Privacy Policy

1. Who we are

Konvy is operated by Seed Blocks Pty Ltd ("Konvy", "we", "us"), a private company registered in Victoria, Australia. Konvy is a white-label communications platform that powers AI voice, messaging, reviews, follow-up and reporting for partner agencies who in turn serve local businesses. This policy covers data we process across all three roles: as the operator of the platform, as a service provider to our agency partners, and as a website operator.

2. Roles & responsibilities

In plain terms: Konvy handles the data on the agency’s instructions, the agency handles it on the local business’s instructions, and the local business ultimately owns and controls its customers’ information.

In legal terms: for most data flowing through the platform (calls, messages, contact records belonging to a local business), Konvy acts as a processor for the agency, who acts as a processor or controller for the business. The local business is the ultimate controller of the customer data its end-customers generate. For data we collect directly through konvy.ai, the partner application flow, partner billing, and partner support, Konvy is the controller.

3. Data we collect

From partner agencies: contact details, company information, billing details, support communications, product usage telemetry, and configuration choices made inside the platform.

From local businesses (via their agency): account configuration, brand assets, integration credentials supplied by the business, and product usage telemetry.

From end-customers of local businesses (via the platform): phone numbers, names, email addresses, message and call content, audio recordings of calls, AI-generated transcripts, scheduling and intake details, review responses, and any structured data the local business asks the AI to capture.

From website visitors: pages viewed, referrer, approximate location, device, and any information you submit through forms.

4. How we use data

• To provide the AI voice, messaging, review and follow-up features the local business has configured.
• To produce reporting and analytics that the agency and the local business see in the dashboard.
• To detect abuse, fraud and security incidents.
• To bill partners and meet our financial and tax record-keeping obligations.
• To improve the platform: never to train third-party general AI models on partner or customer content.

5. Call recording & transcription

Inbound calls handled by the voice AI agent are recorded and transcribed by default. The platform plays a configurable disclosure ("This call may be recorded for quality and training") at the start of every call. Recording can be disabled per-account, per-location, or per-jurisdiction by the agency or the local business. Konvy maintains a list of two-party-consent jurisdictions and surfaces a warning when a number is provisioned in one with recording still enabled.

6. AI processing & subprocessors

Konvy uses third-party providers for speech-to-text, text generation, and text-to-speech, reached through a single gateway layer. Our standard for those agreements is that prompts and responses are not retained beyond the request and are not used to train models. We’re pre-launch: provider terms are being finalized, and the full subprocessor list, including each provider’s actual retention position, publishes when the platform goes live and updates at least 30 days before any material change.

7. Data sharing

We share end-customer data with the agency and the local business that owns the account, with the AI and infrastructure providers listed above for the purpose of running the service, and where required by law. We do not sell or rent personal data, and we do not share data across partner accounts.

8. International transfers

Konvy is operated from Australia and the United States. Data may be processed in either region depending on the agency's home region selection. Cross-region transfers rely on Standard Contractual Clauses for EU/UK partners and equivalent mechanisms for Australian Privacy Principles compliance.

9. Retention

Call recordings: 90 days by default, configurable from 7 to 730 days per account. Transcripts: 24 months. Messaging history: 24 months. Contact records: lifetime of the account plus 60 days. Billing records: 7 years. End-customers may request deletion of their personal data through the agency or directly; deletion requests are honored within 30 days subject to legal hold requirements.

10. Your rights

Depending on your location you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. End-customer rights are exercised through the local business; partner rights are exercised through the contact form at konvy.ai/contact. We respond within 30 days.

11. Security

Konvy encrypts data in transit (TLS 1.2+) and at rest (AES-256), enforces role-based access and two-factor for administrators, and runs an incident-response process with notification commitments set out in the partner agreement. We’re pre-launch, so there is no formal audit or independent security review to cite yet, and we don’t claim one. Anything independent we can point to will be published when it exists. The Trust & Security page at konvy.ai/trust has the current detail.

12. Changes & contact

We notify partners of material changes to this policy at least 30 days in advance via email and in-app banner. The current version is always at konvy.ai/privacy. Questions: the contact form at konvy.ai/contact, or Konvy / Seed Blocks Pty Ltd, Australia.