Privacy policy

konvo is a service for businesses. We receive conversations from Instagram, Telegram, and website chats, respond to them using AI, and show the results in your dashboard.

We do not sell your data or share them with third parties for advertising purposes.

Your account. When you sign in with Google, we receive your name, email address, and profile picture from Google. We never receive your password.

Connected channels. When you connect Instagram or Telegram, we store the channel identifier and access token. The token is stored encrypted.

Your customers’ conversations. We store message text, the sender’s channel identifier and displayed name, and replies sent by you or AI. A phone number is stored if the customer provides one.

Knowledge base. Text about products, prices, and business rules that you add to the dashboard.

Technical information. Session cookies and server logs (request time, address, and IP address).

• Automatically reply to your customers and show conversations in the dashboard
• Run the funnels you configure and send reminders
• Maintain your contact database and display statistics
• Operate the service and diagnose technical issues

Conversations are not used for advertising and are not shown to other customers.

Only the providers below, where sharing is necessary to operate the service:

• Meta (Instagram) — to receive and send messages. Meta Platform Terms apply.
• Telegram — to exchange messages through the bot.
• Google — to sign in (authentication only).
• AI provider — conversation text is sent to prepare a response. The provider is accessed through OpenRouter.
• Amazon Web Services — servers (Frankfurt, EU).

We do not share data with anyone else unless required by law.

We keep information while your account is active. If you delete your account, all associated conversations, contacts, and tokens are permanently deleted within 30 days. Server logs are automatically deleted after 90 days.

• Request a copy of your data
• Correct inaccurate information
• Delete your account and all associated data
• Disconnect a connected channel at any time

You can also revoke the Instagram connection in the Instagram app: Settings → Website and app permissions. We will delete the related token immediately after revocation.

To request data deletion, email 23komilov@gmail.com. We will process the request within 30 days.

• All traffic is encrypted over HTTPS
• Channel tokens are encrypted in the database using AES-256-GCM
• Session tokens are stored in the database only as SHA-256 hashes
• Instagram webhook requests are verified using a digital signature

Even so, we want to be clear: no information transmitted over the internet can be guaranteed to be 100% secure.

The service is intended for entrepreneurs aged 18 and over. We do not knowingly collect information from children.

If this policy changes, we will update the date on this page. We will notify you of material changes by email.