored in countries other than your own, including where our cloud infrastructure or service providers operate. Where required, we use appropriate safeguards for such transfers.

10. Children's Privacy

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes may also be communicated by email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For any questions about this Privacy Policy or our data practices, contact:

Convowa
Email: support@convowa.com
Website: https://convowa.com

Operated by PrimeNexa Technologies
House No. N0111, Vill/Post Nabagram, PS Jamalpur, Kalanabagram,
Purba Bardhaman, West Bengal 713166, India
GSTIN: 19BZIPR3437E1Z4 · primenexatech.com · support@convowa.com