Privacy Policy

Last updated: 21 September 2026

Convo360 is a WhatsApp, chat and AI-calling platform operated by A Plus Solution, India ("we", "us"). This policy explains what we collect when you use convo360.ai and the Convo360 platform at aiagent.convo360.ai, how we use it, where it is stored, and how to have it deleted. It applies to everyone who signs up for Convo360, and to the Google account data of customers who choose to connect Google services.

1. Information we collect

• Account data: name, email, phone, company and billing details you provide when you sign up or subscribe.
• Usage data: logins, device and browser information, IP address, features used, and diagnostic and log data used to operate, secure and improve the service.
• Content & contacts ("Customer Data"): the messages, call recordings and transcripts, flows, knowledge bases, forms and contact lists that you and the people who message you create or upload.
• Connected-account data: credentials and data from services you choose to connect — Google (see section 2), WhatsApp/Meta, your telephony provider, your AI provider keys, payment gateways and e-commerce stores.
• Payment data: handled by our payment gateways (Razorpay, Stripe). We never receive or store full card numbers.
• Cookies: essential cookies to keep you signed in and to remember preferences. We do not use advertising cookies.

2. Google user data

Connecting a Google account is optional and is never required to use Convo360. If you do connect one, this section describes exactly what we access and why. It applies in addition to the rest of this policy.

2.1 What we request, and why

• https://www.googleapis.com/auth/spreadsheets — to read and write the specific Google Sheets you select in your flows: looking up a value to answer a customer (for example a store address or an order status) and appending rows you ask us to write (for example a new lead).
• https://www.googleapis.com/auth/drive.readonly — used for one purpose only: to list the names and IDs of your spreadsheets so you can choose one from a dropdown instead of pasting an ID. We do not open, download, index or store any other file in your Google Drive.
• https://www.googleapis.com/auth/calendar — only if you use appointment booking: to create, read and update the calendar events your bot books.
• https://www.googleapis.com/auth/analytics.readonly and https://www.googleapis.com/auth/webmasters.readonly — only for the Convo360 account owner's own website-traffic dashboard, showing that owner their own Google Analytics and Search Console figures.
• openid, email — to show you which Google account is connected and to attach the connection to the right workspace.

2.2 How we use it

Google user data is used only to perform the actions you have configured in your own flows and settings, at the moment a conversation or a test run requires it. We do not use it for advertising or profiling, we do not use it to train any AI or machine-learning model, we do not sell it, and we do not transfer it to anyone except as described in section 2.4.

2.3 How we store it

Your Google OAuth refresh token is encrypted with AES-256-GCM before it is written to our database; the encryption key is held in the server environment, not in the database. Short-lived access tokens are held in memory only. Values read from your spreadsheet during a conversation are used to build the reply, and may be saved in that conversation's log and flow variables so the chat can be reviewed and continued — that content is deleted with the conversation.

2.4 Who can see it

No Convo360 staff member reads your Google data in the ordinary course of business. Access happens only (a) automatically, by the service, to run your flows; (b) by a named member of our support team with your explicit request or permission, to diagnose a problem you have reported; or (c) where we are legally compelled. Our hosting provider stores the encrypted data at rest as part of hosting the platform.

2.5 Removing it

You can disconnect at any time in Convo360 under Integrations → Google Sheets → Disconnect Google (and, for calendars, Appointments → Google Calendar). Disconnecting revokes the token with Google and deletes the stored credentials from our database immediately. You can also revoke our access independently at myaccount.google.com/permissions. To have data already copied into your conversations or contacts deleted, delete those records in the app or email support@convo360.ai; we complete deletion requests within 30 days.

2.6 Limited Use

Convo360's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Bring-your-own-keys (third parties)

Convo360 runs on a bring-your-own-keys model. When you connect your own AI, voice or telephony provider keys (for example OpenAI, Anthropic, Google, Sarvam, ElevenLabs, or your telephony and WhatsApp providers), the content of your conversations is sent to and processed by those providers under their privacy terms, using your account with them. You are responsible for those accounts and for any consents they require. We store the keys you enter encrypted with AES-256-GCM and use them only to make the calls your bot needs.

4. How we use data

• To provide, operate, secure and improve the platform, and to run the flows and campaigns you build.
• To process payments, send service, billing and lifecycle notifications, and provide support.
• To detect abuse and protect the platform, and to comply with law and enforce our terms.

We process Customer Data on your behalf: you are the controller of your end-users' data and are responsible for collecting and using it lawfully, including obtaining any consent required for messaging them.

5. Sharing and sub-processors

We do not sell personal data. We share it only with the providers needed to run the platform: our hosting provider (InterServer, United States), our payment gateways (Razorpay, Stripe), our transactional email provider, Meta/WhatsApp and the telephony provider you use to deliver messages and calls, and the AI providers whose keys you have connected. We also disclose data where required by law or to protect our rights.

6. Where your data is stored

Convo360's application and database run on servers located in the United States (New York), operated on our behalf by InterServer. If you are in India or elsewhere, using the service involves transferring your data to the United States. We apply the protections described in this policy wherever the data is held.

7. Retention and deletion

We keep account and Customer Data for as long as your account is active. When you delete a record in the app it is removed from the live service. When you close your account, we delete or anonymise your data within 30 days, except where we must keep certain records (for example tax invoices) for the period the law requires. Connected-account credentials, including Google tokens, are deleted as soon as you disconnect.

8. Security

Traffic is served over HTTPS. Secrets and connected-account credentials are encrypted at rest with AES-256-GCM. Access to production systems is restricted and key-based, passwords are stored hashed, sign-in supports two-factor authentication, and databases and uploads are backed up daily to encrypted off-site storage. No system is perfectly secure; we will notify affected users and the relevant authority of a personal-data breach as the law requires.

9. Your rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may request access to, correction of, or deletion of your personal data, withdraw consent, nominate another person to exercise your rights, and raise a grievance. Write to support@convo360.ai and we will respond within 30 days. You may also close your account at any time from the app.

10. Children

Convo360 is a business product and is not directed at children. We do not knowingly collect personal data from anyone under 18.

11. Changes

We may update this policy; the current version is always posted here with its date, and we will tell account owners by email about material changes.

12. Contact

A Plus Solution — Convo360, Mumbai, Maharashtra, India.
Privacy and grievance contact: support@convo360.ai · +91 99301 75512, Monday–Saturday 10 am–7 pm IST.