Last updated: June 17, 2026
ConvoPal AI LLC (“ConvoPal AI,” “ConvoPal,” “we,” “us,” or “our”) respects privacy and is committed to handling personal information responsibly.
This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when individuals:
Our Services are intended primarily for business and commercial use.
ConvoPal AI provides white-label artificial-intelligence communication, customer-management, and automation services using technology supplied by third-party platform providers, including HighLevel and its supporting service providers.
When we collect information for our own business purposes—for example, when someone visits our website, requests a demonstration, purchases Services, or contacts our support team—ConvoPal AI generally determines how and why that information is processed.
When a ConvoPal AI client uses our Services to communicate with or process information about its own leads, callers, customers, website visitors, employees, or other individuals, that client generally determines why and how the information is processed. In that situation:
The client’s own privacy policy and notices govern the client’s collection and use of its End User Data. Questions or requests relating to information collected by one of our clients should ordinarily be directed to that client first.
“End User Data” means personal information processed through the Services concerning a client’s callers, contacts, leads, customers, website visitors, or other individuals.
Depending on how an individual or client interacts with us and which features are enabled, we may collect the following categories of information.
This may include names, business names, job titles, email addresses, telephone numbers, mailing addresses, usernames, account identifiers, and similar contact information.
This may include company information, service preferences, account settings, subscription details, authorized users, customer-support requests, contracts, and information needed to configure the Services.
This may include billing addresses, transaction history, invoices, payment status, subscription information, and limited payment-related information.
Payment-card information is generally processed by third-party payment processors rather than stored directly by ConvoPal AI.
This may include:
This may include IP addresses, browser types, device identifiers, operating systems, referring pages, pages visited, timestamps, login activity, feature usage, error logs, security events, cookie identifiers, and similar technical information.
When a client connects a third-party account or application, we may process information from that integration as necessary to provide the requested functionality. Examples may include calendar, email, CRM, payment, website, communications, and social-media integrations.
We may receive information from clients, referrals, business partners, publicly available sources, advertising platforms, integrations, service providers, and other third parties where permitted by law.
We may use personal information to:
We do not use Client End User Data to independently market unrelated ConvoPal AI products directly to a client’s customers unless we have a separate lawful basis and appropriate authorization.
Certain Services use artificial intelligence and automated technologies to understand communications, generate responses, summarize conversations, qualify leads, schedule appointments, route requests, trigger workflows, and perform other client-configured activities.
Information submitted to these features may be processed by ConvoPal AI, HighLevel, communications providers, cloud providers, and specialized AI service providers.
AI systems can produce inaccurate, incomplete, delayed, or inappropriate results. Clients are responsible for configuring, testing, reviewing, and monitoring their AI systems and for maintaining appropriate human oversight.
ConvoPal AI does not intentionally use Client End User Data to train publicly available, generalized artificial-intelligence models. Information may nevertheless be processed, aggregated, deidentified, analyzed, or used by authorized service providers as permitted by applicable agreements and law to operate, secure, maintain, and improve the Services.
Calls made through or handled by the Services may be monitored, recorded, transcribed, summarized, or analyzed when the applicable feature is enabled.
The ConvoPal AI client using the feature is responsible for:
Where ConvoPal AI directly records or transcribes a communication for its own purposes, we will provide notice or obtain consent when required by applicable law.
When an individual consents to receive text messages, we may use the person’s telephone number and messaging information to provide the messages requested or authorized.
Message frequency may vary. Message and data rates may apply. Recipients may reply STOP to unsubscribe and HELP for assistance where those commands are supported.
No mobile information will be shared with third parties for marketing or promotional purposes. Information may be shared with subcontractors that provide support services, such as messaging delivery, customer service, platform operation, and technical support. All other use-case categories exclude text-messaging originator opt-in data and consent; this information will not be shared with third parties.
SMS consent is not transferred between unrelated businesses and is not a condition of purchasing unrelated products or services unless expressly stated and permitted by law.
We may disclose personal information to the following categories of recipients.
Information submitted while interacting with a client’s AI receptionist, chatbot, website, telephone number, calendar, form, workflow, or automation may be disclosed to and controlled by that client.
We use third parties to provide hosting, CRM functionality, communications, telephone services, SMS delivery, email delivery, AI functionality, workflow automation, data storage, analytics, customer support, security, integrations, and related technology.
Our primary white-label platform provider is HighLevel. HighLevel may use additional subprocessors to provide specific functionality. Its subprocessor list may change as services and features change.
Payment and billing providers may process transaction and payment information.
We may disclose information to accountants, attorneys, insurers, auditors, consultants, and other professional advisers where reasonably necessary.
