Privacy Policy

1. Introduction

This Privacy Policy explains how Convia Studio, Inc. ("Convia," "we," "our," or "us") collects, uses, discloses, and protects information when you use Convia Pro (the "Service") and visit our websites. By using the Service, you agree to the practices described here.

2. Information We Collect

Information you provide:

• Account and contact information (name, email address)
• Show and content information (show name, podcast URL, episode count)
• Billing information, processed by our payment provider (we do not store full card numbers)
• Communication preferences and consent choices
• Content you upload or create, including recordings, transcripts, and generated clips, posts, and scripts
• Any other information you choose to provide

Information we collect automatically:

• IP address, browser type, device information, and operating system
• Pages visited, features used, and time spent
• Cookies and similar tracking technologies

Information from connected accounts:

When you connect a third-party account, we receive the authorization tokens and account data necessary to publish and manage content on your behalf, as permitted by that platform and your authorization. Depending on the platform you connect (which may include LinkedIn, YouTube, Instagram, Facebook, Threads, TikTok, and Bluesky), this can include: your profile image and display name, your username or profile or page ID, access and refresh tokens, content you publish through the Service, and engagement or analytics data associated with that content.

If you connect YouTube, our use of information received from YouTube APIs is subject to the YouTube Terms of Service and the Google Privacy Policy. You can revoke our access to your YouTube data at any time through the Google security settings page.

Guest information:

The Service includes a guest portal and features that capture information about people who participate in your conversations ("Guests"), such as their name, contact details, voice, likeness, and contributions. When you use the Service to record and process a Guest's information, you act as the controller of that information and we act as your processor, handling it on your behalf and under your instructions. As described in our Terms of Service, you are responsible for obtaining the consents necessary to record and process each Guest. A Guest seeking to understand or exercise rights over their information should refer to the host's own privacy practices, and may also contact us as described in Section 7.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service, including AI-assisted content generation, processing, and publishing
• Process subscriptions and billing
• Communicate with you, including support and (with your consent) marketing
• Personalize outputs within your workspace
• Monitor and analyze usage and trends
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. AI Processing and Model Training

The Service uses AI, including third-party providers, to generate and process content.

• Third-party AI providers process your content to perform tasks such as clipping, transcription, and content generation, and we may change providers over time. Each provider handles data under its own terms and may process or use content, including for training, in ways we do not control. We do not warrant any particular provider's practices.
• We do not currently train our own models on your content. If this changes, we would use only de-identified and aggregated data, give notice beforehand, and offer an opt-out.
• Workspace-scoped personalization may learn from your own content to tailor outputs for you. This stays within your workspace and is not used to train models for other customers.

We do not use data obtained through third-party APIs, including Google APIs, to develop, improve, or train generalized AI or machine-learning models.

5. Cookies and Tracking Technologies

We use cookies and similar technologies. Strictly necessary cookies are required for the Service to function and are set without consent. Analytics and marketing cookies are set only if you consent through our cookie banner, and you can withdraw that consent at any time — it is as easy to withdraw as it was to give — via the "Cookie Preferences" link in the footer or on our Cookie Policy page, which also lists every cookie we set.

Purposes. Analytics cookies measure traffic, page performance and how visitors move through the site. Marketing cookies support advertising: measuring conversions from our campaigns, building audiences and enabling personalised ads on third-party platforms.

Recipients. When you consent, the following third parties receive personal data (including your IP address, device and browser characteristics, and pages viewed) directly from your browser:

• Google LLC / Google Ireland Ltd — Google Tag Manager and Google Analytics 4 (analytics), and reCAPTCHA on our forms (spam prevention, strictly necessary).
• Meta Platforms, Inc. — Meta Pixel, for advertising measurement and audiences (marketing).
• Reddit, Inc. — Reddit Pixel, for advertising measurement (marketing).
• Cloudflare, Inc. — Cloudflare Web Analytics, a cookieless traffic baseline that sets no cookies and stores no identifiers, and bot protection at our host (strictly necessary).
• Embedded content — YouTube (Google) and Calendly connect to their own servers when loaded. These embeds are behind a click-to-load screen and make no request until you choose to load them.

International transfers. These recipients are established in, or transfer personal data to, the United States. Transfers rely on the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses, together with supplementary measures where required. You can request a copy of the relevant safeguards using the contact details below.

Legal basis. Strictly necessary cookies rely on our legitimate interest in operating and securing the site. All analytics and marketing cookies rely on your consent (GDPR Art. 6(1)(a) and ePrivacy Art. 5(3)). Withdrawing consent does not affect processing carried out before withdrawal.

6. Data Sharing and Disclosure

We may share information:

• With service providers and subprocessors who perform services on our behalf (hosting, AI processing, payment, email, analytics), bound by appropriate confidentiality and data-protection obligations
• With third-party platforms you connect, to publish and manage content at your direction
• To comply with legal obligations or respond to lawful requests
• To protect our rights, safety, or property, or those of others
• In connection with a merger, acquisition, or sale of assets

We do not sell your personal information.

7. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent.

EEA/UK (GDPR): the rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.

California (CCPA/CPRA): the rights to know, delete, correct, and opt out of sale or sharing (note: we do not sell personal information), and the right not to be discriminated against for exercising these rights.

To exercise any right, contact us at contact@conviapro.com. We may need to verify your identity. If you are a Guest, you may contact us about your information, and we may direct your request to the user who controls the conversation in which your information was collected.

Deleting your data. You can delete most content directly within the Service through your account settings. To request deletion of your account and associated personal data, email us at data@conviapro.com. We will process verified deletion requests in accordance with applicable law, subject to information we must retain for legal, security, or billing purposes. Note that content you have already published to third-party platforms is controlled by you and those platforms, and deleting it from the Service does not remove it from those platforms.

A note on sensitive information. The Service is built to help you create and distribute content intended for publication, not to safeguard secret or regulated information. As described in our Terms of Service, you should not upload classified, regulated, or confidential material, and you should not treat the Service as a confidential channel.

8. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, we securely delete or de-identify it. Content you delete is removed on a defined schedule; soft-deleted records are permanently purged after a short retention window.

9. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction, including access controls and encryption in transit. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

10. International Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. Where required, we use appropriate safeguards (such as standard contractual clauses) to protect your information.

11. Children's Privacy

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy. We will post the updated policy and revise the "Last updated" date, and provide additional notice for material changes.

13. Contact Us