Legal

ConvertPilot Privacy Policy

Last updated: June 2026

1. Overview

This Privacy Policy ("Policy") describes how Dude Lemon, LLC, located in Wyoming, United States ("Company," "we," "us," and "our"), collects, uses, shares, and protects personal data in connection with ConvertPilot (the "Service"), including its web dashboard and its iOS and Android mobile apps.

ConvertPilot is a business-to-business customer-support tool. The people who sign in to ConvertPilot are business owners and their team members ("Merchants") who use it to manage conversations with their own customers. ConvertPilot is installed by a business, typically through the Wix App Market, and account registration takes place there, not inside the mobile app. The app sells nothing and contains no in-app purchases.

If you have questions about this Policy, contact us at https://dudelemon.com/contact.

2. The ConvertPilot Mobile App

The mobile app is a companion client for existing ConvertPilot business accounts. It lets a signed-in team member read and reply to their customer conversations on the go. Specifically:

• The app is sign-in only. There is no account registration in the app; accounts are created when a business installs ConvertPilot through its platform (for example the Wix App Market), where our policies are presented at install.
• The app communicates only with ConvertPilot's own backend. It does not embed any third-party advertising, analytics, or AI SDK, and it does not send your data directly to any third party.
• The app does not track you across other apps or websites, and does not use your data for advertising.
• You can permanently delete your account and personal data from within the app at any time. See Account and data deletion.

3. Information We Collect

3.1 Account data you provide

When your business registers and when you sign in, we collect your work email address, and optionally your name and profile photo.

3.2 Conversation content

As you use the inbox, we process the messages exchanged between your business and your customers, the contact details a customer chooses to share (name, email, phone), AI-derived signals such as intent and sentiment, and conversation metadata (timestamps, channel, page or referral source, and a short conversational memory kept so the assistant can maintain context).

3.3 Device data for notifications

To send you push notifications about new messages, we collect a push-notification token for your device. You can turn notifications off at any time.

3.4 Diagnostic data

We collect limited, non-identifying crash and error reports to keep the Service stable.

4. How We Use Your Data

• Service delivery - to show your inbox, deliver messages, capture leads, and send notifications.
• AI features - to draft optional AI-suggested replies, to classify conversation intent and sentiment, to prioritize and route conversations, to detect spam, and to answer a customer's questions about products and their own orders. See AI features and data handling for exactly what the AI does and does not do.
• Communication - to correspond with you about your account and provide support.
• Security - to detect and prevent fraud, spam, abuse, and security incidents.
• Legal compliance - to comply with applicable laws and enforceable governmental requests.

We do not sell your personal data or your customers' personal data, we do not use any of it for advertising, and we do not use it to train AI models for other customers. We never disclose your customers' data to any third party for that party's own purposes. The only time customer data, order data, or other personal information leaves our systems for an outside platform is when you, the Merchant, choose to connect and enable one of our optional Integrations, and then only the specific data that integration needs. See Data sharing.

5. AI Features and Data Handling

ConvertPilot uses artificial intelligence only to help a Merchant run customer support inside ConvertPilot. We are deliberately narrow about what the AI does, what data it sees, and where that processing happens.

5.1 What the AI is used for

The AI is used solely for these support functions:

• Drafting optional suggested replies to a customer's message.
• Classifying a conversation's intent and sentiment so it can be prioritized and routed.
• Detecting spam and abusive or automated messages.
• Summarizing a conversation and maintaining short, in-conversation memory so the assistant keeps context.
• Answering a customer's questions about the Merchant's products and about that same customer's own order (for example order status, items, or tracking) when the customer provides the matching email in the conversation.
• Helping capture a lead's contact details that the customer chooses to share.

5.2 What the AI never does

• It is never used for advertising, profiling for advertising, or any purpose unrelated to answering the conversation in front of it.
• Your conversations and your customers' data are never used to train AI models and are never used to benefit any other business.
• We never send payment card numbers, passwords, or platform API credentials to the AI.
• One Merchant's data is never mixed into, or exposed to, another Merchant's AI results.

5.3 Where AI processing happens

All AI processing, including orchestration, intent and sentiment signals, conversation memory, routing, spam detection, and generating a suggested reply, happens on our own servers (hosted on Amazon Web Services in the United States) under strict access controls and security protocols. We do not send your conversations, your customers' personal data, your order data, or any personal information to any outside party for AI processing. We process only the minimum content needed to produce the result, and never your billing details or credentials.