We may disclose information when reasonably necessary to comply with law, legal process, court orders, regulatory obligations, or governmental requests; enforce agreements; detect fraud or abuse; protect rights or safety; or investigate security incidents.
Information may be disclosed in connection with a financing, merger, sale, reorganization, acquisition, bankruptcy, transfer of assets, or similar transaction, subject to applicable legal requirements.
We may disclose information when instructed, authorized, or requested by the applicable client or individual.
We do not permit service providers to use Client End User Data for their own unrelated marketing merely because they process the information for us.
Our website and Services may use cookies, pixels, local storage, session technologies, and similar tools to:
More information is available in our Cookie Policy.
We do not sell personal information for monetary payment. Depending on the analytics or advertising technologies used on our website, certain disclosures may be treated as a “sale,” “sharing,” or targeted advertising under some privacy laws even when no money is exchanged. Where required, we will provide applicable opt-out choices and honor legally recognized preference signals.
Clients are responsible for ensuring that they have a lawful basis to collect and process End User Data through the Services.
Clients are also responsible for:
ConvoPal AI processes End User Data according to the applicable client agreement, documented client instructions, applicable law, and the operational requirements of the Services.
Unless ConvoPal AI has expressly agreed otherwise in a signed written agreement, clients and users should not submit or use the Services to process:
The standard HighLevel platform is not HIPAA compliant by default. Healthcare-related clients must not process protected health information unless the required HighLevel HIPAA package, Business Associate Agreements, account safeguards, and ConvoPal AI approvals are in place.
We retain personal information for as long as reasonably necessary to:
Retention periods vary based on the type of information, client instructions, account settings, platform capabilities, legal requirements, and operational needs.
End User Data may remain in a client account until deleted by the client, deleted at the client’s request, or removed following account termination, subject to legal obligations, backups, security logs, fraud-prevention records, and platform limitations.
Deletion from active systems may not result in immediate deletion from encrypted backups or legally required records.
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, destruction, alteration, loss, misuse, or disclosure.
Our Services also depend on security measures implemented by HighLevel and other third-party providers.
No method of transmission, storage, or electronic processing is completely secure. We therefore cannot guarantee absolute security.
Clients are responsible for protecting their credentials, controlling user access, enabling available security features, using appropriate passwords, and promptly notifying us of suspected unauthorized access.
Depending on location and applicable law, individuals may have rights to:
Requests concerning ConvoPal AI’s own business information may be submitted to abigail@convopalai.com.
Requests concerning information processed for one of our clients should ordinarily be submitted directly to that client. When required, we will assist the client in responding.
We may need to verify identity and authority before completing a request. Certain information may be retained when permitted or required by law, including information needed to complete transactions, maintain security, comply with legal obligations, or establish and defend legal claims.
To the extent the California Consumer Privacy Act applies to ConvoPal AI, California residents may have rights to know, access, correct, delete, and obtain information about the disclosure, sale, or sharing of their personal information, as well as the right to opt out of qualifying sales or sharing.
During the preceding 12 months, we may have collected the categories described in this Privacy Policy, including identifiers, customer-record information, commercial information, internet or network activity, audio or electronic communications, professional information, inferences, and potentially sensitive information when voluntarily submitted or required for a requested service.
We collect these categories from individuals, clients, integrations, service providers, business partners, and automatically through websites and Services. We use and disclose them for the business purposes described above.
We do not knowingly sell or share the personal information of individuals under 16 years old.
California law requires information collection, use, retention, and sharing to be reasonably necessary and proportionate to the disclosed purposes, and requires reasonable security measures appropriate to the information.
ConvoPal AI and its providers are located primarily in the United States. Information may be processed or stored in the United States or other countries where our providers operate.
Where required, we and our providers use contractual or other safeguards intended to support lawful international data transfers.
The Services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 without legally sufficient authorization.
Clients may not intentionally use the Services to collect children’s personal information unless they have received ConvoPal AI’s prior written approval and implemented all legally required parental-consent and privacy safeguards.
The Services may contain links to or integrate with third-party websites, platforms, and applications. Those third parties may process information under their own privacy policies and terms.
ConvoPal AI is not responsible for the independent privacy practices of third parties that are not processing information solely on our behalf.
We may update this Privacy Policy periodically to reflect changes in our Services, providers, practices, or legal requirements.
The revised policy will be posted with an updated “Last updated” date. When required, we will provide additional notice or obtain consent before materially changing how previously collected information is used.
Questions, concerns, or privacy requests may be directed to:
ConvoPal AI LLC
455 Market St, Ste 1940, Num 617602
San Francisco, CA 94105
Phone: 916-403-3090
Email: abigail@convopalai.com