Privacy policy

How we handle personal data. Last updated October 2026.

Who we are

Conversley provides AI customer service agents to businesses. This policy explains what personal data we handle on this website, in the demo, and when we answer customers on behalf of the businesses that use us. Contact us at sales@conversley.com.

Two roles

For people who visit this website, register for a demo or become clients, Conversley decides how their data is used (we are the controller). For the customers of our clients who chat with an AI agent on WhatsApp or a client's website, the client decides how that data is used and we process it on the client's instructions (we are the processor).

What we collect

Account details you give us: name, company, work email and password (stored only as a secure hash by our login provider). Demo content: the chats you have with the demo agent, settings you choose and any documents you upload. Client content: knowledge base documents, order lists, settings and the conversations the agent handles, including the customer's messages, phone number on WhatsApp and any details they choose to share. Technical data needed to run the service, such as a random visitor ID kept in the browser so a chat can continue after a page reload.

How we use it

To run the service: sign you in, answer customers, hand chats over to people, produce reports, quality scores and invoices. To improve the agent for the same client: lessons learned from reviewed chats. Lessons shared across demos contain only short wording rules, never chat text or personal data. We do not sell personal data and we do not use it for advertising.

Personal data in chats

Clients can switch on masking, which hides card numbers, bank account numbers (IBAN) and long ID numbers before a conversation is stored. The agent is instructed never to ask for card numbers, PINs, passwords or one-time codes.

How long we keep it

Each client chooses how long conversations are kept (30 days to 1 year, or until deleted). Older conversations are deleted automatically every night. Demo data is kept for 90 days after the demo ends unless you ask us to delete it sooner. Account details are kept while the account is active.

Who processes data for us

Supabase (database, login and file storage), Vercel (website hosting), Anthropic (the AI model that writes the agent's replies; Anthropic does not train its models on data sent through its commercial API), Meta (WhatsApp, Messenger and Instagram), OpenAI (turning voice notes into text, only when a client uses voice notes), Twilio (phone calls, only when a client uses them), Postmark (email) and Stripe or Paymob (invoice payments). Each processes data only to provide its service to us. The current list is in our data processing agreement.

Where data is stored

Data is stored with our database provider in the region we choose for our account (named in the client's agreement) and may be processed in other countries by the providers above. Where Egyptian Personal Data Protection Law No. 151 of 2020 or Saudi Arabia's Personal Data Protection Law applies to a cross-border transfer, we rely on the safeguards and permissions those laws require, and we tell the client before changing the storage region.

Egypt and Saudi Arabia

For personal data covered by Egypt's Law No. 151 of 2020 and Saudi Arabia's Personal Data Protection Law, we process data only for the purposes above, keep it no longer than needed, protect it as described below, and notify the client without undue delay of any breach affecting their customers so they can meet their own reporting duties.

Your rights

You can ask to see, correct, export or delete your personal data, or object to how we use it, by emailing sales@conversley.com. Customers of our clients should contact the business they chatted with; we will help that business answer the request.

Security

Access to client data is limited to the client's own users and our authorised staff. Admin accounts use two-step login. Passwords are never stored in readable form, connections are encrypted, keys to clients' systems are encrypted at rest and never shown to the AI, every settings change is recorded in an audit log, and data is backed up every night.

Changes

We will update this page when our practices change and show the date of the latest version below.

Questions: sales@conversley.com · Privacy policy · Terms of service