Privacy Policy

Account Information: Name, email address, and profile image.

Sign-up Source: How you reached the sign-up page: the UTM parameters of the link you came from, the referring site (its host name only, such as www.google.com), and the path of the first page you opened. If you came through convika.com, the first page is the convika.com page you entered on, and Convika also records the convika.com page whose sign-up or log-in link you clicked. If you came to convika.com from the bar at the bottom of a Free plan page, the source recorded is that bar, as the UTM value convika_badge, and the referring site recorded is the address (host name only, such as yourpage.convika.page) of the page the bar was on, which the bar's link carries. If you came from the line on a page that offers to make your own copy of it, the source recorded is that line, as convika_copy, and not the page. If you came to convika.com from the line on a page made from a template, the source recorded is that line, as the UTM value convika_template, and the sign-up record doesn't include which page the line was on. The dashboard sends these with your sign-up request, and Convika records them with your account to see which links and pages lead to sign-ups. What it sends depends on your answer to the cookie banner: - Accepted on convika.com or the dashboard: the first such link your browser saved. - Not answered yet: what the link that opened the sign-up page carries, which your browser doesn't keep. convika.com adds these values to its sign-up and log-in links when you click one. If convika.com no longer knows the referring site, the link carries only the page you clicked and a note that the source is unknown. - Declined on the dashboard: nothing. Declined on convika.com: its sign-up and log-in links carry none of these values, so Convika doesn't record how you reached convika.com.

Sign-up Button: Only if you accepted cookies on convika.com, the sign-up or log-in link you click there also carries the name of its place on the page, such as the button under a guide's summary, the upload box, or the header. Convika records that name with your new account, next to the items above, to see which buttons lead to sign-ups. If you declined or haven't answered, the link carries no name, and none is recorded with your account.

Sign-up Country and Language: For the request that creates your account, Convika records the country Cloudflare estimates from its IP address and the language your browser is set to (the one it lists first), with your account. This is the same whether you sign up with an email address or with Google. Convika doesn't keep the IP address to record the country. It counts which countries and languages people use Convika from, to improve the Service.

Workspace Time Zone: Each workspace keeps one time zone, as an IANA name such as Asia/Tokyo. When the workspace's owner opens the dashboard and the workspace has no time zone yet, Convika records the time zone the owner's browser reports, unless it is UTC. The owner can change it in Settings, at most once a day. Convika also keeps the time zone a workspace is switching to and when the owner last changed it, and each change goes into the audit log. Convika keeps the time zone to decide where each day starts and ends in the workspace's analytics, in the emails about its pages, and in what Convika's tools tell AI clients.

Usage Data: IP address, User-Agent, access country, and session information.

Password Reset and Verification Emails: When someone asks for a password reset link or a new verification email, Convika keeps a keyed hash of the email address entered and one of the IP address the request came from, not the addresses themselves, to limit how many of these emails go out. It deletes the hashes within 2 days.

