Privacy Policy
How Whiz collects, uses, and protects personal data when you use Convattic.
Last updated: June 8, 2026
This Privacy Policy explains how Whiz, operating the Convattic service, collects, uses, and protects personal data when you use our website, browser extension, and account features.
Convattic helps you save and manage AI conversations from services such as ChatGPT, Claude, Gemini, and Perplexity. Your saved conversations are stored for your account and are not used by us to train AI models.
1. Who controls your data
The data controller for Convattic is Whiz, a sole proprietorship based in Hungary.
You can contact us about privacy questions or requests at bakos.soda@gmail.com. This draft uses email-only contact details and should be legally reviewed before launch if a postal address must also be disclosed.
2. Personal data we collect
We collect only the data needed to operate your account, provide the service, manage subscriptions, and improve Convattic when analytics consent has been granted.
- Google sign-in data: your Google account identifier, email address, and, where provided by Google, your profile name and avatar image.
- Account data: your Convattic plan, account creation time, and related account status information.
- Saved content: conversation titles, messages, tags, and related metadata that you choose to save through Convattic.
- Subscription data: billing and subscription status information processed through Lemon Squeezy for paid plans.
- Usage analytics: limited analytics information collected through Google Analytics 4 when you have opted in through the consent banner or settings.
3. How we use your data
We use personal data to authenticate you, provide access to your vault, store and organize saved conversations, manage plans and payments, respond to support requests, protect the service, and understand product usage where you have consented to analytics.
We do not use your saved conversations or messages to train our own AI models.
4. Legal bases under GDPR
We process your data on the basis of contract performance when we provide the Convattic service to you, consent where analytics are optional, legitimate interests where needed to secure and operate the service, and legal obligations where we must comply with applicable law.
5. Third parties and sharing
We share data only where necessary to provide the service or comply with law.
- Google OAuth: used to authenticate your account.
- Lemon Squeezy: used to process subscriptions, renewals, cancellations, and refund handling for paid plans.
- Google Analytics 4: used only when you grant analytics consent.
- We may also disclose information where required by law, regulation, or a valid legal request.
6. International data transfers
Some service providers we rely on may process data outside the European Economic Area. Where that happens, we expect appropriate safeguards such as standard contractual clauses or equivalent lawful transfer mechanisms.
7. Retention and deletion
We keep your account data and saved conversations for as long as your account remains active.
If you delete your account, your account data and saved conversations are deleted. We do not intend to keep your content afterward, except where temporary retention is strictly required to comply with applicable law or to complete an in-progress security or abuse investigation.
8. Analytics, cookies, and consent
Convattic asks for analytics consent before enabling Google Analytics 4. You can later change that choice in the product settings.
If analytics consent is denied, analytics collection should remain disabled. Essential browser storage may still be used for core product features such as authentication state or remembering your consent preferences.
9. Your rights
Depending on applicable law, including the GDPR, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to certain processing, portability, and withdrawal of consent where processing is based on consent.
To exercise these rights, contact bakos.soda@gmail.com.
10. Security and children
We take reasonable technical and organizational measures to protect your data, but no service can guarantee absolute security.
Convattic is intended for adults and is not offered to children under 18.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the last-updated date on this page and may provide additional notice where appropriate.
Privacy contact
For privacy questions, requests, or complaints, contact bakos.soda@gmail.com.