Conversion Terms of Service

Last Updated: January 8, 2025

Conversion (Relentlo Inc.) provides a B2B marketing automation platform (“Platform”) for business customers to plan, send, and measure marketing communications. This Terms of Service describes how we collect, use, disclose, and safeguard personal data in two contexts:

• Services — Data we process in the Platform for our customers (you are the controller, we are the processor). Governed by our Data Processing Addendum (DPA) and contracts.
• Websites — Data we collect for our own business purposes (we are the controller).

If you are an end user of a Conversion customer, contact that customer directly to exercise your rights.

1. Definitions

• Personal Data: Information identifying or relating to an individual.
• Customer Data: Data in the Platform submitted by or for a customer (contact lists, content, engagement events).
• Service Data: Data generated by use of the Services (usage logs, metrics, diagnostics).
• Third-Party Products: External apps/services connected to the Platform (CRM, email, analytics, hosting, etc.).

2. Scope and Audience

Applies to Personal Data processed via Services and Websites. Does not apply to third parties, customers, or linked sites with different policies. Not for children under 16.

3. Information We Collect

A. Account, Profile, Billing

• Name, employer, job title, contact details
• Login credentials or SSO identifiers
• Billing contact, address, limited payment metadata

B. Customer Data (Processor)

• Contact records, preferences, suppression lists
• Campaign content
• Engagement metrics (opens, clicks, bounces, replies, unsubscribes), meeting/scheduling info
• Integration data from connected systems
• Integration authorization tokens

C. Usage & Device (Service Data)

• Logs, IP, device/browser, OS, app version, language, pages viewed
• Diagnostic and crash data

D. Website, Cookies, Similar Tech

• Cookies, pixels, SDKs for settings, authentication, analytics, ad measurement

E. Communications & Support

• Messages, surveys, webinars, recordings (with notice/consent)

F. Sourcing/Prospecting (Controller)

• Business contact info from you, your employer, customers, public sources, and data providers

Sensitive Data: Not sought; customers should not upload without written approval.

4. Sources of Personal Data

From you/your org, customers, connected Third-Party Products, service providers/partners, public sources.

5. How We Use Personal Data

• Provide/operate Services (accounts, auth, campaigns, integrations, support)
• Improve/security (performance monitoring, debugging, fraud prevention, feature dev)
• Analytics and reporting
• Communications (updates, alerts, training)
• Sales and marketing (per preferences/laws)
• Compliance and legal obligations
• Create aggregated/de-identified datasets

6. Legal Bases (EEA/UK)

• Contract necessity
• Legitimate interests (secure, operate, improve, marketing, fraud prevention)
• Consent (non-essential cookies, certain marketing)
• Legal obligation

7. Cookies & Similar Tech

• Essential: Core functions/security
• Functional: Preferences/features
• Analytics: Usage/performance
• Advertising (Websites): Deliver/measure ads, audience understanding
  Control via cookie banner, browser settings, or third-party tools. Email campaigns may use pixels for engagement tracking.

8. How We Disclose Personal Data

• Service providers (hosting, delivery, analytics, auth, support, payments)
• Third-Party Products (if connected)
• Affiliates
• Legal/safety requirements
• Business transfers (M&A, financing, sale)
• At your direction/with consent
• Aggregated/de-identified data
  No Sale: No selling of Personal Data; limited ad/analytics “sharing” for Websites only.

9. International Data Transfers

May process in US and other countries; use Standard Contractual Clauses and UK Addendum where required.

10. Data Retention

Kept as long as needed for Services, legal compliance, dispute resolution, and contracts. Customers control Customer Data retention.

11. Security

Administrative, technical, and physical safeguards, including access control, least-privilege, logging, vulnerability management, and encryption in transit.

12. Your Privacy Rights

Depending on location, you may:

• Access/port data
• Correct inaccuracies
• Delete data
• Restrict/object to processing
• Withdraw consent
• Opt out of targeted ads/certain profiling

End users of a Conversion customer must contact that customer.

13. How to Exercise Choices

• Platform end-users: Contact sending customer, use unsubscribe/STOP commands
• Website/account users: Email privacy@conversion.ai or use “Your Privacy Choices” link
• Marketing emails: Use unsubscribe link

14. California (CCPA/CPRA)

• Categories collected: identifiers, professional info, commercial info, internet activity, geolocation, inferences
• No sale of Personal Data; limited ad/analytics sharing for Websites
• Retention per Section 10
• No discrimination for rights exercise

15. Third-Party Links

We are not responsible for third-party practices; review their policies.

16. Changes to Policy

“Last Updated” date shows revisions. Material changes notified via Services, Websites, or email.

17. Contact Us

Relentlo, Inc.
300 Beale St, Ste A, San Francisco, CA 94105
privacy@conversion.ai

18. EEA/UK Region-Specific

We are the controller for Website/account data; processor for Customer Data in Platform.

19. Additional Customer Terms (Processor Context)

• Process only on customer instructions/law/contract
• Maintain security measures and assist with DPIAs and incidents
• Engage subprocessors with contractual safeguards
• Delete/return Customer Data upon termination or request, subject to legal retention

20. Subprocessors

Current as of October 15th, 2025

• Google Cloud Platform
  
  • Purpose: Hosting Infrastructure
  • Location: USA
• Amazon Web Services
  
  • Purpose: Emailing Service
  • Location: USA
• OpenAI
  
  • Purpose: AI Models
  • Location: USA
• Cloudflare
  
  • Purpose: CDN
  • Location: USA

‍