First-time Steps in the Dashboard: The first time your account takes certain steps, Convika records the step and when it happened. These include signing up, choosing what to do first on the dashboard's first screen (having the built-in AI make a page, or publishing an HTML file you have), seeing the offer to have Convika make a page for you, opening its request page, sending a request, opening the upload screen, choosing a file or pasting code there, following that screen's link to the AI generator, seeing or answering its question when a typed name reads like a request for a page, making your first preview by upload or with the built-in AI, uploading a new version of a page you already have, downloading or copying a page version's HTML, choosing whether a file you upload with the same title as one of your workspace's pages becomes that page's new version or a new page, seeing the page the AI finished, opening a preview, asking the AI for a change, pressing Publish, being asked there who can open the page and choosing to protect it with a password, answering there whether search engines may show the page, publishing for the first time, approving and connecting an AI client, keeping a page from a free tool or from a link Convika sent you and first editing it, letting people make their own copy of a page, keeping a copy of someone's page and publishing it for the first time, starting a page from a template and publishing that page for the first time, keeping a page you made from a template without an account, setting a page password, seeing the banner about keeping Pro during a trial, opening the plans page or a checkout, seeing the offer at the end of a trial (the first year of Pro billed yearly for $29) on the plans page or right after your first publish, pressing its button there, opening the plans page from an email with that offer, opening a checkout with it, seeing the screen to choose a plan (Free, the 1-year Pro pass, or Pro monthly) when you publish your first page, or when a workspace on the Free plan publishes a page behind a password or as a private link (open only to people who have its link), and choosing one, opening the 1-year Pro pass's checkout, its payment being made or, for a payment method paid later, waiting, starting Pro monthly chosen on that screen, with its free trial or, when none applies, paying at checkout, seeing a notice or offer in the dashboard (offers of a paid plan or feature, the Pro offer shown when you choose a feature beyond a Free plan limit, connecting an AI client, the sample page, a page's next step, a custom domain, a problem with a form or a tracking tag on a page) and pressing its link or button, and starting or ending a trial or a plan. Each step is recorded with your account, your workspace, and the UTM values recorded for your sign-up, if any (Sign-up Source above). Some steps also record the plan you were on. Depending on the step, it also holds: - About a page: which page and version it was, how the page was made, whether you chose a file or pasted code, whether an uploaded page uses scripts, whether a page was live when you uploaded a new version of it, whether you downloaded or copied a version's HTML from the page's upload card or its version history, which you chose when a file had the same title as one of your pages, which AI run made it and whether that run created or edited the page, which screen you were on, whether your plan let you set a page password then, whether a page password replaced an earlier one, whether it was set while publishing or in Site settings, whether you let people copy the page while publishing or in Site settings, which page a copy was made from, for a page made from a template, which template and which page's line it was made from, and, when you answered whether search engines may show a page while publishing it, your answer and the answer the question started on. - About an AI client: the client's ID, its User-Agent, how it signed in (the OAuth grant type), the name of the first tool it called, and whether your workspace was on the Free plan once you approved it. A step that Convika adds afterwards from its sign-in records says so. - About plans and payment: the plan, the billing interval, which notice in the dashboard, in an email, on a published page (the link to remove the Convika bar at the bottom of a Free plan page, which shows only in a browser the page's creator opened the page in from the dashboard), or on the screen an ended preview link shows led to the plans page or the checkout, and, when you came from a page's link to remove its bar, that page's address, recorded whether or not the page is yours, and whether your workspace publishes it, the day of the trial, when the trial ends, whether a plan followed a trial, which offer a checkout or a plan came with, how many days before or after the trial's end the offer was seen or used, which screen showed it after your first publish (the page's screen or the built-in AI's), and Stripe's ID for the checkout or the subscription. - About a page you kept from a link: which page, the link's code, and whether your workspace was on the Free plan once you kept it. - About the question on a typed name: which rule read the name as a request, and how many characters the name had. The name itself isn't recorded. - About the offer to have Convika make a page: where in the dashboard you saw it, which offer you opened the request page from, and the ID of the request you sent. - About a notice or offer in the dashboard: which one it was. - About the plan choice and the 1-year Pro pass: that the screen to choose a plan was shown, whether it was for a first publish or for a password or private link, which plan you chose, and which screen it was on (the page's screen or the built-in AI's). For the 1-year Pro pass: the checkout's currency and the payment methods it offered, Stripe's IDs for the checkout (Checkout Session) and the payment (PaymentIntent), the amount and currency paid, whether the payment was made or is waiting, and, if it was refunded in full, that it was and Stripe's ID for the charge. For Pro monthly: Stripe's ID for the checkout and its currency. When the pass is paid, Convika records the time of the payment as when its Pro started, and records with your workspace when that Pro ends and that it came from the pass. If the same account pays again and the payment is refunded, Convika records that with Stripe's ID for the checkout and emails Convika's operator about it, with only the first 8 characters of the workspace's ID and Stripe's IDs. A step never holds a page's name, its content, or the text you typed. Convika uses the steps to see where new accounts stop before their first live page.

Your Answers to Convika's Questions: The dashboard asks 2 optional questions. Shortly after you sign up: "Where did you hear about Convika?", with a short follow-up for some answers. It also used to ask once, right after your first publish: "What did you ask when Convika came up?". The answer you choose and any text you type (up to 200 characters each) are recorded with your account, to learn which places and questions lead people to Convika. You can skip either of these 2; Convika then records only that you skipped, so it doesn't ask again. On the plans page, right after a payment for the 1-year Pro pass or a Pro or MAX plan: "What made you pay today?", with a text field after "Other". The answer you choose and any text you type (up to 200 characters) are recorded with your account, your workspace, the time, and that payment (what was paid for and Stripe's ID for the checkout), to learn what people pay for and decide what to build. You can skip it; Convika then records only that you skipped it for that payment.

Page Requests: If you ask Convika to make a page for you, Convika keeps what you write (your business, what visitors should do, a page to start from, and anything else) with your account and your workspace, along with the dashboard's language, the offer you came from, and where the request stands. Convika uses it to make the page and to email you about it at your account's email address: the preview, and the page once it is live. Convika may make the page with the built-in AI, and its team may draft or review it with Anthropic's Claude. So what you write, and what the page at the address you give says, go to OpenRouter and the AI model provider when the built-in AI makes the page, and to Anthropic when the team uses Claude (section 3). The emails go out through Resend, and replies to them reach tomoya.fujita@fluxenic.com.

