Converly privacy & data

For this group, Converly is the data controller . Visitors to a Converly customer’s website — people who submit forms on a website that has Converly installed. For this group, the website operator who installed Converly is the data controller , and Converly is the data processor acting on their instructions.

Personal information submitted in the form: email address, phone number, first name, last name, and any other fields the website operator chooses to capture

Name and email address (for account creation and product communications)

Billing information (processed by Stripe — Converly does not store full card numbers; we receive only the last four digits and card brand)

The visitor’s IP address and browser user agent

The URL of the page where the form was submitted, and the URL of the page that referred the visitor there

Advertising cookies set by the visitor’s browser (e.g. Facebook’s _fbp and _fbc cookies)

Provide the Converly service: track conversions, display the dashboard, and forward conversion events to the advertising and analytics platforms the customer has connected

Authenticate customers and secure the service

Bill customers (via Stripe)

Send transactional emails (account notifications, billing receipts, password resets)

Diagnose technical issues and investigate abuse

Plaintext personal information (email, phone, first name, last name), IP address, and user agent are stored for 7 days so the website operator can review their conversion activity in the Converly dashboard.

the entire record is then automatically deleted at 30 days .

Customer account data (name, email, company, billing) Retained while the account is active; deleted within 90 days of account closure

OAuth tokens for connected ad platforms Retained while the connection is active; deleted within 7 days of disconnection

Billing records and invoices 7 years (legal and tax requirement)

Server and application logs 30 days

Our infrastructure subprocessors that store or process conversion data are located in the United States (see Section 4.2).

Where required by GDPR, UK GDPR, or other applicable law, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission

We rely on the following third-party service providers (“subprocessors”) to operate Converly. Each is contractually bound by appropriate data-protection terms.

Customers can request earlier deletion of any of their data at any time by emailing privacy@converly.io or by closing their account from within the dashboard.

Access the personal information we hold about you

Correct inaccurate or incomplete information

Delete your personal information

Restrict or object to processing

Receive your information in a portable format

Withdraw consent where processing is based on consent

Opt out of the sale or sharing of personal information (Converly does not sell personal information; this right is provided automatically)

Lodge a complaint with your local data protection authority

We do not : Sell personal information to third parties under any circumstances