5.4 Order and customer information in AI answers

When a customer asks about their own order or a product, the assistant may use that order's or product's details for the duration of that single conversation, only to answer the customer in that conversation. This is processed on our own servers, only for that purpose. It is not used to train any model, is not used for advertising, and is not shared with any other business. We do not build or keep a separate copy of a store's order or customer database for AI purposes.

6. Store and Customer Data (Wix, Shopify, and Custom Sites)

ConvertPilot runs on Wix stores, Shopify stores, and custom or standalone websites. On whichever platform a Merchant uses, ConvertPilot accesses only a limited set of store data, strictly to operate the features the Merchant turned on. We follow the same principles across every platform: data minimization, purpose limitation, and strong safeguards. On Shopify specifically, this also meets Shopify's Protected Customer Data requirements.

6.1 What we access, and why (data minimization and purpose limitation)

• Products - so the assistant can answer product, price, and availability questions.
• Orders - so the assistant can answer a shopper's questions about that shopper's own order (status, items, tracking) after the shopper provides the matching email in the conversation. We request order access only because this feature needs it, and we use it only for that purpose.
• Customers - so a lead a shopper shares in chat can be saved into the Merchant's own store records (its existing CRM, for example Wix Contacts or Shopify Customers). We create or update records inside the Merchant's own store only; we do not export or copy the Merchant's customer list out of their platform.

On Shopify, this maps to the read_products, read_orders, and write_customers scopes. On Wix and on custom sites, the equivalent access is granted by the Merchant at install or connection. In every case the access is the minimum needed for these features.

6.2 How we handle store, customer, and order data

• On demand, not warehoused. Order and customer lookups are performed live against the Merchant's platform only when needed to answer a specific conversation, and the result is used in that conversation. We do not build, store, or maintain a separate copy of the store's order or customer database.
• Encrypted. Platform access tokens are encrypted at rest using AES-256-GCM, and all data is transmitted over TLS. Access is restricted to the systems and personnel that operate the Service, on a least-privilege basis.
• Processed on our own servers. This data is processed on our own infrastructure under strict protocols. We do not hand it to any outside party.
• No sale, no advertising, no training, no cross-merchant use. We never sell customer or order data, never use it for advertising, never use it to train AI models, and never share one Merchant's data with another.
• No outside transfer unless you connect an Integration. Customer and order data stays within our systems and is not sent to any outside platform unless the Merchant chooses to connect and enable one of our optional Integrations (for example a CRM or marketing tool), and then only the specific data that integration requires.
• Deletion. When ConvertPilot is uninstalled or a Merchant's account is closed, we permanently purge the Merchant's account data. On Shopify we also honor the mandatory customers/data_request, customers/redact, and shop/redact requests. A shopper or Merchant may also request deletion through our data request form. See Retention and deletion.

7. Legal Bases for Processing

Where the GDPR applies, we process personal data under these legal bases: consent; legitimate interest (operating and improving the Service); contractual necessity (providing the Service you signed in for); and legal obligation. You may withdraw consent at any time by contacting us; withdrawal does not affect processing performed before withdrawal.

8. Data Sharing

We do not sell your personal data or your customers' personal data, and we never disclose your customers' data to any third party for that party's own purposes. We share information only in these limited ways: with the infrastructure providers listed below, who act only on our behalf, under contract, and use the data only to operate the Service as we specify; with an outside platform you choose to connect through one of our optional Integrations, and then only the specific data that integration requires; where required by law, regulation, legal process, or a governmental request; in connection with a merger, acquisition, or sale of assets (with notice); and with your consent.

By default, your customers' data and order data stay within our own systems. No outside platform receives them unless you, the Merchant, deliberately connect and enable an Integration that needs them. We never turn an Integration on for you, and we never share data with another business that uses ConvertPilot.