Workshop Applications and the Free Diagnosis: If you ask for the free diagnosis on the Claude Code business launch workshop page on convika.com (in Japanese), Convika keeps your email address (a work or a personal one), what you apply for (workshop seats, how many, and which dates, the company offer, or the kit pre-order), how you'll pay for seats (card or invoice), and when you sent it. If you give them, it also keeps your answers (how many people your company has, the AI tools it gave its staff, how many use them, its rules for review and permissions, and the workflow you want running), your company's name, your role, and anything else you write. Unless you declined cookies on convika.com, it also keeps the utm_source of the link that opened the page. Convika uses them to write the diagnosis and email it to you, and to reply to what you applied for: a payment link, an invoice, scheduling, or news that the kit is on sale. Convika's agent writes the diagnosis by reading your answers with Anthropic's Claude, and Convika's team replies to your application with Claude, so your answers, what you apply for, your company's name, your role, your email address, and anything else you write go to Anthropic (section 3). The notice Convika's team gets for each one carries only the choices you made and the length of what you wrote, never what you wrote, your company's name, or your email address. If you pay for workshop seats, Convika also keeps how many seats you paid for, the amount, when you paid, when it was refunded, and Stripe's IDs for the payment with your application, and deletes them when it deletes the application. To take a card payment, Convika gives Stripe the email address you applied with and your application's ID, and Stripe sends the receipt to that address. When you buy the 1-year Pro pass, Stripe keeps the card you paid with so that page views past the monthly allowance can be charged to it. The card number never reaches us.

The aio-cycle Skill: If you give your email address on the aio-cycle page on convika.com (convika.com/aio-skill/ or /ja/aio-skill/) to get the install commands for Convika's free aio-cycle skill, Convika keeps that address, the page's source tag (aio-article), and when you sent it. Convika uses them to see who took the skill and to write to you about aio-cycle and about Convika's Claude Code business launch workshop. The notice Convika's team gets for each one doesn't carry your email address. Sending the form doesn't send you an email.

Emails About Your Pages: Convika emails your account's address with product tips and reminders, such as a preview waiting to be published or the end of a trial, and its team may write you a letter about your pages, published or not. To write one, the team may read the pages stored in your account, drafts and unpublished versions included, and reads what Convika holds about your account: how you reached Convika and your answers to its questions, the first-time steps above and the actions in your account's audit log, when you signed in, your pages, when they were published, and their settings (such as a page password, a custom domain, or a form), your plan, trial, and subscription, your AI credit use, which emails Convika sent you and your email settings, and your pages' visitors: how many, on which days, and from which countries, referring sites, and kinds of device. It writes these letters with Anthropic's Claude (section 3). The team keeps its drafts of these letters in Convika's private code repository on GitHub (section 3), each with your account's ID, the address and title of the page it is about, and what the letter says. When your account is deleted, the team deletes them with its notes (Notes on How You Use Convika below), but earlier versions stay in the repository's history, and Convika doesn't remove them from it. Convika records which of these emails it sent you and when, so it doesn't send the same one twice. They come from Convika through Resend, and replies to a letter reach tomoya.fujita@fluxenic.com, where the team reads them, also with Claude. You can stop these emails at any time: each one has a link to stop them, and the Product tips and reminders setting in Settings stops them too. Emails your account needs, such as password resets and billing notices, still arrive.

Content You Create: Pages (HTML, CSS, and JavaScript), page settings, and the instructions and source URLs you give Convika's built-in AI.

Page Language and Country: Each time a page is saved, Convika reads from its text which language it is written in (from its HTML lang attribute when the page has little text) and records that language with the page. Pages saved before this change are read the same way from their stored HTML. When you make a page in the dashboard, with the built-in AI included, Convika also records the country Cloudflare estimates from the IP address of the request that made it. A page made with one of the free tools below or from a template without an account gets the country of that request, and keeps it if you keep the page. A page an AI client such as Claude or ChatGPT makes over MCP gets no country, since that request comes from the AI client's servers. Convika doesn't keep the IP address to record a country. It counts which languages and countries pages are made and published in, to improve the Service.

Convika's Access to Your Pages: To provide and run the Service, answer your support requests, improve the Service, and prevent fraud and abuse, Convika's team may view the pages stored in your account. That covers your live pages and also drafts, previews, earlier and unpublished versions, and pages behind a password. Only people on Convika's team can view them, and the team may read them with Anthropic's Claude (section 3). When one of them opens a page's content in Convika's internal admin console, or one of the team's scripts reads it (such as for Notes on How You Use Convika below), Convika logs who or which script opened which page and version, and when. The console's lists show the title and first heading of every page, drafts included, and showing them isn't logged.

