Last updated: March 3, 2026
ConvoArc ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website at convoarc.com and our AI-powered conversation strategy tool (the "Service").
| Data Type | What We Collect | How |
|---|---|---|
| Account Data | Email address | When you sign in via magic link |
| Usage Data | Number of conversation trees generated, plan type | Automatically tracked for billing and limits |
| Scenario Data | Conversation scenarios and context you enter | When you use the tree generator |
| Technical Data | Browser type, device info, IP address | Automatically via server logs |
| Local Storage | Anonymous usage count | Stored in your browser only |
We do NOT collect or store credit card numbers. All payment processing is handled by Stripe, our third-party payment processor.
We use your information to provide and operate the Service (generating conversation trees from your scenarios); manage your account and subscription; enforce usage limits based on your plan; improve the Service through aggregated, anonymized usage analytics; communicate with you about your account, billing, or Service updates; and comply with legal obligations.
When you submit a scenario, it is sent to a third-party AI provider (Anthropic) to generate conversation trees. The scenario text you enter is transmitted to this provider for processing. We do not use your scenarios to train AI models. Anthropic processes this data according to their own privacy policy and API terms.
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication, database | Email, usage data |
| Anthropic (Claude API) | AI conversation generation | Scenario text (not linked to your identity) |
| Stripe | Payment processing | Email, payment details (handled by Stripe directly) |
| Cloudflare | Hosting, CDN, security | Technical data (IP, headers) |
Account data is retained while your account is active. Usage records are retained for billing and analytics purposes. Scenario data submitted for tree generation is processed in real-time and is not permanently stored by ConvoArc after the tree is delivered to your browser. You may request deletion of your account and associated data at any time by contacting [email protected].
We implement industry-standard security measures including HTTPS encryption for all data in transit, secure authentication via magic links (no passwords stored), database-level security through Supabase row-level security, and Cloudflare DDoS protection and CDN. While we take reasonable precautions, no method of electronic transmission or storage is 100% secure.
We use browser local storage to track anonymous usage counts (number of free trees used). We use Supabase session tokens stored in local storage for authentication. We do not use third-party tracking cookies or advertising cookies.
Depending on your location, you may have the right to access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict processing of your data; request a copy of your data in a portable format; and withdraw consent at any time. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of your personal information. We do not sell your personal information to third parties.
If you are located in the European Economic Area, our legal basis for processing your data is contractual necessity (to provide the Service you requested), legitimate interest (to improve and secure our Service), and consent (where applicable). For data transfers outside the EEA, we rely on standard contractual clauses.
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 18, we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify registered use