Privacy Policy

Last updated: September 29, 2026

Introduction

This Privacy Policy describes how Qonvo ("we", "our", or "the Service") collects, uses, and protects your information. We are an independent service provider and are not affiliated with, endorsed by, or connected to Meta Platforms, Inc., WhatsApp LLC, or any of their subsidiaries.

Information we collect

Account information

• Name
• Phone number (used to log in and to verify your account over WhatsApp)
• Email address, if you choose to add one
• Password (stored only as a bcrypt hash)
• Two-factor authentication secrets (encrypted)

WhatsApp integration data

• WhatsApp numbers you connect
• Session keys that keep your linked-device connection active
• Connection status, activity timestamps and number health metrics

Messages and contacts

To provide the inbox, chatbots, campaigns and message history, we store the messages sent and received through your connected numbers (text, captions and media you send or receive), delivery and read receipts, and the contacts, tags and opt-in/opt-out records you manage. Message history is kept for the retention period of your plan and then deleted automatically.

Technical information

• IP addresses and browser information for active sessions
• API usage logs
• Error logs

How we use your information

• Provide the WhatsApp automation service, including sending and receiving messages on your behalf
• Run your chatbots, including sending message text to the AI provider you configure (Anthropic or OpenAI) when AI replies are enabled
• Pace sending and monitor number health to reduce the risk of restrictions
• Track quota usage and enforce plan limits and rate limits
• Prevent abuse and keep the Service secure
• Provide customer support and send service-related notifications

How your WhatsApp works with the Service

You use your own WhatsApp number. Unless you connect a number through the official WhatsApp Business Platform, the Service connects to WhatsApp as a linked device of your number, similar to WhatsApp Web. You can unlink it at any time from Qonvo or from WhatsApp on your phone.

Data sharing and disclosure

We do not sell, rent, or trade your personal information. We share information only with:

• WhatsApp / Meta, to deliver your messages
• AI providers you enable for a chatbot, limited to the conversation text needed to produce a reply
• Infrastructure providers that host the Service
• Payment providers, when you pay for a plan
• Authorities, when required by law or to protect our rights, users, or the public

Data retention

• Account data: while your account is active
• Messages: for your plan's retention period, then deleted automatically
• Session keys: while the number is connected
• Payment records: as required by tax and accounting law

Your rights and data control

You can access and update your information from your dashboard, export data through the API, and delete your account at any time from Settings → Profile. Deleting your account permanently removes your personal information, numbers, session keys, contacts and message history. This cannot be undone.

Security

• Passwords hashed with bcrypt; API keys stored as SHA-256 hashes
• Sensitive secrets encrypted at rest with AES-256-GCM
• HTTPS/TLS for all traffic
• Two-factor authentication for accounts
• Access controls and rate limiting

Children's privacy

The Service is not intended for users under 13. If you believe we collected information from a child under 13, contact us and we will delete it.

International data transfers

Your information may be processed in countries other than your own. By using the Service you consent to such transfers.

Cookies

We use strictly necessary cookies to keep you logged in, protect forms against cross-site request forgery, and remember your theme. We do not use advertising cookies.

Changes to this policy

We may update this policy. We will post the new version here, update the date above, and notify you of material changes.

Compliance

We aim to comply with applicable data protection laws, including the GDPR for EU users and the CCPA for California residents.

Contact

If you have questions about this policy or want to exercise your data rights, contact us through our support channels.