Privacy Policy

1. Introduction

Convertlr ("we," "our," or "us") is a WhatsApp Business CRM designed for small businesses. We help you organize conversations, manage contacts, track leads, and visualize your sales pipeline — all within a simple dashboard that connects to your WhatsApp Business account.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the controls you have over your data. We are committed to transparency and only access data that you explicitly authorize.

2. Information We Collect

2.1 Account Information

When you create a Convertlr account, we collect:

• Your name and email address
• Business name and details you provide
• Billing information (for paid plans)
• Team member information you add to your account

2.2 WhatsApp Business Data

When you connect your WhatsApp Business account through Meta's authorization flow, we access the following data via Meta's official WhatsApp Business API:

• Message content: The text of messages sent to your WhatsApp Business number. We process this to display conversation history within your CRM dashboard.
• Message metadata: Information about messages including timestamps, sender information, and message status.
• Contact information: Names, phone numbers, and profile information of customers who have contacted your WhatsApp Business number.
• Business information: Your WhatsApp Business profile details and settings.

2.3 Automatically Collected Data

When you use Convertlr, we automatically collect:

• Usage data (features accessed, time spent, clicks)
• Device information (browser type, operating system)
• Log data (access times, referring URLs)
• Cookies as described in Section 10

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Core CRM Functionality

• Displaying your WhatsApp conversation history in the CRM dashboard
• Organizing contacts with tags, notes, and company information
• Managing your sales pipeline (New, In Progress, Completed, Cancelled)
• Tracking leads and monitoring stale conversations
• Attaching notes and order details to contacts

3.2 Team Collaboration

• Sharing contact notes across your team members
• Providing shared access to conversation history
• Attributing actions to specific team members

3.3 Analytics and Insights

• Generating revenue and conversion analytics
• Tracking response times and team performance
• Displaying pipeline metrics and trends

3.4 Communication

• Sending account-related notifications (alerts, updates)
• Responding to your support requests
• Alerting you about stale leads requiring follow-up

3.5 What We Do NOT Use Your Data For

4. WhatsApp / Meta Integration

Convertlr connects to your WhatsApp Business account exclusively through Meta's official WhatsApp Business API. Here's how the authorization process works:

4.1 Authorization Flow

1. You initiate the connection from within Convertlr
2. You are redirected to Meta's official embedded signup flow
3. You log in with your Meta account and grant permission to Convertlr
4. Meta confirms your authorization and provides an access token
5. Convertlr uses this token to access your WhatsApp Business data via Meta's API

4.2 Data Access Scope

After authorization, Convertlr can access:

• Messages sent to your WhatsApp Business number (after authorization)
• Contact information of customers who messaged your business
• Business profile information and settings

4.3 Meta's Role

Meta operates the WhatsApp Business API and is responsible for the underlying platform. When you use Convertlr, you are also bound by Meta's Terms of Service and Privacy Policy. We encourage you to review Meta's policies at whatsapp.com/legal/privacy-policy/.

5. Data Sharing

We take privacy seriously and do not sell, trade, or rent your personal information or WhatsApp data to third parties.

5.1 Service Providers

We share data with trusted service providers who help us operate Convertlr:

• Cloud hosting providers (for data storage)
• Analytics services (for product improvement, using only aggregated, non-identifiable data)
• Payment processors (for billing, if you have a paid plan)

These providers are contractually bound to protect your data and use it only for the services they provide.

5.2 Legal Requirements

We may disclose your information if required by law, such as in response to a valid legal request, court order, or government investigation.

5.3 Business Transfers

If Convertlr is acquired or merged, your information may be transferred as part of that transaction. We will notify you via email or prominent notice before your data becomes subject to a different privacy policy.

5.4 What We Never Share

• We never sell your data to advertisers or data brokers
• We never share your message content with third parties
• We never use your data for advertising targeting
• We never share individual-level data with anyone outside our service providers

6. Data Retention

We retain your data for as long as your Convertlr account is active and for a period afterward to ensure continuity of service and compliance with legal obligations.

6.1 Retention Periods

• Account data: Data is retained for the duration of your subscription and up to 30 days after account closure, unless you request earlier deletion.
• WhatsApp message data: Retained for the duration of your subscription plus 30 days after account closure
• Contact information: Retained until you delete contacts or close your account
• Analytics data: Aggregated and anonymized after 12 months
• Support correspondence: Retained for 2 years

6.2 Deletion Requests

When you request deletion of your data, we will remove your personal information and WhatsApp data within 30 days of your request. Some data may be retained for longer periods if required by law, but it will not be used for any other purpose.

