Last Updated: [12.02.2026]
1. Introduction
Convonook (“we,” “our,” or “us”) provides AI‑based chatbot and voice agent services to business customers. This Privacy Policy explains how we collect, use, and disclose personal information in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA).
By using our services, you acknowledge and agree to the practices described in this Policy.
2. Information We Collect
We collect information necessary to deliver, operate, and improve our AI agents.
2.1 Account Information
- Name
- Business email
- Company details
2.2 Customer‑Provided Content
- Documents, FAQs, URLs, training materials, prompts, and workflows you upload to build your AI agents.
2.3 Interaction Data
Voice Interactions
Collected when your users interact with voicebots you deploy:
- Audio streams (processed in real‑time)
- Speech‑to‑text transcripts
- Caller phone numbers (e.g., inbound/outbound call participants)
- Call metadata (duration, timestamps, call status)
- Call flow logs (assistant behaviors, routing, system messages)
- Optional call recordings (if enabled by you)
Text Interactions
Collected when your users interact via chat widgets you deploy on your websites:
- Chat messages and replies
- Chat metadata (timestamps, session identifiers, message routing)
2.4 Technical Data
- IP addresses
- Browser type
- Device information
- System‑level logs required to provide service functionality
3. How We Use Your Data
We use the collected information for the following business purposes:
3.1 Service Delivery
To operate, authenticate, route, and maintain your chatbot and voice agent functionality.
3.2 AI Configuration & Deployment
To train and execute AI agents using only the Customer Content and settings you provide.
3.3 Transparency on AI Training
- Convonook does not use your proprietary Customer Content to train generalized or shared AI models.
- Certain infrastructure providers used to power voice or chat processing may analyze audio, transcripts, or logs to improve their underlying speech recognition or platform performance. This is done by those providers as part of their service delivery and does not involve Convonook reusing your content for unrelated model training.
3.4 Customer Support
To assist with troubleshooting, technical questions, and operational support.
3.5 Service Improvement
To conduct diagnostics, analytics, and performance tuning.
4. Service Providers (“Sub‑Processors”)
To provide our services, Convonook uses specialized infrastructure providers for functions such as:
- Voice Processing Providers: handle voice audio, transcripts, call metadata, and call flow logs to enable real‑time voice interactions.
- Chat Processing Providers: host chat widgets, manage message routing, and store text‑based interaction logs as needed for chat functionality.
- Cloud & Hosting Providers: store Customer Content, account data, and system logs on secure servers.
These providers:
- Act as processors on our behalf
- Process Customer Content solely under our instructions
- Are contractually prohibited from using your data for any purpose unrelated to service delivery
- Maintain their own data retention practices as necessary for operation, security, and compliance
5. Data Retention
5.1 Convonook Retention
We retain Customer Content and account data for as long as your account is active or as needed to deliver services. Upon account termination, Convonook aims to delete or anonymize stored content within 30 days, unless retention is required for legal, security, or audit purposes.
5.2 Subprocessor Retention
Infrastructure providers may retain certain categories of data according to their operational requirements, including:
- Temporary system logs
- Voice transcripts or metadata required for debugging
- Configuration data retained until deleted by you
- Chat interaction data retained according to their platform defaults
Where supported, we configure providers to minimize retention, but some retention is inherent to the provider’s operational model.
6. International Data Transfers
Some infrastructure providers may process or store personal data in the United States, the European Economic Area (EEA), or other jurisdictions with appropriate safeguards.
We rely on those providers’ compliance mechanisms (e.g., contractual safeguards, secure hosting environments) for any international transfers.
7. Security Measures
We and our service providers use commercially reasonable technical and organizational measures, including but not limited to:
- Encryption in transit
- Access controls and authentication
- Secure credential management
- Infrastructure‑level safeguards
- Vendor due diligence and contractual controls
No method of transmission or storage is 100% secure, but we take reasonable steps to protect your data.
8. End‑User Cookie Notice
Convonook does not set marketing or advertising cookies for your customers.
If you embed Convonook agents into your website, your website’s cookie policy must cover any cookies, local storage, or session tracking used by:
- your website platform
- your chat/voice integration
- your analytics tools
Convonook does not collect cross‑site tracking data on your end‑users.
9. Your Privacy Rights (US & California Residents)
Depending on your jurisdiction, you may be entitled to:
- Right to Know/Access
- Right to Correct
- Right to Delete
- Right to Opt‑Out of “sharing” (CCPA/CPRA)
- Right to non‑discrimination for exercising rights
We do not sell personal information for monetary consideration.
10. Children’s Privacy
Convonook services are intended for business use and are not directed to individuals under 13.
Some integrated components may impose additional age requirements (e.g., 16+ in certain jurisdictions). Customers are responsible for ensuring compliance with local age‑based laws when deploying chat or voice agents.
11. Governing Law
This Privacy Policy is governed by the laws of the State of Delaware, USA.
12. Contact Us
For questions or privacy requests, contact us at:
info@convonook.com