Privacy Policy

1. Information We Collect

• Account Data. If you create an account, we collect your name, email address, and profile picture from your Google account via OAuth. We do not have access to your Google password.

• Uploaded Screenshots. When you upload a conversation screenshot for analysis, our system processes the image using OCR (optical character recognition) to extract text. The original image is deleted from our servers within 60 seconds of processing. We do not retain copies.

• Analysis Results. If you are a logged-in user, your analysis results (the text output, not the original screenshot) may be saved to your account history. You can delete these at any time from your dashboard.

• Usage Data. We collect basic, anonymized usage data including pages visited, features used, and session duration. This is used exclusively for improving the product. We use privacy-focused analytics with no third-party ad trackers.

2. How We Use Your Information

• To provide the core service: processing conversation screenshots and generating AI-powered analysis results.

• To save your analysis history if you are logged in (opt-in).

• To improve our AI models and analysis accuracy using aggregated, anonymized data patterns — never individual conversations.

• To communicate with you about product updates, only if you opt in to email communications.

3. Data Retention & Deletion

• Screenshots: Deleted within 60 seconds of upload. Not recoverable.

• Analysis results: Stored as long as your account exists. Deletable at any time from your dashboard. When you delete your account, all associated data is permanently removed within 30 days.

• Anonymous analytics: Retained for up to 12 months in aggregate form.

4. Data Sharing

• We do not sell, trade, or rent your personal data to any third parties.

• We do not share conversation content or analysis results with anyone.

• We may share anonymized, aggregated statistics (e.g., "X analyses were performed this month") for business purposes, but these never contain identifiable information.

• We use Stripe for payment processing. Stripe handles all payment data directly and we never see or store your credit card number.

5. Security

• All data is transmitted over HTTPS with TLS 1.3 encryption.

• Screenshots are processed in isolated, ephemeral server environments.

• Account passwords are never stored — we use OAuth exclusively (Google sign-in).

• We conduct regular security reviews and follow industry-standard practices for data protection.

6. Your Rights

• You can request a copy of all data associated with your account at any time.

• You can delete your account and all associated data from your settings page.

• You can opt out of all non-essential communications.

• For GDPR/CCPA requests, contact privacy@convocoach.ai and we will respond within 30 days.

7. Contact

• For any privacy-related questions or concerns, contact us at privacy@convocoach.ai. We respond to all privacy inquiries within 48 hours.