Notes on How You Use Convika: To improve the Service, decide what to build, and decide whom to write to, Convika's team reads how each account uses Convika and writes a note about it. It reads each new account, and reads it again when something changes, such as a first publish, a return, a reply, a payment, or the end of a trial. For a note, the team may read the pages stored in your account, drafts and unpublished versions included, and reads what Convika holds about your account: everything Emails About Your Pages above lists, and also your name, email address, language, and account settings, whether another account referred you, your workspaces, their names, and your role in each, how you sign in (such as with Google or a password), the User-Agent of each sign-in, which shows its browser and kind of device, the AI clients you connected and when, your pages' versions with the change note of each, how each page was made (such as by upload, with the built-in AI, or from an AI client), the brief a page was made with (its industry, purpose, audience, product, and offer), whether each page is hidden from search engines now, when you chose Public or Private link at publishing, and the page's gallery status, the free-tool runs that made your pages (Free Rebuild Tool and Free HTML Publishing Tool below), how many people made a copy of your page, how often your preview links were opened (Preview Links below), how many entries your forms received, and how many visitors your pages had in each hour. It doesn't read your IP address, your password, or what was entered in your forms. The team reads all of this with Anthropic's Claude (section 3). A note says what your pages are and do and which tool made them, what you did in Convika and when, what you told Convika in a reply, the team's reading of what you want to get done, which may include the country or region you are likely in and your likely age, and what Convika could offer you or ask you next. Each note, with a file of the facts it rests on, is kept in Convika's private code repository on GitHub (section 3). Both name the account only by the first 6 characters of its ID (8, if another account's ID starts with the same 6), never by its name, email address, page address, or page title, and anyone named on a page is written as [name]. They may say what kind of email address the account has, such as a school or a work one, and the country of its domain. What the team read for a note, which holds your name, email address, page addresses, and page text, stays on the team's computer and isn't added to the repository. The logs of the team's sessions with Claude on that computer hold it too, and are deleted once a session has gone unused for 30 days. When an account is deleted, the team deletes its notes, its letter drafts (Emails About Your Pages above), and the files of what it read for them within 2 days. Earlier versions of the notes and the letter drafts stay in the repository's history, and Convika doesn't remove them from it. Once the account's data is deleted (section 5), Convika's database holds no name or email address the notes can be matched to: the account's full ID stays only in a few audit log entries, kept for a year (section 5), some with the IP address and User-Agent of the request, in those earlier letter drafts, and, if the account opened a checkout, in Stripe's records of it.

Convika Bar Experiments: To learn which version of the Convika bar leads more workspaces on the Free plan to a paid plan, brings more people to Convika from the bar, and keeps more pages published, Convika may show different versions of the bar to different workspaces on the Free plan. A workspace that takes part gets one version, which Convika's server picks at random while the experiment runs: when the workspace first makes a preview or starts publishing a page, or, if it already has a live page, when the experiment starts or its trial or Pro ends. Every page, custom domain, and preview of the workspace shows that version. For the workspace, Convika records the version and when it was picked, and, as of then, its plan, its history of trials, subscriptions, and 1-year Pro pass payments, when it was created, what kind of workspace it is, how many owners it had, how many live pages it had, how many page views those pages had in the 7 days before, and the prices of Pro and the 1-year Pro pass. Convika uses the record only to show the workspace its version and to compare the versions. It holds nothing about the people who visit the workspace's pages, and no cookie or visitor ID is used to pick the version.

Free Rebuild Tool (used without an account): The page URL you enter and the rebuilt page. Convika keeps your IP address for 2 purposes. To enforce the daily limit and to count how many different people use the tool, it keeps keyed hashes of the address and of its network, and deletes them the day after. To deal with misuse, to answer requests made under law, and to count how the tool is used, it keeps the IP address itself for each rebuild it accepts, with the network operator that address belongs to (such as your internet provider), the approximate location Cloudflare estimates from the address (country, region, and city), the rebuilt page, and the time, for 90 days. Unless you keep the rebuild by signing up, the rebuilt page, its preview link, and its list of changes are deleted after 7 days, and so is the URL you entered. Convika keeps the page's domain, when the rebuild ran, the country Cloudflare estimates from the request's IP address (not the region or city), the language of the rebuilt page, and when the sign-up or log-in page first showed its "Your page is waiting" message and which of its 2 versions it showed, to count how the tool is used. The version is chosen for each claim link, to compare which one leads more people to keep their page.

