Privacy Policy

1. Who we are and roles

ConvertNest is operated from India and helps merchants embed popups on their websites to capture leads, deliver digital products (files and ebooks), send delivery emails, and track usage and performance. Merchants and their website visitors may be located in the United States or elsewhere.

• Merchant account data. For your ConvertNest login, profile, billing/usage records, and workspace content, ConvertNest acts as a data controller / data fiduciary (or equivalent under applicable law, including India’s Digital Personal Data Protection Act, 2023 where it applies).
• Visitor / lead data. When someone submits an email (and optional fields) in a popup on your site, you are the merchant controller of that lead. ConvertNest processes that data on your behalf to operate the popup, deliver downloads, send related emails, and show analytics in your workspace.

2. Information we collect

2.1 Information you provide as a merchant

• Account and profile details such as name, email address, password (stored by our auth provider), company/brand name, and preferences.
• Workspace content you create or upload: sites/domains, products, ebook content, popup designs, email templates, branding (colors, logo, fonts), and related media files.
• Support and feedback messages you send to us (including in-app feedback), which may include your email and the page you were on.
• Communication preferences (for example product emails or lead alerts).

2.2 Information collected from website visitors (via your popups)

• Email address and any other fields you configure on the popup form (for example name or custom fields).
• Technical identifiers used for frequency capping and unique-visitor limits, including a visitor key stored in the visitor’s browser (localStorage key cn_vid) and related session/local storage keys for popup frequency and teaser dismissal.
• Contextual data needed to run the embed (such as site hostname matching and popup configuration).

2.3 Usage, device, and log data

• How you use the Service (pages viewed in the app, feature usage, AI generation jobs, email send counts, visitor quotas).
• Technical logs that may include IP address, browser type, timestamps, approximate location derived from IP, and error diagnostics needed to secure and operate the Service.
• Authentication session data stored in your browser so you stay signed in.

2.4 Payments and billing

ConvertNest is currently offered on a Free plan for launch. Native payment connectors inside ConvertNest are not generally available yet. Merchants may still link buy buttons to their own external checkout URLs.

• We may store plan, usage, and subscription-related records in your workspace (including limits for visitors, email sends, and AI credits).
• If you later connect or pay through a third-party payment provider, card and bank details are handled by that provider — ConvertNest does not store full payment card numbers.
• Order records (if/when checkout is enabled) may include customer email, name, amount, currency, and payment-provider references.

2.5 AI features

If you use AI features (for example popup, ebook, cover, or help assistance), we process the prompts, product/offer details, branding, and related content you provide, and may log token usage and feature metadata to operate quotas and improve reliability. Content may be sent to our AI model provider (which may process data outside India, including in the United States) to generate results.

3. How we use information

• Create and manage merchant accounts and workspaces.
• Provide the Service: embed popups, store products and ebooks, send delivery and related emails, and show dashboards and usage meters.
• Process leads and downloads on behalf of merchants.
• Provide customer support and respond to feedback.
• Operate security, fraud prevention, abuse detection, and service integrity across jurisdictions where we operate.
• Improve and develop the Service (including debugging, aggregate usage analytics, and AI feature quality).
• Send product or account notices you opt into or that are necessary for the Service.
• Comply with Indian law and other applicable laws, enforce our Terms, and protect rights and safety.

4. Legal bases (where applicable)

Depending on your location, we process personal data under bases such as contract performance, legitimate interests, consent (where required), and legal obligation. For Indian residents, we process personal data for the purposes described in this Policy in line with applicable Indian data-protection law, including purposes connected with providing the Service and complying with law.

Merchants are responsible for having a lawful basis to collect visitor emails and other lead data through their popups (for example consent or another valid basis under US, EU/UK, Indian, or other local law) and for providing any required notices on their own sites.

5. How we share information

We do not sell personal information. We share information only as needed to run the Service or as required by law:

• Infrastructure & database. We host application data with cloud providers (currently including Supabase for authentication, database, and file storage), which may store or process data in the United States or other countries.
• Email delivery. Transactional and product emails (such as download delivery) may be sent through an email delivery provider configured for ConvertNest.
• AI providers. When you use AI features, relevant prompts and content may be processed by our AI model provider (for example OpenAI) to generate outputs.
• Authentication providers. If you sign in with Google, Google authenticates you and shares basic account identifiers needed to create or link your ConvertNest session.
• Payment providers. If and when payment features are enabled, providers such as Stripe or PayPal may process payments and receive related transaction data.
• Service providers. Hosting, CDN, email, and similar vendors who process data under instructions to help us operate ConvertNest.
• Legal & safety. When we believe disclosure is required to comply with Indian or foreign law, court orders, or to protect ConvertNest, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate protections.