7. How to Delete Your Data

You have full control over your data. Follow these steps to delete your Convertlr account and all associated data:

Step-by-Step Deletion Process

1. Log into your Convertlr account at app.convertlr.com
2. Navigate to Settings (click your profile icon in the top-right corner)
3. Click "Account" or "Billing" depending on your needs
4. Scroll to the bottom of the pageand click "Delete Account"
5. Confirm your decisionby typing "DELETE ACCOUNT" when prompted
6. Wait for confirmation email — click the link within 48 hours to confirm deletion

What Happens When You Delete

• Your Convertlr account is closed within 30 days
• All WhatsApp Business data sync stops immediately
• Your contacts and message history are deleted from our servers
• Team member access is revoked

Disconnecting WhatsApp

If you only want to stop Convertlr from accessing your WhatsApp data without deleting your account:

1. Go to WhatsApp Page Section → WhatsApp Account Connected in your Convertlr dashboard
2. Click "Disconnect WhatsApp"
3. Confirm the disconnection

Note: Disconnecting WhatsApp will stop new message syncs but does not delete historical data already collected. Contact support if you want historical data removed.

Need Help?

If you have trouble deleting your account or need immediate data removal, contact us at privacy@convertlr.com. We respond to all deletion requests within 72 hours.

8. Data Security

We implement industry-standard security measures to protect your data from unauthorized access, loss, or misuse.

8.1 Technical Safeguards

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher
• Encryption at rest: Sensitive data stored on our servers is encrypted using AES-256 encryption
• Access controls: Role-based access control limits data access to authorized personnel only
• Secure API connections: All Meta API communications use OAuth 2.0 authentication and secure HTTPS connections

8.2 Organizational Safeguards

• Regular security training for our team members
• Limited access to production systems (principle of least privilege)
• Annual third-party security audits
• Incident response procedures in place

8.3 What You Can Do

• Use a strong, unique password for your Convertlr account
• Enable two-factor authentication if available
• Review which team members have access to your account
• Disconnect integrations you no longer use

9. Your Rights

You have control over your personal data. Here's a summary of your rights:

9.1 Access

You can request a copy of all data we hold about you, including your account information and WhatsApp Business data. We'll provide this in a portable format within 30 days of your request.

9.2 Correction

If your personal information is inaccurate or incomplete, you can update it directly in your account settings or contact us to correct it.

9.3 Deletion

You can delete your account and all associated data at any time. See Section 7 for the deletion process.

9.4 Portability

You can export your contacts, pipeline data, and analytics in CSV format from your dashboard. For full data portability including message history, contact us.

9.5 Withdraw Authorization

You can disconnect Convertlr from your WhatsApp Business account at any time through Meta's settings or our dashboard. This immediately stops new data syncs.

9.6 Objection

If you object to how we process your data for specific purposes, contact us. We'll work to address your concerns.

9.7 Contact for Rights Requests

To exercise any of these rights, email privacy@convertlr.com with your request. We will respond within 30 days.

10. Cookies and Tracking

Convertlr uses cookies and similar technologies to operate our service and improve your experience.

10.1 Essential Cookies

These cookies are necessary for the service to function:

• Authentication cookies (to keep you logged in)
• Session cookies (to remember your preferences)
• Security cookies (to protect against fraud)

10.2 Analytics Cookies

We use analytics tools to understand how visitors use Convertlr. These collect information like:

• Pages visited and features used
• Time spent on the application
• Device and browser type

This data is aggregated and does not identify individual users.

10.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect the functionality of Convertlr.

10.4 Third-Party Cookies

We may use third-party services (e.g., analytics providers) that set their own cookies. These are governed by the third party's privacy policy, not ours.

11. Children's Privacy

Convertlr is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

If you believe a child has provided us with personal data, please contact us immediately at privacy@convertlr.com. Upon verification, we will delete such data promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements.

When we make significant changes:

• We will notify you via email at least 30 days before the changes take effect
• We will update the "Last updated" date at the top of this page
• For material changes, we will display a prominent notice in the application

Your continued use of Convertlr after changes take effect constitutes acceptance of the updated policy.

If you do not agree to the changes, you may delete your account before the changes take effect.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, we're here to help:

General Inquiries

Email: hello@convertlr.com
Response time: Within 2 business days

Data Protection Inquiries

Email: privacy@convertlr.com
Subject line:"Data Protection Request"

Security Issues

Email: security@convertlr.com
For urgent security concerns: Contact us immediately

Convertlr

Convertlr is an independent product and is not affiliated with or endorsed by WhatsApp or Meta. WhatsApp integration uses Meta's official WhatsApp Business API.