Free HTML Publishing Tool (used without an account): The HTML you upload or paste, and the file's name if you upload a file. A copy you make of someone's page from its line (Copies of Pages below) is handled the same way, and Convika also keeps which page it copies. Convika stores the HTML as you gave it, in Cloudflare R2. The tool doesn't ask for an account or an email address. Convika keeps your IP address for 2 purposes. To enforce the daily limits and to count how many different people use the tool, it keeps keyed hashes of the address and of its network, and deletes them the day after. To deal with misuse, to answer requests made under law, and to count how the tool is used, it keeps the IP address itself for each upload or copy that makes a page, with the network operator that address belongs to (such as your internet provider), the approximate location Cloudflare estimates from the address (country, region, and city), the page, and the time, for 90 days. The preview link holds a random token, and the preview tells search engines not to index it. Unless you keep the page by signing up, its link stops working after 3 minutes. Convika stores the page and the file's name for 24 hours after the upload, so that you can still keep the page from the upload's result after its link stops, or finish a sign-up that takes longer, and a cleanup that runs twice a day then deletes them. For 30 days after that, Convika keeps a note for the link's address that holds only the page's language (English or Japanese) and the time of the deletion, so the old link can say that the preview has ended. A page uploaded earlier keeps the life its link was given. A page uploaded before October 14, 2026 keeps the 7 days it was given: its link works for 7 days, and the first cleanup after that deletes it. A page uploaded from October 14, 2026 until this change has a link that works for 1 hour, and is stored for 24 hours like a page uploaded now. Convika keeps the time of the upload, the country Cloudflare estimates from the request's IP address (not the region or city), the page's language, whether you kept the page, whether the page uses scripts, and when the sign-up or log-in page first showed its "Your page is waiting" message and which of its 2 versions it showed, to count how the tool is used. The version is chosen for each claim link, to compare which one leads more people to keep their page. Whether the page uses scripts is a yes or no, read from the HTML when you upload. It is yes when the page has a script that runs (the Tailwind CSS script from cdn.tailwindcss.com doesn't count), an attribute such as onclick that runs code, or a canvas element. Convika also uses it on the preview: when it is yes, the bar at the top of the preview says that the page's scripts are off there and that they run once you keep the page. For that, the yes or no stays with the preview until you keep the page or the page is deleted. If you accepted cookies on convika.com, Convika also keeps which convika.com page you uploaded from, such as the tool's page, a guide, or the HTML viewer; if you keep the page, that stays with it in your account. If you declined or haven't answered, that page isn't recorded with your upload: the upload is only added to the page's daily count, described under Convika Website and Dashboard Analytics below.

Copies of Pages: You can let people make their own copy of a page, when you publish it or in Site settings. It stays off until you turn it on, and you can turn it off at any time. While it is on, the live page shows a line that links to convika.com with a random code for the page, which names neither you nor your account. Anyone who follows it gets a copy of the page as it is live then, through the Free HTML Publishing Tool above, and keeps it by signing up. The copy credits your page by its title and address. Convika doesn't add your name, but the text on the page, any names included, stays as you wrote it. The copy leaves out your page's Convika forms, any form embedded from a form service such as Google Forms, and the analytics and ad tags Convika recognizes in its code, such as Google Analytics, Google Ads, or the Meta Pixel. The rest of the page stays as it is, such as its links, other embeds, and its own scripts, and before keeping the copy, the person making it is told which of those still send data to another site. A page with a password, a page that isn't live, and a page with a report under review can't be copied. Convika records which page each copy was made from, and shows you how many people kept a copy of your page, not who they are. It also counts how many views of your live page showed the line, per day and without a visitor ID.

AI Templates: From a template's page on convika.com, you can have the built-in AI make a page such as a personality test, a quiz, or a game. For each page made from a template, Convika records which template it was made from and, if it was made after following the line on someone else's page, which page that was. A page made from a template and published on the Free plan shows a line in the bar at its bottom that links to the same template's page. The link passes through the page's own address on its way to convika.com, and carries a random code for the page, which names neither you nor your account. If someone who follows it makes a page from that template, Convika uses the code to record which of your pages the new page came from. Convika shows the person who made the new page neither your page nor your account, and shows you no one who made one. Convika counts, per day and without a visitor ID, how many times the line was shown and clicked on your live pages. A page with a report under review shows no line.

Gallery: A page you publish as Public from the dashboard may be listed in Convika's gallery on convika.com. To choose candidates, Convika computes the page's visitors over the last 7 days (from daily counts without a visitor ID) and its page views per hour (counts without a visitor ID) and checks automatically whether its text includes people's names, school or class names, contact details such as email addresses or phone numbers, forms, or images. Only the Convika team members who decide on listings see the results. Before a page is listed, a Convika team member opens and reviews it, and Convika records who decided what, and when. For a listed page, anyone can see its title, description, address, the share image Convika makes from the page (its title and template), an image of its screen, its format, and the template it was made from. The image of its screen is the page's first screen, which Convika takes by opening the live page at a computer's screen width when a Convika team member lists the page, and again when the team retakes it. It leaves out what Convika shows over the page, such as the cookie banner and the Convika bar, and opening the page to take it isn't counted in the page's visitors or page views. When someone opens the gallery, each card's image loads from Convika's servers (convika.com or convika.page). The visitor count only orders the list and is never shown. Convika counts, per day and without a visitor ID, how many times the gallery's cards are clicked. Convika also records when you chose Public at publishing, and whether you turned on "Don't show this page in the gallery" in Site settings. A report sent from a gallery card's Report link is recorded like any other report, together with the fact that it came from the gallery.

