Privacy Policy

1. Who We Are

Convora AI is operated by Ujjwal Aidasani, a sole operator based in Dubai, United Arab Emirates. For the personal data described in this policy, Convora AI is the data controller - meaning we decide what data is collected and why.

You can reach us about anything in this policy at ujjwal@convora.ai. There is no separate privacy team; the email goes directly to Ujjwal.

2. What Data We Collect

We collect the following categories of personal data:

• Enquiry form data: your name, email address, phone number, your website address if you give one, and whatever you write in the message field.
• Assessment data: if you complete the free assessment, we collect your name, email address and business name, plus your answers about your industry, team size, the problem you selected, your weekly enquiry volume, how many enquiries go unanswered, what an average customer is worth to you, and your timeline. These answers are used to produce the written result we send you.
• Chat data: if you use the chat widget on this site, we collect the information you choose to share in that conversation, which may include your name, email address, phone number and business details.
• Technical data: if you accept analytics cookies via our cookie banner, we collect standard technical data such as your IP address, browser type, device information and pages visited. This is not collected before you give consent, and is never collected if you decline.

We do not collect sensitive personal data as defined by the PDPL, and we ask that you do not send it to us through this website.

3. How We Use Your Data

We use the personal data we collect to:

• Produce and send you the result of the assessment you asked for
• Reply to your enquiry and work out whether we can actually help your business
• Follow up on a conversation you started with us
• Understand how visitors use this site, so it can be improved
• Meet obligations that apply to us under UAE law

We do not sell your personal data, and we do not share it with anyone for their own marketing.

4. Our Basis for Processing

Under the PDPL, personal data is generally processed on the basis of your consent, unless one of the exceptions in the law applies. We rely on:

• Your consent - you give it by choosing to submit the enquiry form, start the assessment, or use the chat widget, and separately by accepting analytics cookies. You can withdraw it at any time (see section 8).
• Necessity for a contract - where we are delivering a service you have engaged us for, or taking steps at your request before entering into an agreement.
• Legal obligation - where UAE law requires us to process or retain something.

5. Who We Share Data With

We use a small number of third-party providers to run this website and communicate with you. They process your data only to deliver their service to us:

• Vercel - website hosting and delivery
• Resend - sending the assessment result and our replies by email
• Make.com - passing enquiry and assessment submissions into our own records
• PostHog - website analytics, only if you accept analytics cookies
• Our chat widget provider - running the chat on this site

We may also share data with professional advisors where genuinely necessary, or with authorities where UAE law requires it.

6. Data Transferred Outside the UAE

We want to be straightforward about this: the providers listed above operate outside the United Arab Emirates, mainly in the United States and Europe. That means your data leaves the UAE when you contact us or complete the assessment.

The PDPL restricts transfers of personal data outside the UAE, and the detailed rules are due to be set out in Executive Regulations that had not been issued at the time this policy was written. In the meantime we keep the number of providers small, choose established providers with published security and privacy commitments, send them only the data needed for the specific purpose, and rely on the contractual terms in place with each of them. We will update this section once the Executive Regulations are issued.

7. How Long We Keep It

We keep personal data only as long as we need it. Enquiry and assessment data is kept for 12 months from our last contact with you, unless you ask us to delete it sooner. If you become a client, data relating to your agreement is kept for the length of the agreement and for a period afterwards in line with normal commercial and tax record-keeping.

8. Your Rights

Under the PDPL you have the right to:

• Ask what personal data we hold about you, and get a copy of it
• Ask us to correct data that is wrong or incomplete
• Ask us to delete your data
• Ask us to stop or limit how we use your data
• Ask for your data in a portable format, or ask us to transfer it
• Object to us processing your data
• Withdraw your consent at any time, without affecting anything done before you withdrew it

To use any of these rights, email ujjwal@convora.ai. We will respond within 30 days. We may need to confirm your identity first, so that we are not handing your data to someone else.

9. Automated Results

The assessment produces its result automatically from the answers you give. It is a rough estimate generated by a formula, not a decision about you, and it has no legal or similar effect on you. If you would rather a person looked at it instead, or you disagree with the result, email us and we will go through it with you.

10. When We Work For Your Business

This policy covers data we collect about you through this website. It is different when we build and run a system for a client. In that case the client decides what data is collected from their customers and why, so the client is the data controller and Convora AI acts as a processor on their instructions, under a written agreement. If you are a customer of a business that uses a system we built, and you want to exercise your rights over your data, contact that business directly. We will support them in responding.

11. Cookies

When you first visit this site, a cookie banner asks you to accept or decline non-essential cookies. Nothing is tracked before you make a choice, and declining does not affect how the site works.

If you accept, we set analytics cookies (via PostHog) to understand how visitors use the site - which pages are viewed, how long you stay, and general navigation patterns. If you decline, no analytics cookies are set and no analytics data is collected. Only the record of your choice itself is stored, which is necessary to remember your decision.

You can change or withdraw your consent at any time via the Cookie Settings link in the site footer, which reopens the banner. Withdrawing consent is as easy as giving it.

12. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No transmission over the internet is completely secure, so we cannot promise absolute security. If a breach occurs that puts your data at risk, we will notify you and the relevant authority as required under the PDPL.

13. Children

This site and our services are aimed at businesses and are not intended for anyone under 18. We do not knowingly collect personal data from minors. If you believe we have, contact us and we will delete it.

14. Links to Other Sites

This website links to other websites. We are not responsible for their privacy practices or their content. Please read their privacy policies before sharing personal data with them.

15. Visitors Outside the UAE

This policy is written to UAE law because that is where we operate. If you are in a country with its own data protection law, such as the United Kingdom or the European Union, and you want to exercise rights under that law, email us. We will treat an equivalent request the same way we treat a request under the PDPL.

16. Changes to This Policy

We may update this policy. The date at the top of this page shows the most recent version. Where a change is significant, we will make a reasonable effort to tell you.

17. Complaints

If you think we have mishandled your personal data, please contact us first at ujjwal@convora.ai so we can put it right.

You also have the right to complain to the UAE Data Office, the authority responsible for personal data protection in the United Arab Emirates.

18. Contact

For any question about this policy or about your data, contact Ujjwal Aidasani at ujjwal@convora.ai.