A conversation
built on trust.

This notice explains how ConvoCommerce handles consultation requests, accounts, and product visibility assessments.

What we collect and why

We collect your name, email address, store URL, platform, and any message you choose to provide. We use these details to review your store, respond to your inquiry, and discuss potential services. Please do not include passwords, payment details, or other sensitive information.

How requests are handled

Your request is sent directly to our team through our email provider. We do not store consultation requests in an application database. Hosting and email providers process the information needed to provide those services. If a submission fails, your details are temporarily retained in your session so you can retry. Submitting this form does not subscribe you to a marketing list.

Website analytics

We use Google Analytics to count website visitors and understand whether visits come from our plugin. Analytics uses cookies and processes browser and device information. On sign-in and assessment pages, we send generic page names and a fixed plugin campaign label, not account emails, sign-in tokens, product details, or report contents. Blocking analytics may prevent a visit from being counted.

Security and spam prevention

We use Cloudflare Turnstile to protect this form from automated abuse. Cloudflare processes browser and device signals for verification. See Cloudflare’s privacy policy. Our application also uses session cookies to protect form submissions and display confirmation or validation messages.

Accounts and product assessments

We store your account email, hashed sign-in tokens, assessment allowance, product details, test questions, AI responses, source links, and reports. Reports and manually supplied consumer-app evidence are private and retained for 90 days. We record whether an assessment originated on our website or through a connected AI client to understand use of the service. Creating an account does not subscribe you to marketing emails.

Product information and test questions are sent to OpenRouter and its model and search providers to perform assessments. We do not send your account email, sign-in tokens, or unrelated chat history in these requests. Provider retention and processing are governed by their applicable policies. Model recognition and shopping tests run separately. Human operators may attach consumer-app observations, which are labeled separately.

OAuth connections allow an AI client to access assessments in your account. You can revoke connections from your account. Sign-in links expire after 15 minutes. Operational records include limited usage and error information; we avoid recording sign-in secrets or full assessment content in error logs.

Request diagnostics

We record limited technical diagnostics to investigate connection failures and keep the service reliable: a request identifier, HTTP method, fixed route category, response status, and processing time. These records exclude IP addresses, account identifiers, request headers and bodies, query strings, sign-in secrets, product URLs, and report contents. Unrecognized paths are grouped into fixed categories rather than recorded.

Retention and your requests

We retain consultation information as needed to respond to your inquiry and manage any resulting business relationship. To request access, correction, or deletion, reply to our correspondence or contact us through the form.