Data Security & Privacy
1. Data Collection & Minimisation
-
We collect only what’s necessary:
-
Full name
- Email address
-
Phone number
-
Address (for billing or account management)
-
-
We do not store call content or unnecessary personal data.
2. GDPR Compliance
-
Convo acts as Data Controller.
-
Transparent processing for legitimate purposes.
-
Users have rights to access, correction, and deletion.
3. Encryption & Secure Transmission
-
At Rest: AES-256-GCM.
-
In Transit: TLS 1.2 and SSH.
-
Passwords: hashed with BCryptPasswordEncoder.
4. Video Relay Call Handling
-
No video, audio, or transcripts stored.
-
Interpreters access live data only.
-
Sessions fully encrypted.
5. Backups & Geo-Redundancy
-
Continuous, encrypted backups.
-
Multi-region cloud providers certified under ISO 27001.