Privacy Policy & Data Retention

Quick Navigation

Overview
Data We Collect
Inactive Account Deletion Policy
Data Retention Schedule
Your Rights
Data Security
Contact Us

Overview

At Conversora, we're committed to protecting your data and respecting your privacy. This policy explains how we collect, use, retain, and delete your information. We comply with GDPR, CCPA, and other data protection regulations.

        Key Principle: We only keep data as long as it's necessary to provide our services or as required by law. Inactive accounts are automatically cleaned up to protect your privacy.
      

Data We Collect

Account Information

Store owners: Name, email, phone, business information, payment details
Customers: Name, email, order history, delivery address, preferences
Messages: Chat history, interactions with support

Activity & Analytics

Login timestamps and IP addresses
Product views, purchases, and browsing behavior
Feature usage and engagement metrics
Error logs for troubleshooting

Technical Data

Browser type, device type, operating system
Cookies and tracking pixels for personalization
API access logs

Inactive Account Deletion Policy

To protect your privacy and manage storage efficiently, we automatically delete inactive accounts following this timeline:

The Deletion Lifecycle

Stage	Timeline	Action	Your Options
⚠️ Warning	Day 1	Account inactive 3+ months → Warning email sent	Log in to keep your account
Grace Period	Days 2–7	7-day grace period starts	Log in to prevent deletion
Soft Delete	Day 8	Account marked as deleted (hidden)	Contact support within 7 days to restore
Hard Delete	Day 15+	Data permanently removed	Data cannot be recovered

Exempt Accounts

The following accounts are never auto-deleted, regardless of inactivity:

✓ Accounts with active paid subscriptions
✓ Accounts with pending orders or transactions
✓ Accounts with legal holds or compliance requirements

        Important: You will receive a warning email after 3 months of inactivity. Log in during the 7-day grace period to preserve your account. After Day 15+, data cannot be recovered.
      

Data Retention Schedule by Type

Data Type	Retention Period	Rationale
Account Profile	Until deletion or request	Needed to operate your account
Order & Payment History	7 years	Tax requirements, chargebacks, disputes
Login Activity Logs	90 days	Security monitoring, fraud prevention
Support Tickets & Chats	2 years	Support quality, dispute resolution
Audit Logs	Indefinitely	Compliance, legal holds, security
Cookies & Tracking Data	12 months	Personalization, analytics
Server Backups	30 days	Disaster recovery

Your Privacy Rights

📋 Right to Access

Request a copy of all data we hold about you in a machine-readable format.

✏️ Right to Correct

Ask us to update or fix any inaccurate personal information.

🗑️ Right to Deletion

Request deletion of your data (subject to legal requirements).

🚫 Right to Opt-Out

Disable marketing emails, tracking cookies, and analytics.

📤 Right to Data Portability

Export your data in standard formats (CSV, JSON).

⚖️ Right to Appeal

Challenge deletion decisions or file complaints with data protection authorities.

        To Exercise Your Rights: Email privacy@conversora.io. We'll respond within 30 days.
      

Data Security

We protect your data using industry-standard security measures:

🔒 End-to-end encryption for sensitive data
🛡️ TLS/SSL for data in transit
🔐 Role-based access control
📊 Regular security audits and penetration testing
📱 Automatic backup and disaster recovery
🚨 Real-time monitoring for suspicious activity

Contact Us

Privacy Team: privacy@conversora.io

Data Protection Officer: dpo@conversora.io

Response Time: We aim to respond to all privacy requests within 30 days.

For GDPR data subject requests, please include:

Your name and email
Description of your request
Your account ID or store slug
Proof of identity (for data access requests)

Last Updated: September 3, 2026

This policy is effective immediately. We may update this policy periodically. Significant changes will be announced via email or website notice.