Privacy Policy

Last updated: June 21, 2026

Effective date: June 21, 2026

ConvoSatya (“ConvoSatya,” “we,” “us,” or “our”) is a scam and fraud detection service operated by ConvoSatya LLC. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights you have.

1. Who we are

ConvoSatya is operated by ConvoSatya LLC. If you have any questions about this policy or your data, you can reach us at:

ConvoSatya LLC
Email: support@convosatya.com

For the purposes of the EU/UK General Data Protection Regulation (GDPR), ConvoSatya LLC is the “data controller” of your personal information — meaning we are the party responsible for how your data is handled.

2. The information we collect

We collect only the information we need to provide scam and fraud detection.

Account and identity information (from Google Sign-In). When you sign in with Google, we receive your primary Google Account email address and basic profile information (such as your name and profile picture). We use this to create and manage your account.

Files and content you choose to analyze.ConvoSatya uses Google’s drive.file permission, which means we can only access the specific Google Drive files that you select or open with ConvoSatya. We do not have access to your entire Google Drive, and we cannot see files you do not choose to share with us. You may also provide conversations, messages, or documents directly to ConvoSatya for analysis.

Usage and technical information. Like most online services, we automatically collect limited technical information when you use ConvoSatya, such as log data, device and browser information, and general usage activity. This helps us operate, secure, and improve the service. See our Cookie Policy for details on cookies and similar technologies.

3. How we use your information

We use your information to:

Provide the core service — running our analysis engine, FAUST, to identify scam indicators, manipulation patterns, and potential fraud risks in the files and content you submit;
Create, manage, and secure your account;
Operate, maintain, troubleshoot, and improve ConvoSatya;
Protect against fraud, abuse, and security threats; and
Comply with our legal obligations.

We do not use your files or content for advertising, and we do not sell your personal information (see Section 9).

4. Google user data

Because ConvoSatya connects to your Google Account, this section explains exactly how we handle data we receive through Google APIs.

What we access: your Google email address, basic profile information, and only the specific Google Drive files you select using the drive.file permission.
What we do with it: we read the content of the files you select so that FAUST can analyze them for scams and fraud. We use this data only to provide the features you request.
What we do not do: we do not access your full Google Drive, we do not use Google data for advertising, and we do not sell it.

ConvoSatya’s use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke ConvoSatya’s access to your Google Account at any time through your Google Account settings at https://myaccount.google.com/permissions.

5. AI providers and how your content is analyzed

ConvoSatya analyzes your content using third-party artificial intelligence (“AI”) providers. You choose which AI provider is used for your analysis (for example, OpenAI, Anthropic, or Google).

When you select a provider, the content you submit for analysis may be transmitted to that provider so it can perform the analysis. That provider processes the content under its own terms of service and privacy policy, which govern how it handles the data it receives. We encourage you to review the privacy policy of the provider you choose. If you do not want your content sent to a particular provider, do not select that provider.

6. Where your information is processed and stored

ConvoSatya is hosted on cloud infrastructure provided by Amazon Web Services (AWS). Your information, including the files and content you submit, may be processed and stored on AWS servers in the United States, primarily in the AWS US East (N. Virginia) Region, also known as us-east-1. Content you choose to send to an AI provider is processed by that provider on its own infrastructure.

7. How long we keep your information

We keep your personal information only for as long as necessary to provide the service, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements.

Account information is retained for as long as your account remains active. If you delete your account or request deletion, we will delete or de-identify your account information within 30 days, unless we are required to keep certain information for legal, security, fraud-prevention, accounting, or compliance purposes.

Files, messages, conversations, and other content you submit for analysis are retained only for as long as needed to provide the requested analysis and related service features. Where content is stored in your connected Google Drive, it remains under your control and can be deleted by you from Google Drive or disconnected from ConvoSatya. Temporary processing copies, logs, or cached data associated with analysis may be retained for up to 30 days for security, troubleshooting, abuse prevention, and service improvement, unless a longer period is required by law.

Security, audit, and system logs may be retained for up to 90 days, unless a longer retention period is necessary to investigate abuse, protect the Services, comply with legal obligations, or resolve disputes.

You may request deletion of your personal information at any time by emailing support@convosatya.com. We will respond to deletion requests within the timeframes required by applicable law.

8. Your rights and choices

You are in control of your data. At any time you can:

Delete your content directly within ConvoSatya;
Request deletion of your data by emailing support@convosatya.com;
Revoke Google Drive access through your Google Account settings.

Depending on where you live, you may also have additional legal rights:

If you are in the European Economic Area (EEA) or the United Kingdom, you have the right to access, correct, delete, restrict, or object to our processing of your personal data; the right to data portability; and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.
If you are in California or another US state with a privacy law, you have the right to know what personal information we collect, to request its deletion, to correct it, and not to be discriminated against for exercising your rights. We do not sell your personal information.

To exercise any of these rights, email us at support@convosatya.com. We will respond within the timeframes required by applicable law.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information only in these limited situations:

Service providers — with infrastructure providers such as AWS that host the service on our behalf;
AI providers — with the AI provider you select to perform your analysis (see Section 5);
Legal reasons — if required by law, regulation, or legal process, or to protect the rights, safety, and security of ConvoSatya, our users, or others;
Business transfers — in connection with a merger, acquisition, or sale of assets, in which case we will notify you.

10. Security

We take the security of your information seriously and use reasonable technical and organizational measures designed to protect it. These measures include HTTPS encryption in transit, access controls, restricted administrative access, AWS-hosted infrastructure, secure storage of backend secrets through AWS Systems Manager Parameter Store, and IAM-based access controls for AWS services.

Our production backend is hosted on AWS, and database access is restricted so that the backend service can connect to the database through controlled network security rules. Where applicable, we use cloud-provider security features such as encrypted storage, private service access, logging, and limited-permission roles to reduce unnecessary exposure of user data.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

11. International data transfers

ConvoSatya is operated from the United States, and your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate. If you are located in the EEA or the UK, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, when transferring your personal data internationally. By using ConvoSatya, you understand that your information may be processed in the United States.

12. Age requirement

ConvoSatya is intended only for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, please contact us at support@convosatya.com and we will delete it.

13. Changes to this policy and how to contact us

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of ConvoSatya after changes take effect means you accept the updated policy.

Questions, requests, or concerns: