← Back to home

Privacy Policy

Last updated: March 17, 2026

1. What we collect

We collect the following data:

  • Account data: Email address, name, and profile information you provide when signing up.
  • Content you upload: Documents (PDF, DOCX, TXT), URLs, and text you provide to train your chatbot. This content is processed, chunked, and stored to power your bot's responses.
  • Chat data: Conversations between your website visitors and your chatbot, including query text, responses, and session identifiers.
  • Lead data: When lead capture is enabled, we store emails, names, companies, and qualifying answers provided by visitors during conversations.
  • Usage data: Query counts, analytics, timestamps, and performance metrics to provide insights and enforce plan limits.

2. How we use your data

  • To provide, maintain, and improve the Service
  • To process your content and generate chatbot responses
  • To capture and score leads on your behalf
  • To generate analytics and insights for your dashboard
  • To enforce subscription plan limits
  • To send you important service updates (not marketing)
  • To respond to your support requests

We do not sell your data. We do not use your content to train our models.

3. Third-party services

We use the following third-party services:

  • Supabase: Database, authentication, and file storage. Your data is stored in Supabase-managed infrastructure.
  • Language model providers: Your content and queries are sent to language model APIs to generate responses. These providers process data according to their own privacy policies but do not retain your data for training.
  • Vercel: Frontend hosting and edge delivery.

4. Data security

  • All data is transmitted over HTTPS
  • Database access is protected by Row Level Security (RLS), ensuring users can only access their own data
  • Widget tokens are hashed before storage
  • Widget tokens support domain restrictions
  • Uploaded files are stored in private buckets with access control

5. Data retention

Your uploaded content and bot configuration are retained as long as your account is active. Chat query logs are retained based on the retention period you configure per bot (default: 90 days). When you delete a bot, all associated data (sources, chunks, queries, leads) is permanently deleted. When you delete your account, all your data is removed within 30 days.

6. Your rights

You have the right to:

  • Access your data through the dashboard and API
  • Export your leads as CSV
  • Delete your bots, sources, and leads at any time
  • Delete your account entirely
  • Request a copy of all your data by emailing us

7. Cookies

Convot uses essential cookies for authentication (session tokens). The embedded chat widget uses localStorage to persist session IDs and chat history on the visitor's device. We do not use tracking cookies or third-party advertising cookies.

8. Widget visitor data

When visitors interact with your chatbot widget, we collect their queries, the page URL, and a locally-generated session ID. If lead capture is enabled, visitors may voluntarily provide their email, name, and company. This data is accessible to you (the bot owner) through your dashboard. Visitors can clear their chat history by clearing their browser's localStorage.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or through the Service.

10. Contact

Questions about your data or this policy? Email us at convot@singlebit.xyz.