Privacy Policy
Last updated: 24 March 2026
This Privacy Policy explains how Convora AI collects, uses, stores, and protects your personal data when you visit our website, use the voice or chat demo, or engage with our services. We are committed to protecting your privacy in line with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the California Consumer Privacy Act (CCPA) where applicable.
1. Who We Are
Convora AI is the data controller responsible for your personal data. You can contact us at: ujjwal@convora.ai
2. What Data We Collect
We collect the following categories of personal data:
- Enquiry Form Data: When you submit an enquiry form on our website, we collect full name, email address, phone number, and type of business
- Voice Demo Data: When you use the live voice agent demo on our website, we may collect any information you choose to share during the call. Calls through the demo are not recorded.
- Chatbot Data: If you interact with our website chatbot, we may collect the information you share during that conversation, which may include your name, email address, phone number, and business details
- Technical Data: We may automatically collect standard technical data such as your IP address, browser type, device information, and pages visited, primarily through analytics tools
3. How We Use Your Data
We use the personal data we collect for the following purposes:
- To respond to your enquiry and assess whether Convora AI is suitable for your business
- To contact you about our services, including follow-up communications
- To demonstrate our AI technology through the live demo and chatbot
- To improve our website and services based on usage patterns
- To comply with our legal obligations
4. Legal Basis for Processing (UK & EU Users)
If you are located in the UK or EU, we process your personal data on the following legal bases under the UK/EU GDPR:
- Legitimate interests — to respond to your enquiries and promote our services to businesses that have expressed an interest
- Contractual necessity — where processing is necessary to perform a service agreement
- Legal obligation — where required by applicable law
- Consent — where you have explicitly consented, for example, to receive marketing communications
5. Data Sharing
We do not sell your personal data. We may share your data with:
- Third-party technology providers that power our services (including VAPI for voice AI infrastructure, Twilio for telephony, and n8n for workflow automation). These providers process data only as necessary to deliver the service and are bound by their own privacy policies
- Professional advisors (legal, accounting) where necessary
- Law enforcement or regulatory bodies where required by law
6. International Data Transfers
Some of our third-party service providers may process your data outside of the UK or EU. Where this occurs, we ensure appropriate safeguards are in place, such as relying on Standard Contractual Clauses (SCCs) approved by the relevant authorities, or the UK International Data Transfer Agreement (IDTA) where applicable.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry data is typically retained for 12 months from the date of last contact. If you become a client, data related to your service agreement will be retained for the duration of the agreement and for up to 6 years thereafter in line with standard commercial record-keeping requirements.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
UK & EU Users (UK/EU GDPR):
- Right to access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of your data in certain circumstances
- Right to restrict processing — request that we limit how we use your data
- Right to data portability — request your data in a portable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
California Users (CCPA):
- Right to know what personal information we collect, use, and disclose
- Right to delete personal information we have collected from you
- Right to opt out of the sale of personal information. We do not sell personal information
- Right to non-discrimination for exercising your CCPA rights
To exercise any of these rights, contact us at: ujjwal@convora.ai. We will respond to verified requests within 30 days (or within the timeframe required by applicable law).
9. Cookies
Our website may use cookies and similar tracking technologies to improve your experience and analyse site traffic. We only activate non-essential cookies where you have given your consent via our cookie banner. You can withdraw consent or manage your cookie preferences at any time through your browser settings.
10. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no data transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Children's Privacy
Our services are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.
12. Links to Third-Party Sites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before sharing any personal data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent version. We encourage you to review this policy periodically. Where changes are material, we will make reasonable efforts to notify you.
14. Complaints
If you are a UK resident and believe we have mishandled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
If you are an EU resident, you may lodge a complaint with your local supervisory authority.
15. Contact Us
For any privacy-related questions or to exercise your rights, please contact: ujjwal@convora.ai