Privacy Policy

Last updated 3 September 2026

Who is responsible

ConversaX is operated by Glow With Chlo. For anything in this policy, including a deletion request, contact glowwithchloinfo@gmail.com.

What is stored

• Messages. The direct messages exchanged between a business and the people who message it, so a reply can take the conversation into account rather than reading each message in isolation.
• Instagram profile basics. The account ID and username of people who message a connected business, so a conversation can be attributed to the right person.
• Business documents. Material the business owner uploads, such as price lists and treatment information, used to ground replies in fact.
• Access tokens. Encrypted at rest, used only to send and receive messages on behalf of a business that has connected its account.

What is not done with it

• It is never sold, rented, or shared for advertising.
• It is not used to train any machine-learning model.
• One business can never see another's conversations, clients, or documents.

Automated replies

Replies are drafted by software and grounded in the documents the business has provided. Health-related questions are never answered automatically; they are passed to a person. A business can review every message before it is sent.

Processors

Message text is sent to Google (Gemini) to draft replies, and data is stored with Supabase. Both act on instructions only. No other third party receives message content.

How long it is kept

Conversations are kept while the business remains a customer, so it can look back at what was said. On request, or when an account closes, the data is deleted.

Your rights

Under UK GDPR you may request a copy of your data, ask for it to be corrected, or ask for it to be erased. Email glowwithchloinfo@gmail.com and it will be actioned within 30 days.

Deleting your data

If you have messaged a business using ConversaX and want your messages removed, see data deletion, or email glowwithchloinfo@gmail.com.