Privacy Policy
Last updated: August 10, 2026
1. Introduction
Magebytes Technologies ("we", "us", or "our") operates the Convorai AI Business Assistant platform ("Convorai", "Service"). This Privacy Policy describes how we collect, use, and share information when you use our Service as a business or when your visitors interact with the Convorai widget.
2. Information We Collect
2.1 Business Account Data
- Name, email address, and password (hashed)
- Business details
- Billing information (processed by Stripe — we do not store card numbers)
- Agent configuration settings
2.2 Visitor Session Data
- Chat messages exchanged with the Convorai widget
- Session identifiers (anonymous UUID, stored in browser cookies)
- Name, email address, and phone number, if voluntarily provided by the visitor
- Qualification or quote details relevant to the visitor's inquiry (e.g. coverage type, budget, or timeline), where the agent is configured to collect them
2.3 Usage & Technical Data
- API request logs (IP address, timestamps, response times)
- Error and performance traces via Sentry
- Widget impression and engagement counts
3. How We Use Information
- To operate and improve the Convorai platform and widget
- To generate AI responses using OpenAI (see Section 5)
- To send transactional emails (escalation alerts, password reset, account updates)
- To enforce usage quotas and billing plans
- To detect abuse and maintain platform security
- To produce anonymised, aggregated analytics for product improvements
4. Data Retention
Chat sessions are retained for 90 days by default and then automatically deleted. Business account data is retained for the lifetime of the account and for 30 days after account closure. You may request earlier deletion by contacting privacy@magebytes.com.
5. Third-Party Services
| Provider | Purpose | Data Shared |
|---|---|---|
| OpenAI | AI response generation | Chat messages, conversation context |
| Sentry | Error monitoring | Stack traces, request metadata |
| Stripe | Payment processing (business billing) | Billing details |
| Brevo | Transactional email | Business/visitor email address |
| HubSpot | CRM sync (if connected by the business) | Contact details, conversation notes |
| Twilio / Meta WhatsApp | WhatsApp channel (if enabled by the business) | Chat messages, phone number |
6. Cookies
The Convorai widget sets a first-party session cookie (relay_session_<id>) scoped to the business's domain to maintain conversation continuity across page loads. No cross-site tracking cookies are used.
7. Your Rights
Depending on your jurisdiction you may have the right to access, correct, delete, or port your data, and to object to or restrict processing. To exercise any of these rights, contact privacy@magebytes.com.
For visitors whose data is processed on behalf of a business, please contact the business directly. We will assist businesss in responding to such requests.
8. Security
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Platform credentials (API keys, access tokens) are encrypted at the field level before storage. Access to production systems is restricted to authorised personnel with MFA.
9. Changes to This Policy
We may update this policy from time to time. We will notify active businesss by email at least 14 days before material changes take effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.
10. Contact
Magebytes Technologies
Privacy Officer: privacy@magebytes.com
Support: support@magebytes.com