9. Sub-Processors and Integrations

To operate ConvertPilot we rely on the providers below. Each receives only the data needed for its function, governed by its own terms and privacy policy:

• Amazon Web Services (AWS) - cloud hosting, data storage, and email delivery.
• Wix and Shopify - the platforms a Merchant uses to install ConvertPilot; account and site context is exchanged to operate the app.
• Apple Push Notification service and Firebase Cloud Messaging (Google) - deliver push notifications to your device.
• Meta Platforms - power the Facebook Messenger, Instagram, and WhatsApp channels. We integrate with Meta only if you choose to connect your own Facebook, Instagram, or WhatsApp account; until you connect it yourself, no data is exchanged with Meta.
• Twilio and Telegram - power the SMS and Telegram channels. We integrate with them only if you choose to enable and connect that channel yourself; no data is sent to Twilio or Telegram unless you do.
• Stripe - processes subscription billing for paid plans (handled on the web, not in the mobile app).
• Klaviyo, Mailchimp, and HubSpot - marketing and CRM destinations. We send contacts and conversation signals to these tools only if you connect that account yourself and direct us to; we never connect them on your behalf.
• Error monitoring - a diagnostics provider receives non-identifying crash reports.

All channel and marketing integrations are off by default and are activated only when you choose to connect and enable them yourself. We do not share data with these providers beyond what each integration requires to function, and we never enable an integration on your behalf.

10. Controller and Processor Roles

When you sign in to ConvertPilot or contact us directly, Dude Lemon is the data controller for your account data. When a Merchant uses ConvertPilot to handle its own customers' data, the Merchant is the controller of that customer data and Dude Lemon acts as a processor (a "service provider" under U.S. privacy law) on the Merchant's behalf and under its instructions. Merchants are responsible for providing their own privacy notice to their customers. If your data was collected through a Merchant's use of ConvertPilot and you wish to exercise privacy rights, please contact that Merchant; you may also contact us and we will route your request appropriately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. When we transfer personal data from the EEA, United Kingdom, or Switzerland to countries not deemed adequate, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

12. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption of data in transit using TLS, access controls limiting access to authorized personnel, regular monitoring, and secure coding practices. No method of transmission or storage is completely secure, but we maintain industry-standard protections.

13. Data Breach Procedures

In the event of a personal data breach likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours of becoming aware, notify affected individuals without undue delay where the risk is high, document the breach and our response, and take immediate steps to contain and remediate it.

14. Retention and Deletion

We retain your data only for as long as your account is active or as needed to provide the Service, then delete or anonymize it, except a limited set of billing records we are required to keep by tax and accounting law, and data in encrypted backups that ages out on a rolling 30-day schedule.

15. Account and Data Deletion

You can delete your account and personal data at any time:

16. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. To exercise any of these, use our data request form or contact us. We respond within 30 days and may ask you to verify your identity first.

17. CCPA / CPRA Rights (California Residents)

California residents have the right to know the categories and specific pieces of personal information we collect, its sources, the purposes, and the categories of third parties we share it with; to delete personal information; to correct inaccurate information; to opt out of sale or sharing (we do not sell or share personal information for cross-context behavioral advertising); and to non-discrimination for exercising these rights. To submit a request, use our data request form. We verify identity and respond within 45 days.

18. Nevada Privacy Rights

Nevada residents may opt out of the sale of certain covered information. We do not sell covered information, but you may submit an opt-out request through our data request form and we will respond within 60 days.

19. Children's Privacy

ConvertPilot is a business tool and is not directed to individuals under 16. We do not knowingly collect personal data from children under 16. If we learn we have done so without parental consent, we will delete it promptly.

20. Tracking and Advertising

We do not track you across other companies' apps or websites, we do not use your data for advertising, and we do not use Apple's App Tracking Transparency tracking. ConvertPilot contains no advertising and no third-party advertising or analytics SDKs in the mobile app.

21. App Store and Google Play Disclosures

For transparency, in App Store and Google Play terms, the data the app handles is used to provide the Service and is not used for tracking or advertising:

• Contact info (your work email, optional name) - linked to your account, used for app functionality and account management.
• User content (messages and conversation content you and your customers create) - used for app functionality (delivering and replying to conversations and generating AI-suggested replies).
• Identifiers (a device push token) - used for notifications.
• Diagnostics (crash and performance data) - not linked to your identity, used to keep the app stable.

None of this data is sold, and none is used to track you across other companies' apps or websites.

22. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above. Your continued use of the Service after changes constitutes acceptance of the updated Policy.

23. Contact

Questions, concerns, or requests regarding this Policy or your data:

• Data requests: https://convertpilot.dudelemon.cloud/privacy-choice
• General contact: https://dudelemon.com/contact
• Company: Dude Lemon, LLC, Wyoming, United States