Privacy Policy

Effective Date: October 22, 2025

1. Introduction

Welcome to ConvoBolt ("ConvoBolt," "we," "our," or "us"). We are committed to protecting your privacy and handling your personal data transparently. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform that provides AI-assisted comment replies for YouTube channels (the "Service").

Our Service integrates with YouTube API Services. By using ConvoBolt, you are subject to this Privacy Policy and also agree to be bound by the Google Privacy Policy, which can be found at http://www.google.com/policies/privacy. This Policy is designed to comply with major privacy regulations, including GDPR and CCPA. Our use of Google user data is strictly limited to providing and improving the Service's user-facing features.

2. Definitions

• Personal Data: Information that relates to an identified or identifiable individual.
• Usage Data: Data collected automatically from the Service or its infrastructure.
• Data Controller: Determines purposes and means of processing personal data.
• Data Processor: Processes personal data on behalf of the controller.
• Data Subject: A person who uses the Service and is the subject of Personal Data.
• GDPR / CCPA / AI / YouTube API Services as commonly defined.

3. Information We Collect

3.1 Personal Data

• Account Information: name, email, login credentials.
• Billing Information: handled by Stripe; we do not store full card details.
• YouTube Channel Information: channel name, channel ID, and related data obtained through YouTube API Services.
• User-Generated Content: comments you reply to and approved AI-generated replies.

3.2 Usage Data

Includes IP address, browser details, pages visited, timestamps, device identifiers, and diagnostics for the purpose of improving service functionality and security.

3.3 Information from Third-Party Integrations

• YouTube API Services
• Google/Firebase
• Stripe

4. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and operate the Service.
• To improve and personalize the Service, including the development of brand-voice aligned AI replies.
• To communicate with you about your account and to provide important service-related notices. We do not use your information for marketing or promotional communications.
• For security, fraud prevention, and compliance with applicable laws.
• To generate AI-assisted replies, which you must approve before any content is sent to your YouTube channel.
• We do not use Google user data for advertising or marketing purposes.

5. Compliance with Google API Services User Data Policy

Our use and transfer of information received from Google APIs will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements. We are committed to the following principles regarding Google user data:

• We will only use the data to provide or improve user-facing features that are prominent in our application's user interface.
• We will not transfer user data to third parties, except as necessary to provide or improve our user-facing features, for security purposes, to comply with applicable laws, or as part of a merger, acquisition, or sale of assets with the user's explicit prior consent.
• We will not use or transfer user data for serving ads, including retargeting, personalized, or interest-based advertising.
• We will not allow human access to raw Google user data except in the limited circumstances described above (with the user’s consent, for security or legal reasons, or for debugging abuse). Human access never occurs for routine operations.
• We do not use Google user data for advertising, retargeting, cross-context behavioral advertising, or profiling.
• We do not use or transfer Google user data to train, retrain, or improve generalized or personalizable AI/ML models (including large language models). Any processing of Google user data is solely to provide or improve ConvoBolt's user-facing features (e.g., generating an on-screen draft reply for the user to review and send).
• We do not sell or "share" Google user data as those terms are defined under applicable privacy laws (e.g., CCPA/CPRA).
• Data deletion on disconnect or account deletion: When a user disconnects their Google/YouTube account or deletes their ConvoBolt account, we delete stored Google user data associated with that user within 30 days, except where retention is required by law.

6. Data Sharing and Disclosure

We may share your information in the following limited circumstances:

• With Service Providers: We may share your information with third-party vendors and service providers that perform services on our behalf, such as cloud hosting (Google Cloud/Firebase) and payment processing (Stripe). These providers are contractually obligated to safeguard your data and are prohibited from using it for any other purpose.
• For Legal Reasons: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, or in urgent circumstances to protect the personal safety of users of the Service or the public.
• With Your Consent: We may disclose your information for any other purpose with your explicit consent.

7. Data Retention and Security

7.1 Data Retention

We retain Personal Data only for as long as necessary to provide the Service and for the purposes described in this Privacy Policy, or as required by law.

7.2 Data Security

We implement appropriate technical and organizational measures to protect your Personal Data against accidental or unlawful destruction, loss, change, or damage. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

8. Data Deletion and Revocation of Access

You have the right to delete your account and associated data, and to revoke our access to your YouTube channel data at any time.

• Data Deletion: You can delete your account and all associated data directly from your account settings page within the ConvoBolt application. Upon receiving a deletion request, we will erase your personal data from our systems within 30 days, unless retention is required by law.
• Revocation of Access: You can revoke ConvoBolt's access to your Google and YouTube data at any time by visiting the Google Security Settings page at https://myaccount.google.com/connections. Once you revoke access, we will no longer be able to access your YouTube data, and we will delete the associated stored data as per our retention policy.

9. Your Data Protection Rights

8.1 GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights, including the right to access, correct, update, or request deletion of your personal data.

8.2 CCPA

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is being collected about you, to know whether your personal information is sold or disclosed and to whom, to say no to the sale of personal information, to access your personal information, and to equal service and price, even if you exercise your privacy rights.

9. Cookies and Tracking Technologies

We and our third-party partners may store, access, and collect information directly or indirectly on or from your device. This is done by placing, accessing, or recognizing cookies or similar technologies on your device or browser. These technologies are used to track activity on our Service, hold certain information for functionality (like session management), and help us improve the platform. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

10. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If we become aware that we have collected Personal Data from a child under 18 without verification of parental consent, we will take steps to remove that information from our servers.

11. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and may notify you via email and/or a prominent notice within our Service, prior to the change becoming effective.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: support@convobolt.com
• Website: https://convobolt.com/support