Privacy Policy

MindstreamSoft runs mindstreamsoft.com and Convo by MindstreamSoft ("Convo"). This policy explains what personal data we collect, why, and the choices you have.

For data about website visitors, people who contact us, and our own customers, we are the controller. For the messages and contacts that Convo customers handle in their workspaces, the customer is the controller and we process that data on their behalf.

• Contact and demo requests: your name, email, company, phone or WhatsApp number, the plan and number of bots you are interested in, and your message.
• Convo accounts: your name, email address, login activity, and the settings of your workspace and bots.
• Workspace content: on behalf of our customers, Convo stores the Telegram names, usernames, profile details, messages, files and automated-reply answers of people who message their bots.
• Purchases: Paddle, our reseller, tells us your name, email, country, the plan you bought and your payment status. Paddle handles your card details; we never receive them.
• Technical data: our servers record IP addresses, browser type and request times in security logs.

• To reply to your enquiry and run the demo you booked (steps you asked us to take before entering a contract).
• To provide, set up and support Convo under your subscription (performance of a contract).
• To bill you, keep accounting records and meet tax obligations (legal obligation).
• To keep our services secure, prevent abuse and fix problems (our legitimate interests).
• To email you about your account, changes to our terms or prices, and important service notices.

We do not sell your personal data, and we do not use it for advertising profiles.

This website does not use analytics, advertising or tracking cookies. It stores only two small preferences in your browser: your light or dark theme choice, and a note that you have already seen the demo prompt so it does not appear again.

If you open the checkout, Paddle may set its own cookies needed to process the payment and prevent fraud, under Paddle's privacy notice. Convo itself uses a secure session cookie to keep you logged in.

We share personal data only with the service providers we need to run our business, under contracts that require them to protect it:

• Paddle.com, our reseller and Merchant of Record, for payments, invoices, tax and refunds;
• our web hosting and server providers, who store the website and Convo;
• our email provider, which delivers form submissions and account emails;
• Telegram, which carries the messages between your bots and the people who message them.

We may also disclose data where the law requires it, or to protect our rights or someone's safety.

Our team and providers operate in several countries, so your data may be processed outside the country where you live. Where data from the UK or European Economic Area is transferred, we rely on safeguards such as the European Commission's standard contractual clauses.

• Enquiries and demo requests: up to 24 months after our last contact, unless you become a customer.
• Convo workspace content: for as long as the subscription is active, then 30 days before deletion from active systems.
• Billing records: as long as tax and accounting law requires, usually 6 to 10 years.
• Security logs: up to 12 months.

Convo encrypts bot credentials with AES-256, checks that every incoming message genuinely comes from Telegram, keeps each customer's workspace separate, and protects sign-in against password guessing. All traffic to our website and Convo is encrypted with HTTPS.

Depending on where you live, you can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw consent you have given. Email info@mindstreamsoft.com and we will reply within one month.

If you message a business that uses Convo, please contact that business first; we will help them respond to your request.

If you are unhappy with how we handle your data, you can also complain to the data protection authority in your country.

Our services are for businesses and are not directed at children under 16. We do not knowingly collect their data.

We will update this policy when our practices change, and show the date at the top. Privacy questions or requests: info@mindstreamsoft.com.