Privacy Policy

1. Information we collect

We collect only what is necessary to operate the Service.

Account & business data

• Identity & contact: name and email address (to create and secure your account).
• Business profile: business name, phone number, and address (to build your professional website and let your customers reach you).

Data from integrated apps

Each app in the platform collects only what that feature requires, for example:

• Booking & Service Orders: hours, services offered, and appointment details.
• Payments: processed entirely by Stripe — we never see or store your card number.
• Email marketing & SMS: only contacts and phone numbers your customers provide or authorize (e.g., appointment confirmations and reminders; reply STOP to opt out of SMS at any time).
• WhatsApp & Chat: messages exchanged between a business and its customers, when the WhatsApp integration is enabled (see Section 3).
• E-commerce, Blog, Gallery, Reviews, Loyalty, Digital Queue, Bio Links: the content, catalog, media, and customer interactions you create through those features.

Technical data (collected automatically)

• IP address and approximate location (fraud prevention).
• Browser and device type (to optimize the experience).
• Essential cookies (to keep you signed in).
• Error and access logs (to fix issues and protect accounts).

2. How we use information

• To operate, maintain, and secure the Service and its apps.
• To process payments made to businesses through the platform (via Stripe).
• To send transactional communications such as appointment reminders and confirmations.
• To enable messaging between businesses and their customers (including WhatsApp).
• To calculate and pay partner/ambassador commissions.
• To improve the platform based on aggregate, real-world usage.
• To prevent fraud and abuse, and to comply with legal obligations.

We do not sell your personal data, rent it, build advertising profiles from it, or share it with data brokers or marketing agencies.

3. WhatsApp & Meta Platform data

4. How we share information

We share data only with the service providers required to run the Service, each under contractual data-protection obligations:

5. If you are a client of a business that uses an app operated by GoConverso

Some businesses (salons, barbershops and other service providers) offer their clients a booking app with the business's own brand, operated by GoConverso. In that case:

• Who is responsible: the business is responsible for the service and decides what your data is used for. GoConverso operates the app and processes the data on the business's behalf.
• What the app collects: your name, email, phone, birthday (if you provide it), your appointments and their history, the messages you exchange with the app's assistant, the reviews you write, and your device's notification subscription, if you turn it on.
• What for: booking, reminding you of appointments, serving you, talking to you and offering the services the business uses on the platform.
• The business's trackers: if the business turns on the Meta pixel (Facebook and Instagram) or Google tools (Analytics, Tag Manager, Google Ads) in the app, they only load after you accept, and you can change your choice at any time under "You", in the "Cookies" link. If your browser sends the Global Privacy Control signal, the app declines for you.
• Sale and sharing: GoConverso does not sell your data. Sharing with Meta or Google to measure the business's ads only happens if you accept.
• Your rights: you can ask for access to, correction or deletion of your data, or opt out of sharing, with the business itself or with GoConverso at support@goconverso.com.

6. Data retention

7. Your rights (LGPD & GDPR)

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information (instantly, from your dashboard).
• Export your data in a portable format.
• Delete your data permanently (see Section 8).
• Opt out of marketing communications at any time.
• Restrict or object to certain processing.

To exercise any right, email support@goconverso.com. We respond within 24 hours on business matters and within the timeframes required by law.

8. Data deletion

9. Security

• SSL/TLS encryption on all connections.
• Hashed passwords (bcrypt).
• Optional two-factor authentication.
• Automated daily backups and continuous threat monitoring.
• Access logging and regular security review.

10. Cookies & tracking

We use essential cookies (to keep you signed in), optional analytics cookies (anonymized), and optional preference cookies (language and settings). We do not use cross-site tracking cookies. Inside the apps of a business, the business's own trackers (such as its Meta pixel and Google tools) may run only after you accept them, as described in Section 5. If you reject optional cookies, we count your visit only in aggregate statistics, without identifying you.

11. International transfers

Your data is stored on servers in the United States (Supabase / AWS). We apply globally recognized security practices and comply with the LGPD (Brazil) and the GDPR (European Union) for international data transfers.

12. Children

GoConverso is intended for professionals and businesses. It is not directed to individuals under 18, and minors require authorization from a parent or legal guardian to create an account.

13. Changes to this policy

If we make a material change to this policy, we will notify affected users by email at least 30 days in advance. The “Last updated” date at the top reflects the current version.

14. YouTube API Services

What we access

• Your channel: channel ID, title, handle, photo, and subscriber count.
• Videos published through GoConverso: title, description, privacy, schedule, thumbnail, playlist, processing status, and the link to the video. We also read these videos in YouTube to keep our calendar equal to what you change in YouTube Studio.
• Your playlist names, so you can pick one when you publish.
• We do not read your other videos, your comments, or your viewers' data.

What we store and how we use it

• The channel data above, the posts you create in GoConverso (title, description, settings, schedule, status, and link), and a renewal key (refresh token) kept encrypted in a secure vault. The short-lived access key is renewed at each use and is not stored.
• A video you choose is kept in our storage so we can deliver it to YouTube at the scheduled time. Videos above 300 MB go straight from your browser to YouTube and do not pass through our storage.
• We use this data only to run the YouTube feature you asked for. We do not sell it, do not use it for advertising, and do not share it except with the providers required to run the Service (Section 4). Our team reads it only with your consent for support, for security, or when the law requires.

Cookies

The YouTube feature does not add cookies of its own. We use only the essential cookies described in Section 10. On the Google permission screen, Google may set its own cookies, under the Google Privacy Policy above.

Revoking access

You can revoke GoConverso's access to your YouTube data at any time on the Google security page: https://security.google.com/settings/security/permissions. You can also choose Disconnect in the Social media app: the channel leaves GoConverso and the renewal key is erased from the vault right away.

Retention and deletion

• Stored YouTube data is refreshed or deleted at least every 30 days while the channel is connected.
• If you revoke access, we delete the stored YouTube data as soon as we detect it (we check every day), and always within 7 days of the revocation.
• A request to delete your YouTube data is answered within 7 days, through the account deletion path in Section 8 or by email.

Questions about YouTube data: support@goconverso.com.

15. Contact us

Questions about this policy or your data? Contact us:

• Email: support@goconverso.com
• Mail: GoConverso, Corp, 213 N Stephanie St, Ste G 439, Henderson, NV 89074, United States of America

LGPDGDPRSSLPCI-DSS (Stripe)