1. Who we are

Converz is operated by Andrew Baylis Wishart, NIF 60271240Q, Avinguda Rius i Taulet 117, 1-2, 08173 Sant Cugat del Valles, Barcelona, Spain.

For privacy, deletion, or legal questions, contact hello@converz.pro.

2. Controller and processor roles

Converz does not have a single role for all data. When we provide the AI receptionist to a business customer, that customer is generally the controller for caller data handled through its account, and Converz acts as a service provider or processor on the customer's instructions.

Converz acts as its own controller for data relating to our own website, account creation, onboarding, billing, support, demos, security, and internal operations.

3. Categories of personal data we process

• Account and contact data, such as business name, user name, email address, business phone, finance contact details, address, website, tax details, and account preferences.
• Call metadata, such as caller and destination numbers, timestamps, duration, status, technical identifiers, and service costs.
• Call transcripts and transcript text generated from calls handled through Converz.
• Call summaries, categories, intent labels, and related service outputs.
• Support and inquiry data, including contact form messages, support inbox messages, replies, and related attachment metadata.
• Demo and test data, including browser-based voice demo transcripts, summaries, usage indicators, and basic technical metadata.
• Billing and account administration data, including Stripe customer and subscription identifiers, invoices, payments, extra minutes purchases, and lifecycle status.
• Security and operational data, including logs, email event records, and audit records created to operate, secure, troubleshoot, or enforce the service.

4. Purposes of processing

• To provide the Converz service, including answering calls, generating transcripts, storing summaries, and showing call records in the dashboard.
• To configure and administer customer accounts, onboarding, phone numbers, documents, and communication settings.
• To send operational emails, instant call summaries, weekly summaries, support replies, billing messages, and account notices.
• To process payments, subscriptions, renewals, cancellations, invoices, extra minutes purchases, and related account administration.
• To respond to support requests, contact form submissions, complaints, and legal or privacy requests.
• To protect the service, detect abuse, prevent fraud, verify webhooks, troubleshoot incidents, and maintain service integrity.
• To run internal business operations, including support workflows and limited internal notifications needed to operate the service.

5. Legal bases

Depending on the context, we process personal data because it is necessary to perform a contract, to take steps requested before entering into a contract, to comply with legal obligations, or for our legitimate interests in operating, securing, supporting, and improving the service.

Where cookies or similar technologies require consent under applicable law, we rely on your consent for those non-essential technologies.

6. Retention

Some account-level business and contact information is retained while the account remains active and may continue to be retained afterward where needed for billing, legal, security, or lifecycle handling.

• Calls, transcripts, transcript text, and related call records: 90 days.
• Inquiries, support threads, and inquiry messages: 180 days.
• Demo sessions and browser voice test data: 30 days.
• Contact form messages: 90 days.
• Email event logs: 180 days.
• Account lifecycle and cleanup job records may be kept longer for legal, security, operational, and audit reasons.
• Subscription, invoice, payment, and extra minutes purchase records are not deleted under the short retention rules above and may be retained as required for billing, accounting, fraud prevention, dispute handling, and legal compliance.

7. Deletion and account closure

If an account is cancelled or a deletion request is processed, Converz will delete or erase data that is no longer required to provide the service or meet our obligations.

We do not promise that every record can be deleted immediately or completely. Some billing, payment, fraud, security, email event, and audit records may need to be retained. Where external providers store related service artifacts, Converz will make reasonable deletion attempts as part of the applicable workflow.

8. Processors and service providers

• Telnyx for telephony, call routing, AI call handling infrastructure, live voice processing, transcription-related workflows, and document storage used by the service.
• OpenAI for selected AI processing tasks such as text analysis or related service outputs.
• Microsoft Azure for voice synthesis or related speech services where used.
• Speech-to-text providers such as Deepgram where used by Telnyx or the voice pipeline.
• SendGrid for outbound email delivery.
• Stripe for billing, subscriptions, payments, invoices, and related payment administration.
• Slack for limited internal operational notifications and support workflows.
• Hosting and deployment providers used to run Converz.
• PostgreSQL database infrastructure providers used to store service data.

9. International transfers

Converz uses providers that may process data outside the EEA, UK, Switzerland, or the country where a caller or customer is located.

In particular, Telnyx document storage used by Converz is configured in the United States (us-central-1), and other providers such as OpenAI, SendGrid, Stripe, Slack, and infrastructure providers may also process data internationally.

Live voice processing, transcription, AI assistant operation, and voice synthesis may involve processing outside the EEA, including in the United States, depending on provider routing and configuration.

Where required, we rely on contractual, technical, and organizational safeguards intended to support lawful transfers.

10. Security

Converz applies reasonable technical and organizational measures designed to protect personal data, including access controls, webhook verification, retention controls, security logging, and encryption in transit where appropriate.

No system can guarantee absolute security, and customers remain responsible for the data they configure and for their own legal notices and access management within their organizations.

11. Your rights

Depending on where you are located and the role Converz has for the data, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about how your personal data is processed.

If Converz is acting as processor for a business customer's caller data, we may need to direct you to that business customer as the relevant controller.

To submit a request, email hello@converz.pro from or with reference to the account or contact details involved.

12. Complaints

If you are in the EU, you also have the right to complain to your local supervisory authority, including the Spanish Data Protection Authority (AEPD) if relevant.

13. Cookies

Converz uses necessary cookies for core site functionality, sign-in, and security. We may also use optional analytics or similar technologies where allowed and, where required, only after consent.

See our Cookie Policy for more details.