Preview Links: A preview link is the private link that shows a page before you publish it, made in your account or by the upload box, the HTML viewer, the copy page, the Free Rebuild Tool, or a template's page without an account. Convika counts how many times each page's preview link is opened, per day. Each count is kept by the kind of link; by whether the link worked, had expired, or had been replaced by a newer preview; by whether it was opened within 10 minutes of being made; and by where it was opened from: Convika's dashboard or the convika.com page that made the link, an AI assistant's chat such as claude.ai or chatgpt.com, or anywhere else. Convika tells these apart by the referring site the browser sends, and keeps only which of them it was. To tell your own opens apart, the dashboard's preview links send app.convika.com as the referring site, without the path of the dashboard page, so the page and any analytics tags on it see that address too. The counts hold no visitor ID, IP address, or User-Agent, nothing is stored in the browser for them, they are kept whatever a visitor chose in the page's cookie banner, and opens by known bots aren't counted. Convika uses them to see whether people share preview links with others.

Making a Page from a Template Without an Account: On a template's page on convika.com, you can write what you want and have the built-in AI make your own page from that template, without an account. What you ask the template for goes, with the template's description and example page, to OpenRouter and the AI model provider that write the page (section 3), as it does for a page made in an account. Convika stores the page in Cloudflare R2 and shows it to you as a preview: its link holds a random token, tells search engines not to index it, and works for 3 minutes after the page is made. The page's scripts run in the preview, but its share buttons don't make a link to it. Convika keeps your IP address for 2 purposes. To enforce the daily limits and to count how many different people make pages here, it keeps keyed hashes of the address and of its network, and deletes them the day after. To deal with misuse, to answer requests made under law, and to count how this is used, it keeps the IP address itself for each try it accepts, with the network operator that address belongs to (such as your internet provider), the approximate location Cloudflare estimates from the address (country, region, and city), the page, and the time, for 90 days. Unless you keep the page by signing up through its link, Convika stores the page and what you typed for 24 hours after it was made, and a cleanup that runs twice a day then deletes them. For 30 days after that, Convika keeps a note for the link's address that holds only the page's language, the time of the deletion, and which template the page was made from, so the old link can say that the preview has ended. If you came through the line on someone else's page, Convika records which page that was, as AI Templates above says, and if you keep the page, that record stays with it. Convika keeps the time of each try, its template, the country Cloudflare estimates from the request's IP address (not the region or city), whether it made a page and the page's language, and whether you kept it, to count how this is used. On the template's page, Convika also counts, per day and page and without a visitor ID, how many tries were sent, made a page, and were opened, and how many times the button that keeps the page was pressed.

Automatic Abuse Checks: When you publish a page or make a preview link, Convika automatically checks its content for signs of phishing or malware. If it finds them, Convika takes the page offline, records why with the page, and emails you. To do this, Convika sends the page's address and the web addresses in the page to Google Web Risk, which checks them against its lists of unsafe sites.

Page Analytics: Views, button clicks, form submissions, and on-page behavior (scroll depth, time on page, and load speed) on published pages. Each event records the page path, referrer, UTM parameters, device type, country, User-Agent, visitor ID, and session ID. These events don't include the visitor's IP address.

Visitor ID: If a visitor chooses Allow analytics cookies on the page's cookie banner, the visitor ID is a random value kept in the `_cvk_vid` cookie for 90 days. If they choose Decline analytics cookies, or haven't chosen yet, Convika sets no visitor cookie. It computes the ID from the site, the IP address, and the User-Agent with a random key for each day in the time zone the site's workspace uses for analytics (UTC until it uses one), and deletes that key 2 days after its day begins. The same person gets a different ID on each site and on each day. After the key is deleted, no one, Convika included, can compute the ID again from an IP address and User-Agent.

Convika Website and Dashboard Analytics: Page views on convika.com and the dashboard, counted per day by page path, referring site, UTM parameters, device type, and country. The first page of a visit is also counted together with its referring site or utm_source, to see which pages people arrive on and from where. Page views that follow a click on the bar at the bottom of a Free plan page count under that bar (convika_badge), and those that follow a click on a page's line offering to make your own copy count under that line (convika_copy), in place of the referring site. Page views that follow a click on the line on a page made from a template count under that line (convika_template). The first page of a visit from the bar is also counted together with the address (host name) of the page the bar was on, which the bar's link carries. These counts don't show which page a line was on. If you accepted cookies in the banner, each page view carries a random visitor ID that your browser keeps. If not, Convika computes the ID from the host name, the IP address, and the User-Agent, the same way as the visitor ID above, except that the key is one for each day in Japan time (it changes at midnight JST), and the daily counts follow the same days. On convika.com, Convika also counts clicks on sign-up and log-in links, and uploads from the upload box, the HTML viewer's button, or the copy page that make a preview, and pages made on a template's page without an account: one number per day for each page and button. These counts carry no visitor ID, nothing is stored in your browser for them, and they are kept whatever you chose in the banner. The Cookie Policy lists what is stored.

