Introduction

ConvoKit is an AI chatbot builder for sales, customer support, and user engagement. We understand that you are aware of and care about your own personal privacy interests, and we take that seriously. This Privacy Notice describes ConvoKit’s policies and practices regarding its collection and use of your personal data, and sets forth your privacy rights. We recognize that information privacy is an ongoing responsibility, and so we will from time to time update this Privacy Notice as we undertake new personal data practices or adopt new privacy policies.

Contacting Us About Data Protection

ConvoKit is headquartered in Stockholm, Sweden. For any inquiries or concerns regarding our personal data policies, practices, or if you wish to exercise your privacy rights, please feel free to reach out directly to our dedicated Privacy Team. Our team is equipped and committed to assisting you with any questions you might have and ensuring your data is handled with the utmost care and respect.

Privacy Team Contact Information:
RYCode AB
support@rycode.io

How we collect and use (process) your personal information

ConvoKit collects personal information about its website visitors and customers. With a few exceptions, this information is generally limited to:

• Name
• Email
• Phone Number
• Company Name

We use this information to provide prospects and customers with services. We do not sell personal information to anyone and only share it with third parties who are facilitating the delivery of our services.

Use of the ConvoKit Website

As is true of most other websites, ConvoKit’s website collects certain information automatically and stores it in log files. The information may include internet protocol (IP) addresses, the region or general location where your computer or device is accessing the internet, browser type, operating system, and other usage information about the use of ConvoKit’s website, including a history of the pages you view. We use this information to help us design our site to better suit our users’ needs. We may also use your IP address to help diagnose problems with our server and to administer our website, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences.

ConvoKit has a legitimate interest in understanding how members, customers, and potential customers use its website. This assists ConvoKit with providing more relevant products and services, communicating value to our sponsors and corporate members, and providing appropriate staffing to meet member and customer needs.

Sharing information with third parties

The personal information ConvoKit collects from you is stored in one or more databases hosted by third parties located in Europe. These third parties do not use or have access to your personal information for any purpose other than cloud storage and retrieval. On occasion, ConvoKit engages third parties to send information to you, including information about our products, services, and events.

We do not otherwise reveal your personal data to non-ConvoKit persons or businesses for their independent use unless:

• you request or authorize it;
• it’s in connection with ConvoKit-hosted and ConvoKit co-sponsored conferences as described above;
• the information is provided to comply with the law (for example, compelled by law enforcement to comply with a search warrant, subpoena, or court order), enforce an agreement we have with you, or to protect our rights, property, or safety, or the rights, property, or safety of our employees or others;
• the information is provided to our agents, vendors, or service providers who perform functions on our behalf;
• to address emergencies or acts of God; or
• to address disputes, claims, or to persons demonstrating legal authority to act on your behalf.

We may also gather aggregated data about our services and website visitors and disclose the results of such aggregated (but not personally identifiable) information to our partners, service providers, advertisers, and/or other third parties for marketing or promotional purposes.

Data Subject rights

The European Union’s General Data Protection Regulation (GDPR) and other countries’ privacy laws provide certain rights for data subjects. Data Subject rights under GDPR include the following:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right of data portability
• Right to object
• Rights related to automated decision making including profiling

This Privacy Notice is intended to provide you with information about what personal data ConvoKit collects about you and how it is used. If you wish to confirm that ConvoKit is processing your personal data, or to have access to the personal data ConvoKit may have about you, please contact us.

Data Protection Mechanisms

At ConvoKit, we implement robust data protection mechanisms to safeguard your sensitive information:

• Access Control: We employ user roles and permissions to ensure that only authorized personnel can access sensitive data.
• Rate Limiting: To protect against abuse, we implement rate limiting on our chatbots, controlling the number of requests per user.
• Domain Allowlist: We provide controls to specify which domains your chatbot can be embedded on, adding an extra layer of security.
• Infrastructure Security: Our database and application run on Digital Ocean (FRA1) and AWS infrastructure (eu-central-1), managed by reputable providers including Supabase, Digital Ocean and AWS, ensuring state-of-the-art cloud security practices.

These measures ensure that data confidentiality, integrity, and availability are maintained throughout its lifecycle.