Lead emails collected on your behalf remain associated with your workspace. We do not use merchant lead lists to market ConvertNest to those visitors, except as needed to provide the Service to you.

6. International transfers

ConvertNest is based in India and serves customers worldwide, including in the United States. Your information may be transferred to, stored in, or processed in India, the United States, and other countries where we or our service providers operate. Those countries may have data-protection laws that differ from the laws in your country of residence.

Where required, we rely on appropriate transfer mechanisms offered by our providers (such as contractual safeguards) and take steps reasonably designed to protect personal data in transit and at rest. By using the Service, you understand that cross-border processing is necessary to deliver ConvertNest.

7. Cookies and similar technologies

ConvertNest uses cookies and local browser storage that are necessary for authentication, security, and popup behavior (for example keeping you signed in, remembering theme preferences, visitor uniqueness for plan limits, and popup frequency rules). We do not currently use third-party advertising cookies on the marketing site as a core product feature. You can control cookies and site data through your browser settings; disabling some storage may break login or popup features.

8. Data retention

• Merchant account and workspace data are retained while your account is active and for a reasonable period afterward if needed for backups, disputes, or legal requirements.
• Leads, orders (if any), usage counters, and delivery logs are retained to provide analytics, downloads, and support, and may be deleted or anonymized when no longer needed or upon a valid deletion request where required.
• Visitor uniqueness keys and related counters are used for monthly plan limits and may be retained on a rolling calendar-month basis as needed to enforce quotas.
• After account closure or termination, we may delete or anonymize workspace data after a reasonable period (for example about thirty (30) days), unless a longer period is required by law or for legitimate disputes.
• You may delete workspace content (such as products, popups, or leads) from the app where that functionality is available. Account deletion requests can be sent to support.

9. Security

We use industry-standard safeguards appropriate to a SaaS product, including encrypted connections (HTTPS), access controls, authentication via our identity provider, and separation of merchant workspaces in our database with row-level security policies where configured. No method of transmission or storage is 100% secure. You are responsible for keeping your password confidential and for securing access to your account.

This Privacy Policy describes our actual data practices. We do not claim immunity from privacy or data-protection laws (such as India’s DPDP Act, GDPR, or CCPA/CPRA) by disclaimer. If our practices change, we will update this Policy. If you believe personal data has been compromised in connection with ConvertNest, contact us promptly at legal@convertnest.com so we can investigate and respond as required by applicable law.

10. Your rights

Depending on where you live (including India, the EEA/UK, California, or elsewhere), you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of personal data.
• Object to or restrict certain processing.
• Request data portability.
• Withdraw consent where processing is based on consent.
• Opt out of certain marketing emails (product emails can be managed in Settings preferences where available).
• For California residents: rights under the CCPA/CPRA, including to know, delete, and correct personal information. We do not sell personal information as defined by those laws.

Merchants can update many profile fields in Settings. To exercise other rights, or for visitor/lead requests that involve ConvertNest as a processor, email support@convertnest.com or legal@convertnest.com. We may need to verify your identity before fulfilling a request. Visitors who want their lead deleted should typically contact the merchant first; we will assist merchants with processor requests as required.

If you are in the EEA/UK, you may also lodge a complaint with your local data protection authority. Indian residents may also raise grievances with us using the contact details below; we will respond within timelines required by applicable law.

11. Children’s privacy

The Service is not directed to children under 13 (COPPA) and merchant accounts are intended for individuals who can lawfully contract under applicable law (including 18+ where required under Indian law). We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal data, contact support and we will take appropriate steps.

12. Merchant responsibilities

• Provide appropriate privacy notices on your own websites for visitors who see your ConvertNest popups, including where you target US, EU/UK, or Indian visitors.
• Collect only data you are allowed to collect, and use leads in line with applicable law and your own policies.
• Configure products, emails, and claims accurately; you are responsible for your offers and customer relationships.
• If you link to an external checkout URL, that payment provider’s privacy policy also applies to the payment.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will change the “Last updated” date at the top and, when changes are material, provide additional notice (for example in the app or by email). Continued use of the Service after an update means you accept the revised policy.

14. Contact us

ConvertNest
Support: support@convertnest.com
Legal / privacy: legal@convertnest.com
Website: https://convertnest.com