Form Submission Data: Form responses, submitter's IP address, User-Agent, and country.

Data Pages Save for All Their Visitors: A page can save data with window.storage or window.claude's db, the storage that pages made as Claude artifacts use. What a page's script saves for all its visitors is stored by Convika with that page, and anyone who opens the page can read it. It is whatever the script saves, and can include what a visitor typed into the page, such as a name, a score, or an answer. Convika stores it as text, with when it was first and last saved, and stores no IP address or visitor ID with it. To limit how many requests one address can make, Cloudflare counts each address's requests to each page for 1 minute. The page's owner decides what the page saves, can see it in the page's Site settings, and can delete it there at any time. What a page saves for one visitor only stays in that visitor's browser and is not sent to Convika (Cookie Policy, section 2).

Payment Information: Payment is processed by Stripe. Convika does not store credit card numbers. We retain your Stripe customer ID and subscription ID. To take a payment for the 1-year Pro pass, Convika gives Stripe your account's email address and the IDs of your account and workspace, and Stripe sends the receipt to that address.

Cookies: Session cookies, locale preferences, and consent state. See our Cookie Policy for details.

We use the information we collect for the following purposes:

- Providing and maintaining the Service, including authentication - Analyzing usage to improve the Service - Keeping notes on how each account uses the Service, to improve it, decide what to build, and decide whom to write to - Processing billing and payments - Emailing you product tips and reminders, and letters about your pages, which you can stop - Providing customer support - Writing the free diagnosis you ask for on the workshop page, and replying to workshop applications - Writing to people who took the aio-cycle skill about it and about the workshop - Preventing fraud and abuse - Complying with legal obligations

We share your information with the following service providers only as necessary to provide the Service:

- Cloudflare: Hosting, CDN, DNS, custom domain certificates, database and file storage (D1 and R2), page analytics (Workers Analytics Engine), and loading the source URLs you give the built-in AI - Tinybird: Storing and querying page analytics: button click and form submission events (page path, referrer, UTM parameters, device type, country, the visitor ID, and the clicked button's text and link) and daily counts per page. To count unique visitors over a period, Tinybird also stores a per-site visitor identifier for each day a visitor viewed the site. We derive it with a secret key that only Convika holds, so without that key it can't be matched to the visitor ID in those events or to the same visitor on other sites. Tinybird deletes these identifiers after 400 days. Form responses and IP addresses are not sent to Tinybird. - Stripe: Payment processing - Resend: Email delivery (verification emails, form notifications, reports, billing notices, product tips and reminders, letters from Convika's team about your pages, and the preview and delivery emails for a page Convika makes for you) - OpenRouter: Relays requests from Convika's built-in AI (page generation and editing in the dashboard) to the AI model you choose. It receives your instructions, the content of any source URL you import, and the page being edited. When Convika makes a page you asked for with the built-in AI, it also receives what you wrote in the request. When you make a page from a template without an account, it receives what you ask the template for. - AI model providers: OpenRouter passes those requests to the provider that serves the chosen model, such as Anthropic, OpenAI, Google, DeepSeek, Z.ai, Moonshot AI, or Sakana AI. The model picker in the dashboard lists the current models. - Anthropic: When you ask Convika to make a page for you, Convika's team may draft or review it with Anthropic's Claude. Claude then receives what you wrote in the request and what the page at the address you gave says. Convika's team also writes its letters about your pages with Claude, which then receives what those pages say, drafts included, and what Convika holds about your account, as section 1 lists under Emails About Your Pages. When the team reads your reply to a letter with Claude, Claude receives the reply. Convika's team also writes its notes on how you use Convika with Claude, which then receives your pages, drafts included, and what Convika holds about your account, your name and email address included, as section 1 lists under Notes on How You Use Convika. When you ask for the free diagnosis on the workshop page, Convika's agent writes it with Claude, and Convika's team replies to your application with Claude; Claude then receives your answers, what you applied for, your company's name, your role, your email address, and anything else you wrote. Convika's team may also read the pages stored in your account with Claude, drafts and unpublished versions included, for the reasons section 1 gives under Convika's Access to Your Pages; Claude then receives what those pages say. Convika's team has turned off Anthropic's setting that lets it use these conversations to improve its models. - GitHub: Storing Convika's private code repository, which holds the team's notes on how each account uses Convika and the files of facts they rest on (section 1, Notes on How You Use Convika), and its drafts of letters about your pages (section 1, Emails About Your Pages). The notes and the facts name an account only by the first 6 characters of its ID (8 when two IDs start alike), with no name, email address, page address, or page title. Each letter draft holds your account's ID and the address and title of the page it is about. - Google: Sign-in with Google (only if you choose it), and Web Risk (the address of each page you publish and the web addresses in it, to check them against its lists of unsafe sites) - Slack: Internal alerts when someone reports a page for abuse (the page ID, the reason, and the reporter's description), and when someone asks Convika to make a page (the request's ID, the first 8 characters of the workspace's ID, the request's language, and when its preview is due; none of what was written)

For a page listed in the gallery, its title, description, address, the share image Convika makes from the page (its title and template), an image of its screen, format, and the template it was made from are shown to anyone on convika.com. Nothing else about your account is shown.

