Legal
Privacy policy
Last updated October 18, 2026
This policy explains what information Convalyst ("Convalyst", "we", "us") collects when you visit convalyst.com or use the Convalyst app at app.convalyst.com (together, the "Service"), how we use it, and the choices you have. If you have questions, email convalystadmin@convalyst.com.
Information we collect
Information you give us
- Account details such as your name, email address, company name and password.
- Dripify connection details you enter in the setup wizard so we can connect to your Dripify account in read only mode. These credentials are encrypted with AES 256 GCM.
- Settings and preferences such as your follow up grace period, alert rules, report recipients, and white label branding (logo, company name, colors, header and footer).
- Billing details when paid plans are purchased. Card details are handled by our payment processor and are not stored on our servers.
- Messages you send us, for example support requests.
Information we access through your Dripify account
When you connect Dripify, the Service reads your LinkedIn conversations managed in Dripify, including prospect names, job titles, companies, campaign names, message content and timestamps, plus any phone numbers or email addresses prospects share in those messages. We only read this data. We never send messages or change your campaigns.
Information collected automatically
We collect basic technical information such as IP address, browser type, device information, pages viewed and the date and time of your visit, through server logs and essential cookies needed to keep you signed in and secure.
How we use information
- To provide the Service: scanning conversations, classifying replies, detecting missed follow ups, extracting shared contact details, and producing reports and alerts.
- To send the daily and weekly reports and the alerts you configure, to you and to the recipients you choose.
- To secure the Service, prevent abuse, and troubleshoot problems.
- To communicate with you about your account, billing, and changes to the Service.
- To improve the Service using aggregated or anonymized information.
We do not sell your personal information, and we do not use your conversation data for advertising.
AI processing
To classify replies and write summaries, conversation content is sent to OpenAI through its API. OpenAI processes this content to return results to us. Under OpenAI's API terms, data submitted through the API is not used to train OpenAI's models by default. We do not use your conversation data to train our own models.
How we share information
- Service providers that help us run the Service, such as cloud hosting, email delivery, AI processing (OpenAI) and payment processing. They may only use the information to provide services to us.
- Report recipients you choose. When you send or CC a report, those recipients can view it in a read only report mode. They cannot see your account settings, billing or credentials.
- Legal reasons, if required by law or to protect the rights, safety and property of Convalyst, our users or others.
- Business transfers, if Convalyst is involved in a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.
Prospect data
The conversations you connect contain personal information about your prospects. You are responsible for making sure you have the right to process that information and for meeting any notice obligations toward those people. We process prospect data only on your behalf and only to provide the Service to you.
Data retention and deletion
We keep your information for as long as your account is active. In your settings you can turn on automatic archiving that purges conversations older than three months, or reset your account's conversation history at any time. If you close your account, or ask us to delete it by emailing convalystadmin@convalyst.com, we delete your account data within a reasonable period, except where we must keep certain records for legal, tax or security reasons.
Security
We use industry standard safeguards, including encryption of Dripify credentials with AES 256 GCM, encrypted connections (HTTPS), read only access to Dripify, and access controls on our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your choices
- You can review and update your account details and settings in the app.
- You can request a copy of your information, a correction, or deletion by emailing us.
- You can stop report emails by changing your report settings or removing recipients.
- You can disconnect your Dripify account at any time, which stops future scans.
Cookies
This website does not use advertising or tracking cookies. The website may remember your light or dark theme choice in your browser's local storage. The app uses essential cookies to keep you signed in and to protect your account.
Children
The Service is intended for business use and is not directed to anyone under 16. We do not knowingly collect information from children.
International transfers
Our service providers may process information in countries other than where you live. When we transfer information, we take steps to protect it as described in this policy.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you by email or in the app.
Contact
Questions or requests about privacy: convalystadmin@convalyst.com.