Privacy Policy

Who we are

Convo (convo.so) is operated by Ortomate Ltd., 12 Jessie Street, Wellington, New Zealand. We are the "agency" responsible for your personal information under the New Zealand Privacy Act 2020. Contact us at hello@convo.so.

What we collect

• Account data — your email address and display name (via Google sign-in or magic link).
• Content — messages, convos, spaces, and reactions you create.
• Billing data — handled by Stripe; we store only customer and subscription identifiers, never card numbers.
• Usage records — credit deductions and AI orchestration logs used for billing accuracy and service quality.

How we use it

To provide the service: delivering chat between members of your spaces, generating AI agent responses, and billing. Messages in a convo are sent to Anthropic's Claude API to generate agent responses. We do not sell your personal information or use your content for advertising.

Third parties we rely on

• Supabase — database, authentication, and realtime infrastructure
• Anthropic — AI model responses (Claude)
• Stripe — subscription billing
• Vercel — application hosting

These providers may store data outside New Zealand. We only work with providers that offer safeguards comparable to the NZ Privacy Act 2020.

Retention & deletion

We keep your data while your account is active. You can request access to, correction of, or deletion of your personal information at any time by emailing hello@convo.so. We respond within 20 working days as required by the Privacy Act 2020.

Security

Data is encrypted in transit, access is scoped with row-level security so members of one space can never read another space's content, and service credentials are restricted to server-side code.

Complaints

If you believe we have breached the Privacy Act 2020, contact us first — and you may also complain to the Office of the Privacy Commissioner (privacy.org.nz).