π‘οΈ Introduction
Convexa is operated by Unique Game Studio BiliΕim Hizmetleri San. Tic. Ltd. Εti., TΓΌrkiye ("we", "us"). We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp and Instagram integration platform for Shopify and the Convexa Mobile app for iOS and Android.
TL;DR: We only collect data necessary to provide our service. We never sell your data to third parties. You have full control over your information.
π Data We Collect
Account Information
- Shopify store domain and credentials
- Email address for account notifications
- Business name and contact information
- WhatsApp Business Account credentials
- Instagram account information (if connected)
Customer Communication Data
- WhatsApp message content and metadata
- Instagram direct messages and comments
- Customer phone numbers and contact details
- Conversation history and timestamps
- Media files (images, videos, documents)
Usage Data
- App interaction and feature usage patterns
- Automation and campaign performance metrics
- API request logs and response times
- Error logs and debugging information
- A log of account actions (such as sign-ins and staff changes) with IP address and device, kept for about one year
π± Convexa Mobile App
Accounts are created in the Convexa panel in Shopify; the app does not create accounts. When you use the app we process:
- Account details: your name, email address and staff or user identifiers.
- Conversations: the messages you send and read, and your customers' names and phone numbers.
- Photos, videos, voice recordings and files: only the items you choose to send. The camera and microphone are used only when you start that action.
- Device data: a push notification token, device model and IP address, used to deliver notifications and keep your account secure.
- Subscriptions: your package, its status and purchase identifiers from the App Store or Google Play. Payments are handled by Apple and Google; we never receive your card details.
Advertising
The app shows ads through Google AdMob unless your package removes them. Google may collect your advertising ID or other device identifiers, approximate location derived from your IP address, ad and app interactions, and diagnostic data, to show and measure ads and prevent fraud. See how Google uses this data. On iOS you are asked for permission before tracking. On Android you can reset or delete your advertising ID in your device settings.
βοΈ How We Use Your Data
π Service Delivery
Process and route WhatsApp/Instagram messages, manage customer conversations, execute automations, and sync data with your Shopify store.
π Analytics & Insights
Generate reports on message performance, customer engagement, conversion rates, and campaign effectiveness to help you optimize your business.
π§ Service Improvement
Analyze usage patterns to improve features, fix bugs, enhance AI chatbot responses, and develop new functionality based on user needs.
π‘οΈ Security & Compliance
Detect and prevent fraud, ensure platform security, maintain service integrity, and comply with legal requirements and Meta's platform policies.
π€ Data Sharing & Disclosure
We DO NOT sell your data to third parties.
We share data only with:
- Meta Platforms: WhatsApp and Instagram message data is transmitted through Meta's Business APIs to deliver messages to your customers.
- Shopify: Order and customer data is synced with your Shopify store as necessary for order processing and customer management.
- Hosting: Hetzner, which hosts our servers and databases.
- Google: AdMob for ads in the mobile app, Google Play for subscriptions, and Firebase Cloud Messaging for Android notifications.
- Apple: App Store subscriptions and notifications on iOS.
- Expo: delivery of push notifications to the mobile app.
- OpenAI: message content, when a merchant turns on the AI chatbot, to generate replies.
- Legal Compliance: Government authorities when required by law, court order, or legal process.
π Security Measures
We implement industry-standard security measures to protect your data:
π
Encryption
TLS/SSL encryption for data in transit, encrypted storage for sensitive credentials
π
Access Control
Role-based access, secure authentication, API token management
π
Audit Logs
Comprehensive logging, activity monitoring, security event tracking
π‘οΈ
Regular Audits
Security assessments, vulnerability scans, compliance reviews
β
Your Rights (GDPR & CCPA)
ποΈAccess
Request a copy of all data we hold about you
βοΈRectification
Correct any inaccurate or incomplete data
ποΈDeletion
Request deletion of your personal data
π¦Portability
Export your data in a machine-readable format
βΈοΈRestriction
Limit how we process your data
π«Objection
Object to certain types of processing
To exercise any of these rights, including deleting your account and its data, email us from your account's address at support@getconvexa.com. We may keep records that the law requires us to retain, such as billing records.
πͺ Cookies & Tracking
We use cookies and similar technologies to improve your experience:
- Essential Cookies: Required for authentication and core functionality
- Analytics Cookies: Help us understand how you use the platform
- Preference Cookies: Remember your settings and preferences
You can control cookies through your browser settings. Note that disabling essential cookies may impact platform functionality.