Privacy Policy
How we collect, use, and protect your data
This privacy policy explains how ConvertMate Inc. ("we," "us," or "our") collects, uses, and protects your information when you use our AI marketing automation platform.
We take your privacy seriously. This policy describes what data we collect, why we collect it, and how you can manage your information.
What's covered in this policy
Information we collect
Account information
- Your name, email address, and company information when you create an account
- Profile settings and preferences you configure
- Billing information for paid plans (processed securely through Stripe)
Platform data
- Website URLs and content you connect to ConvertMate
- Marketing campaign data from connected platforms
- Analytics and performance metrics
- Agent interactions and task history
Usage information
- How you use our platform and which features you access
- Device information and browser type
- IP address and general location information
Google API Services data usage
ConvertMate's use of Google APIs
ConvertMate uses Google API Services to help you manage your marketing data and campaigns. This section explains what Google user data we access, how we use it, and how we protect it. ConvertMate's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
What Google data we access
When you connect Google services to ConvertMate, we access specific data from your Google accounts. You explicitly authorize this access through Google's OAuth consent screen, and you can revoke access at any time through your Google Account settings.
Google Search Console
- Website URL and domain information
- Search queries, impressions, clicks, and ranking data
- Page URLs and their search performance metrics
- URL inspection data and technical SEO information
Google Merchant Center
- Product feed data including titles, descriptions, prices, and images
- Product performance metrics and shopping insights
- Product issues and feed health status
Google Analytics 4
- Website traffic data including sessions, users, and page views
- User behavior and engagement metrics
- Conversion data and e-commerce performance
- Traffic source and campaign attribution data
Google Ads
- Campaign structure, ad groups, and keywords
- Performance metrics including impressions, clicks, conversions, and costs
- Search terms reports and audience insights
Google My Business
- Business profile information including name, address, and hours
- Customer reviews and ratings
- Business insights including views, searches, and actions
Google Sign-In
- Google account ID (for authentication purposes)
- Email address (verified)
- Profile information (name and profile picture)
How we use Google data
ConvertMate uses data from Google services exclusively to provide marketing automation features to you within our platform. We do not use this data for any other purpose.
Important: Google data is processed solely to provide ConvertMate services to you. We do not sell your Google data, use it for advertising purposes unrelated to your account, or share it with third parties except as described in the "Data sharing" section below.
Sharing of Google user data
We do not sell or rent your Google data
ConvertMate never sells, rents, or trades your Google user data to third parties for their marketing or advertising purposes.
Google user data is shared only in the following limited circumstances:
Storage and protection of Google data
Encryption
All Google API data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2 or higher.
Access control
OAuth tokens are stored securely with role-based access controls limiting access to authorized personnel only.
Secure infrastructure
Data is hosted on AWS with SOC 2 Type II compliance, regular security audits, and infrastructure monitoring.
Token management
OAuth refresh tokens are encrypted separately and access tokens are automatically refreshed before expiration.
Retention and deletion of Google data
Data retention
We retain Google API data for as long as your account is active and the Google service remains connected. Specifically:
- OAuth access and refresh tokens are retained while the service connection is active
- Fetched data from Google APIs is cached for up to 24 hours for performance optimization
- Historical reports and analytics you generate are retained as part of your account data
How to disconnect and delete Google data
You can disconnect Google services and request deletion of your Google data at any time through any of these methods:
Deletion timeline: When you disconnect a Google service or delete your account, associated Google data is deleted within 30 days. Backup copies are deleted within 90 days.
Your control over Google data access
You maintain full control over what Google data ConvertMate can access. You grant permissions when connecting services and can revoke access at any time. Revoking access will prevent ConvertMate from accessing new data but may limit functionality of features that depend on that Google service.
How we use information
Provide our services
We use your data to power AI agents, run marketing automation, and provide analytics insights.
Improve our platform
We analyze usage patterns to make our AI agents smarter and our platform more useful.
Customer support
We use your information to respond to questions and help you get the most out of ConvertMate.
Security and safety
We monitor for fraud, abuse, and other security issues to keep your data and our platform safe.
Information sharing
We don't sell your data
We never sell your personal information or marketing data to third parties. Your data stays with ConvertMate.
We may share information with:
Service providers
We work with trusted companies that help us provide ConvertMate services:
- AWS: Cloud hosting and data storage
- Stripe: Payment processing for paid plans
- LLM Providers: AI model processing (data may be used for training)
Legal requirements
We may disclose information if required by law, court order, or to protect our rights and the safety of our users.
Business transfers
If ConvertMate is acquired or merged, your information may be transferred as part of that transaction.
Data security
Encryption
All data is encrypted in transit and at rest using industry-standard AES-256 encryption.
Access control
Strict access controls ensure only authorized personnel can access your data when necessary.
Regular monitoring
We continuously monitor our systems for security threats and unusual activity.
Data retention
We keep your data as long as your account is active. When you delete your account:
- Personal data is deleted within 30 days
- Some data may be retained for legal or security reasons
- Backups are deleted within 90 days
Your rights
Access your data
Request a copy of all personal data we have about you.
Correct your data
Update or correct any personal information that's inaccurate.
Delete your data
Request deletion of your personal data and account.
Export your data
Download your data in a portable format to use elsewhere.
How to exercise your rights
Contact us at support@convertmate.io to make a request. We'll respond within 30 days and verify your identity before processing.
Some rights may not apply in all situations (for example, if we need to keep data for legal reasons).
Contact us
Privacy questions
For questions about this policy or data requests
Company information
ConvertMate Inc.
131 Continental Dr.
Newark, DE 19713
United States
Policy updates
We may update this policy from time to time. When we do, we'll post the changes here and notify you via email if the changes are significant.