Customer data under control, from form to erasure
Convs processes personal data from forms and orders. That is why it encrypts it, limits access by role and erases it after a set time.
Screenshots from a demo organisation. People and numbers are fictional.
Hashing and encryption
Email and phone numbers are normalised and hashed with SHA-256 before they reach Meta. Tokens, secrets and submission data are encrypted with AES-256-GCM.
- HttpOnly session cookies and CSRF protection
- Each organisation’s data kept apart, access checked on every request
- Personal data in automation runs erased after 30 days
Roles and masking
Four roles: owner, admin, operator and viewer. Viewers see masked phone numbers and emails, and SMS content is hidden from them.
Retention and erasure
Set the retention period from 6 to 120 months (24 by default). Inactive people are erased every night. You can erase a person by hand on request.
- Only submission IDs stay, for deduplication
- The “Do not SMS” list stays, so nobody who opted out is texted again
- Unsent Meta events are cancelled
Background jobs without personal data
The job queue shows progress and errors but stores no personal data, so every team member can see it.
Run it on your own server
Convs is a single executable with a built-in database. On the Custom plan you can run it on your own infrastructure.
This page describes how the product works. It is not legal advice: agree the legal basis for processing and your consent wording with your lawyer.
Not on its own. Hashing limits what reaches Meta, but you still need a legal basis and a privacy notice. Before a form is connected, an admin confirms the legal basis.
Yes, on every plan, because we process your customers’ data. On the Custom plan the terms are negotiable. Write to us and we will send a draft.
Saved connections can no longer be decrypted and have to be reconnected. Keep the key in a secret manager and do not change it without a plan.
See also
- Meta Conversions APILeads, sheet rows and orders sent to Meta from a server, without duplicates.See details
- CRMOne person per phone or email, full history, stages, owner and tasks.See details
- AutomationsSMS to new leads, tasks and webhooks, with sending hours and an opt-out list.See details
- Campaign reportingMeta spend joined with CRM stages: cost per lead, per qualified lead and per sale.See details
- For agenciesA separate workspace per client, roles, an all-clients overview and job queues.See details
See what Meta sees
Connect your ad account and see which forms are ready and which need fixing. Free up to 100 leads a month, no card required.