Privacy Policy for ConvoSpark

Last Updated: May 28, 2025

ConvoSpark ("ConvoSpark," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, services, and associated Chrome Extension (collectively, the "Services").

Please read this Privacy Policy carefully. By using our Services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Services.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the Services includes:

A. Personal Data:

• Account Information: When you register for an account, we collect information such as your name, email address, and authentication credentials (e.g., via Google OAuth).
• Payment Information: If you subscribe to a paid plan, we (or our third-party payment processor, e.g., PayU India) collect payment information necessary to process your transaction, such as your billing address. We do not directly store your full credit card numbers.
• User Content: We collect information you provide when you use our Services, such as LinkedIn profile URLs you input, campaign parameters (title, description, tone, style), group information, and custom prompts.
• Communications: If you contact us directly, we may receive additional information about you such as your name, email address, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

B. Data Scraped via Chrome Extension:

• When you use our Chrome Extension to scrape LinkedIn profiles as part of a campaign, the Extension collects publicly available data from those LinkedIn profiles as instructed by you. This data may include names, job titles, company information, summaries, experience, education, skills, and other information visible on the profile ("Scraped Profile Data").
• This Scraped Profile Data is stored in our database (Supabase) associated with your account and campaign.

C. AI-Generated Data:

• Our Services use AI (e.g., Groq SDK) to process User Content and Scraped Profile Data to generate new content, such as AI summaries of profiles and personalized messages ("AI-Generated Data"). This AI-Generated Data is also stored in association with your account.

D. Usage Data and Analytics:

• We automatically collect certain information when you access and use the Services. This information may include your IP address, browser type, operating system, device information, access times, pages viewed, links clicked, the referring URL, and your activity on the Services (e.g., features used, scrape counts).
• This information is used for analyzing trends, administering the site, tracking users' movements around the site, and gathering demographic information.

E. Cookies and Similar Tracking Technologies:

• We use cookies, web beacons, and similar tracking technologies to collect information about your interaction with our Services, to remember your preferences (like theme selection via `next-themes`), and to enhance your user experience.
• You can control the use of cookies at the individual browser level. If you reject cookies, you may still use our site, but your ability to use some features or areas of our site may be limited.

2. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide, operate, maintain, and improve our Services.
• Process your transactions and manage your subscriptions.
• Personalize your experience and deliver content and product offerings relevant to your interests.
• Generate AI summaries and personalized messages as requested by you.
• Manage your campaigns and profile data.
• Respond to your comments, questions, and provide customer support.
• Communicate with you about your account, services, updates, security alerts, and administrative messages.
• Monitor and analyze trends, usage, and activities in connection with our Services.
• Detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities, and protect the rights and property of ConvoSpark and others.
• Enforce our Terms of Use.
• Comply with legal obligations.
• For any other purpose with your consent.

3. How We Share Your Information

We may share information we have collected about you in certain situations:

With Service Providers:

We may share your information with third-party vendors, consultants, and other service providers who perform services on our behalf, such as:

• Supabase: For backend infrastructure, database hosting (PostgreSQL), authentication, real-time features, and storage.
• Groq SDK (or other AI providers): For AI processing to generate summaries and messages.
• PayU India (or other payment processors): To process payments.
• Analytics providers (e.g., Google Analytics, if used). These service providers are authorized to use your personal information only as necessary to provide these services to us and are obligated to protect your information.

With Third-Party Platforms (as directed by you):

When you use our Chrome Extension to interact with platforms like LinkedIn (e.g., to scrape profiles, send connection requests, or send messages), information (including AI-Generated Data) is shared with those platforms as part of the intended functionality. Your interactions with these platforms are governed by their respective privacy policies.

For Legal Reasons:

We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation or governmental request; (b) protect and defend the rights or property of ConvoSpark; (c) prevent or investigate possible wrongdoing in connection with the Services; (d) protect the personal safety of users of the Services or the public; or (e) protect against legal liability.

Business Transfers:

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Services of any change in ownership or uses of your personal information.

Aggregated or De-Identified Data:

We may share aggregated or de-identified information, which cannot reasonably be used to identify you, for various purposes, including research, analytics, or improving our Services.

With Your Consent:

We may disclose your personal information for any other purpose with your consent.

We do not sell your personal information to third parties.

4. Data Security

We implement reasonable administrative, technical, and physical security measures designed to protect your information from unauthorized access, use, alteration, and disclosure. For example, we use HTTPS, and our backend provider (Supabase) employs industry-standard security practices. However, please be aware that no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal information.

5. Data Retention

We will retain your personal information for as long as your account is active or as needed to provide you with the Services. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Scraped Profile Data and AI-Generated Data associated with your campaigns will be retained as long as your campaign is active or as per your instructions within the Services. Usage data for free tier users may be deleted upon upgrading to a paid plan or after a period of inactivity, as described in our service documentation.

6. Your Data Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information, such as:

• Access: The right to request access to the personal information we hold about you.
• Correction: The right to request correction of inaccurate or incomplete personal information.
• Deletion: The right to request deletion of your personal information, subject to certain exceptions.
• Objection/Restriction: The right to object to or request restriction of processing of your personal information.
• Data Portability: The right to request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.

To exercise these rights, please contact us at hello@convospark.pro. We will respond to your request within a reasonable timeframe and in accordance with applicable law. You may also be able to access, update, or delete certain information directly through your account settings.

7. Children's Privacy

Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you believe that we might have any information from or about a child under 13, please contact us.

8. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States (where Supabase servers are primarily located) and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

9. Links to Other Websites

Our Services may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. If we make material changes, we will notify you through the Services or by sending you an email or other communication. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: hello@convospark.pro
Website: https://convospark.pro