1.Who we are
Conversiq Limited ("Conversiq", "we", "us", "our") is a company registered in New Zealand (NZBN: 9429053650702), with its registered office at 8 Gilliam Street, New Lynn, Auckland. We operate the Conversiq platform at Conversiq.io and app.Conversiq.io.
We are the data controller for personal information we collect about you when you visit our site or sign up as an operator. When we send messages on behalf of a business that uses our platform ("Tenant"), the Tenant is the data controller for that business's customers, and Conversiq acts as data processor.
For privacy enquiries, contact our Privacy Officer: privacy@Conversiq.io.
2.What this policy covers
This policy explains:
- What personal information we collect
- Why we collect it and the legal basis
- Who we share it with
- How long we keep it
- Your rights and how to exercise them
This policy is governed by the New Zealand Privacy Act 2020. If you contact us from the EU/UK, the GDPR also applies. If you contact us from California, the CCPA also applies.
3.Information we collect
From Tenants (operators using our dashboard)
- Name, email address, business name and contact details
- Login credentials (we use magic-link authentication, no passwords stored)
- Billing information (handled by Stripe; we do not store card details)
- Business hours, trade type, agent configuration choices
- Phone numbers used for voice forwarding and WhatsApp messaging
From customers (end users who interact with a Tenant via our platform)
When you message a Tenant or call their business number, we collect:
- Your phone number
- The content of your messages (SMS, WhatsApp)
- The date, time, and duration of calls (we do not record call audio)
- Any media you send via WhatsApp (photos, documents)
- Job-related details you share (address, description of work)
- Your opt-in and opt-out status
We collect this only when:
- You call a Tenant's business number (your number is provided by your phone carrier), or
- You send a message to a Tenant's WhatsApp or SMS number, or
- You enter your phone number into a Tenant's website form with explicit consent to receive WhatsApp messages
Automatically collected
- IP address, browser type, device type (for our marketing website only)
- Cookies for session management (operators only), see Section 10
4.How we use your information
For Tenants
- Provide the Conversiq service
- Authenticate operator logins
- Process payments through Stripe
- Send operational emails (weekly summaries, missed call digests, billing notifications)
- Send marketing emails (only if you opt in)
For customers of Tenants
- Send AI-generated replies to your messages on behalf of the Tenant
- Send a single follow-up WhatsApp message after a missed call (using a pre-approved template)
- Capture job details and pass them to the Tenant
- Sync job records to the Tenant's CRM if they use one
- Honour your opt-out
5.Legal basis for processing (GDPR)
If GDPR applies to you:
- Performance of a contract: to provide the service to Tenants
- Legitimate interests: to operate, secure, and improve the platform
- Consent: for marketing emails and for sending WhatsApp messages to customers who opt in via a website form
- Legal obligation: to comply with NZ unsolicited messaging law, tax law, and law enforcement requests
6.Who we share information with
We share personal information only with the following categories of third parties, each bound by contract to use the information only for the purposes we direct:
| Provider | Purpose | Data shared |
|---|---|---|
| Twilio Inc. | SMS, WhatsApp, voice infrastructure | Phone numbers, message content, call metadata |
| Meta Platforms (WhatsApp) | WhatsApp message delivery | Phone numbers, message content (per WhatsApp Business Platform terms) |
| Stripe Inc. | Subscription billing | Operator name, email, billing address |
| OpenAI, Anthropic, Google, Mistral | Generating AI replies | Message content, conversation history (per their data processing terms) |
| Resend | Sending operational emails | Email addresses, message body |
| Sentry | Error monitoring | Limited error metadata (we scrub personal data before sending) |
| Langfuse | LLM observability | Message content (encrypted; used only by us) |
| CRM providers (ServiceM8, Tradify, Fergus, AroFlo) | Optional CRM sync | Job details, customer phone and address (only for the Tenant's own CRM, at their direction) |
| Railway, Vercel | Hosting | All processed data, encrypted in transit and at rest |
We do not sell personal information. We do not share it for advertising or marketing by third parties.
7.International transfers
Some of our processors (notably Twilio, Meta, OpenAI, Anthropic, Stripe) process data in the United States and other countries. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
8.How long we keep your information
| Data | Retention |
|---|---|
| Operator account data | While your account is active + 7 years (tax law) |
| Customer messages and call records | 24 months from the last message, then deleted |
| Captured job records | While the linked Tenant is active + 24 months |
| Opt-out records | Permanently, required by NZ law to honour opt-outs |
| Billing records | 7 years (NZ tax law) |
| Error logs | 30 days |
You can request earlier deletion, see Section 9.
9.Your rights
Under the NZ Privacy Act 2020 (and GDPR/CCPA where applicable), you have the right to:
- Access the personal information we hold about you
- Correct information that is wrong or out of date
- Delete your information (subject to legal retention obligations)
- Restrict or object to certain processing
- Withdraw consent for marketing or for WhatsApp messages at any time
- Lodge a complaint with the NZ Office of the Privacy Commissioner (privacy.org.nz) or your local data protection authority
To exercise any right, email privacy@Conversiq.io. We respond within 20 working days.
Opting out of messages
- WhatsApp: Reply STOP to any message
- SMS: Reply STOP or click the opt-out link
- Email: Click the unsubscribe link in any email, or visit /unsubscribe
Opt-outs are permanent and apply across all Tenants using our platform.
10.Cookies
Our marketing website (Conversiq.io) uses only essential cookies for session management and CSRF protection. We do not use advertising, tracking, or analytics cookies on the marketing site.
The operator dashboard (app.Conversiq.io) uses session cookies for authentication. These are deleted when you log out.
11.Security
- All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Magic-link authentication (no passwords stored)
- Role-based access for operators
- Strict tenant isolation, Tenants can only access their own data
- Annual security review
If we discover a breach affecting your personal information, we will notify you and the NZ Privacy Commissioner as required by law.
12.Children
Conversiq is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has sent us information, contact us and we will delete it.
13.Changes to this policy
We update this policy when our practices change. Material changes are notified by email to operators and posted on this page 30 days before they take effect.
14.Contact
Conversiq Limited
Privacy Officer
8 Gilliam Street, New Lynn, Auckland, New Zealand
Email: privacy@Conversiq.io
Phone: +64 22 160 8481