Privacy & cookie policy

1. Who this covers

Comvor is offered by Equasive ("we", "us"), a registered sole proprietorship in the Republic of Maldives (registration SP10512026). This policy covers the Comvor websites (comvor.com and app.comvor.com), the Comvor service, and chat conversations handled by Comvor on behalf of the businesses that use it. It covers two kinds of people:

• Business users: merchants and their staff who create Comvor accounts. For your account data, Equasive is the data controller.
• Customers of those businesses: people who message a business whose conversations Comvor handles. For your conversation data, the business you messaged is the controller and Equasive is a processor acting on its instructions. If you want your conversation data accessed or deleted, contact that business first; you can also contact us and we will forward your request or advise you.

2. What we collect

• Account information: name, email address, password (stored hashed), and the business profile details you provide.
• Conversation data: messages between a business and its customers on connected channels, including message content, sender names and identifiers provided by the platform, and timestamps.
• Order and support details captured from conversations (for example items, quantities, pickup names, and phone numbers) so the business can fulfil requests.
• Conversation memory: a short summary of a customer's past conversations with a business, kept so repeat customers don't have to repeat themselves. A business can ask us to clear a customer's summary.
• Billing data: plan, invoices, and payment receipt images businesses upload. We never see or store card numbers.
• Usage and technical data: pages visited, features used, IP address, browser, and device information.

3. How AI is involved

Comvor uses large language models to draft and send replies on behalf of the business. Conversation content is sent to our AI providers (section 7) to generate those replies. The AI looks up prices and stock from the business's connected systems rather than guessing, and hands the conversation to the business's staff for orders and anything it cannot handle. Businesses can pause the AI at any time. Chat surfaces disclose that a virtual assistant may reply.

4. How we use information

To provide and operate the service; to create and manage accounts; to let businesses see and continue their customer conversations; to improve the service; to send service and billing notices; to detect and prevent misuse; and to comply with legal obligations. We do not sell personal information. We do not use conversation content for advertising.

5. Legal bases

Where the law requires a basis for processing personal data, we rely on:

• Contract: processing needed to provide the service you signed up for.
• Legitimate interests: processing needed to run, secure, and improve the service, where not overridden by your rights.
• Consent: where you have given it, such as for optional communications. You can withdraw consent at any time.
• Legal obligation: processing required to comply with Maldivian law.

6. Sharing

We share personal information only with:

• Service providers (section 7) that host and operate parts of the service under contract.
• Connected platformsyou authorise, such as WhatsApp, Instagram, or Facebook Messenger. Where Meta channels are connected, we process information in line with Meta's platform terms and only to operate the features the business enabled. Meta processes data under its own terms.
• Authorities, where disclosure is required by law, regulation, or legal process.
• A successor, if the business is merged, acquired, or its assets sold, as part of that transaction.

7. Service providers and international transfers

We use a small number of service providers to run Comvor. Our servers are located in Singapore, and providers in other countries handle AI processing, channel delivery, and email. This means personal data, including conversation content, is transferred outside the Maldives to the countries below. When our providers or their locations change, this page changes first.

8. Retention

• Account data: kept for the life of the account, then deleted or anonymised within 90 days of closure.
• Conversation data and order details: kept while the business's account is active so it can serve its customers, then deleted or anonymised within 90 days of closure.
• Conversation memory summaries: kept while the business remains active; cleared on request.
• Billing records and payment receipts: kept for 5 years, in line with Maldivian tax record-keeping requirements.

9. Your rights

Subject to applicable Maldivian data protection law, including the Personal Data Protection Act, you may request: access to the personal data we hold about you; correction of inaccurate data; deletion of your data; restriction of or objection to certain processing; a portable copy of your data; and withdrawal of consent where processing is based on it. Contact us using section 13 and we will respond within 30 days. Customers of a business should contact that business first (section 1).

10. Security

We use appropriate technical and organisational measures to protect personal information: passwords are stored hashed, transfers are encrypted in transit, and access to production systems is limited. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Cookies

The Comvor app uses strictly necessary cookies only: signing you in and remembering your theme preference. We do not run analytics or advertising cookies. If that ever changes, this page changes first.

12. Children

Our services are not directed at children under 16, and we do not knowingly collect their personal information. If you believe we have, contact us and we will delete it.

13. Contact

For privacy questions or to exercise your rights: support@comvor.mv or +960 999 0805. Comvor is a product of Equasive, registered in the Maldives (SP10512026).

14. Changes

We may update this policy. When we do, we update the date at the top of this page, and we email account holders before material changes take effect.