Privacy Policy

1. About this policy

This Privacy Policy explains how Campus Market Private Limited, operating Conversia in Zimbabwe, handles personal information when you visit our site or use our business messaging service.

For account, billing, security, and website information, we act as the organisation responsible for that processing. When a business customer connects WhatsApp and asks Conversia to process its customers' information, that customer generally decides why and how the information is used; we process it on the customer's instructions under the Data Processing Agreement.

This policy applies to the Conversia service, not to Meta, WhatsApp, Google, or other third-party services. Their own privacy notices also apply.

2. Information we handle

• Account information, such as your name, email address, authentication information, and account preferences.
• Workspace and business information you provide, such as workspace name, business name, industry, country, currency, team size, website, and selected plan.
• Team invitation details, including invitee email address, role, invitation status, and expiry.
• WhatsApp connection information, including business and phone-number identifiers, display number, verified name, connection status, and access credentials. Meta access tokens and registration PINs are encrypted in storage.
• WhatsApp data processed through a connected account, including inbound message text, the sender's phone number, the receiving number, message direction, and receipt time.
• Technical and security information associated with use of the service, such as session identifiers, IP address, browser or device user agent, and security-check results.
• Messages you send to our support or privacy contact.

3. Why we use information

• To create and administer accounts, workspaces, team invitations, and connected integrations.
• To receive, organise, and help you respond to WhatsApp conversations and to provide the features you request.
• To send account verification, password recovery, invitation, service, and security communications.
• To protect the service, investigate misuse, troubleshoot errors, and maintain reliable operations.
• To respond to requests, comply with legal obligations, and establish or defend legal claims.
• To understand and improve the service using operational information. We do not sell personal information or use it for third-party advertising.

4. Legal grounds

Where applicable law requires a legal ground, we rely on the steps needed to provide a service you request or perform a contract; our legitimate interests in operating and securing Conversia; consent where we ask for it; and compliance with legal obligations. Business customers are responsible for establishing a lawful basis for personal information they submit about their own customers.

5. Service providers and sharing

We share only the information reasonably needed with service providers that help us operate Conversia. Current provider categories and the providers identified for the service are listed on our Subprocessors page. They include hosting and database providers, security and authentication tools, email delivery, and Meta/WhatsApp integration services.

We may also disclose information when required by law, to protect people or the service, in connection with a business reorganisation, or with your direction. We do not sell personal information.

6. AI-assisted features

As of the date of this policy, Conversia does not have a third-party generative AI model provider configured to process WhatsApp message contents. If we enable a feature that sends personal information to an AI provider, we will identify the provider and update this policy and the Subprocessors page before that processing begins.

7. International processing

Our service providers may process information in countries other than Zimbabwe, including countries where they or their infrastructure operate. Data protection laws may differ between countries. Where required, we use appropriate safeguards for international transfers and provide further information on request.

8. Retention and deletion

We keep personal information for as long as reasonably necessary for the purposes described in this policy, while an account or workspace is active, and as needed for security, legal, accounting, or dispute-resolution purposes. Retention may differ by information type and provider.

To request deletion of your Conversia account or personal information, follow the Data Deletion Instructions page. Information in backup or security records may remain until it is overwritten or expires through ordinary system operations. We do not promise a fixed deletion period where provider backup cycles or legal requirements vary.

A business customer is responsible for handling requests about its own customers' data. We will provide reasonable assistance as described in the Data Processing Agreement.

9. Your choices and rights

Depending on the law that applies, you may have rights to access, correct, delete, restrict, or object to certain processing, or to withdraw consent. To make a request, email us at the contact below and identify the account or business concerned. We may need to verify your identity or refer you to the business that controls the relevant WhatsApp data.

You can manage team access through your workspace and can disconnect an integration through the relevant account controls where available. Disconnecting an integration does not automatically delete data already stored in the workspace.

10. Security

We use administrative and technical safeguards designed to protect personal information against unauthorised access, loss, or misuse. These include account authentication, security checks where configured, access controls, and encryption of stored Meta access tokens and registration PINs. No internet service or storage system can be guaranteed completely secure.

If you believe your account or personal information is at risk, contact us promptly at the address below.

11. Children and changes

Conversia is a business service and is not designed for children. Do not create an account for a child or submit children's personal information unless you have a lawful basis and authority to do so.

We may update this policy as the service or law changes. We will post the current version here and update the date above. If a change materially affects how we handle information, we will provide additional notice where required.

12. Contact

For privacy questions or requests, contact Campus Market Private Limited at praisetechzw@gmail.com. Please include enough information for us to identify the relevant account or workspace. You may also contact the data protection authority responsible for your location if you have a complaint.