When you connect an AI client such as Claude, ChatGPT, or Codex, that client receives what Convika's tools return for your requests: page HTML, site settings, analytics summaries, and form submissions (without the submitter's IP address or User-Agent). The client's provider handles that data under its own privacy policy.

We may also disclose information in response to lawful requests from public authorities.

Your data is stored on Cloudflare's global network (D1 database and R2 object storage). Payment data is processed and stored by Stripe in the United States. Page analytics events are stored by Tinybird in the United States (AWS us-west-2). Requests to the built-in AI pass through OpenRouter in the United States to the chosen model's provider, which may process them in the United States, China, or another country, depending on the model. When Convika's team uses Claude for a page you asked for, Anthropic processes your answers and the page in the United States. When the team uses Claude to write you a letter about your pages or to read your reply, Anthropic processes the pages, your account's data, and the reply in the United States. When the team reads the pages stored in your account with Claude, Anthropic processes them in the United States. When Convika uses Claude for the workshop page's questionnaire and your application, Anthropic processes your answers, what you applied for, your company's name, your role, your email address, and anything else you wrote in the United States. When the team writes its notes on how you use Convika with Claude, Anthropic processes your pages and your account's data in the United States. GitHub stores the notes and the letter drafts in the United States. When Convika checks a page with Google Web Risk, Google may process the page's address and the addresses in it in any country where Google or its subprocessors have facilities, the United States included; Web Risk offers no choice of country.

- Account data: Retained while your account is active, plus 30 days after deletion (recovery grace period) - The country and browser language of your sign-up: kept with your account data - A workspace's time zone, the time zone it is switching to, and when its owner last changed it: while the workspace exists - A page's language and the country it was made from: until the page is deleted - Access logs: 90 days - Keyed hashes behind the limits on password reset and verification emails: deleted within 2 days - Page analytics events, which carry visitor IDs: 3 months in Cloudflare Workers Analytics Engine, and 400 days in the raw event archive in Cloudflare R2 and in Tinybird - Per-site daily visitor identifiers in Tinybird: 400 days - Daily key behind visitor IDs without analytics consent (landing pages, convika.com, and the dashboard): 2 days after its day begins - Daily page view counts for convika.com and the dashboard: kept indefinitely - Daily counts of clicks on convika.com's sign-up and log-in links, of uploads from its upload box, its HTML viewer, and its copy page, and of pages made on its template pages without an account, which hold no visitor IDs: kept indefinitely - The record of each use of the Free Rebuild Tool and the Free HTML Publishing Tool, and of each page made from a template without an account (what section 1 says Convika keeps; the page, its preview link, the IP address hashes, and the IP address with its network operator and location are deleted when section 1 says, and only the country stays in the record): kept indefinitely - The IP address, network operator, and approximate location of each request those tools and the template pages accepted, with its page and time: 90 days, whether or not the page was kept - Daily counts of the views that showed each page's line offering to make your own copy, which hold no visitor IDs: kept indefinitely - Daily counts of opens of preview links, which hold no visitor IDs: kept indefinitely - Which page each copy was made from: kept with the record of the copy until that page is deleted - Which template and which page a page made from a template came from: until that page is deleted (when the page it came from is deleted, only the reference to it is removed) - Daily counts of how many times a template line was shown and clicked (no visitor ID): until the page is deleted - Gallery records (each page's status, the automatic check's results, who decided and when, the version reviewed, and why a page was taken out): until the page is deleted - When you chose Public at publishing, and the "Don't show this page in the gallery" setting: until the page is deleted - Daily counts of clicks on the gallery's cards (no visitor ID): kept indefinitely - Images of a page's screen taken for the gallery: deleted when the page stops being listed or is deleted (by the next day at the latest when the listing stops because a password is set, the page is unpublished, or a new version is published; when you delete your account, with your account data) - Rows behind their unique visitor counts, each pairing a one-way hash of a visitor ID with the pages and sources it was counted under that day: 2 days after their day - Daily page analytics totals (counts per page, referrer, device, country, and UTM parameter, with no visitor IDs): kept indefinitely, so long-term charts keep working - Page requests: deleted with the account that sent them or with their workspace - Notes on how each account uses Convika, the files of what was read for them, and drafts of letters about your pages: deleted within 2 days after the account is deleted; earlier versions of the notes and the drafts stay in the history of Convika's code repository - A workspace's record in a Convika bar experiment: kept linked to the workspace for at most 180 days after the experiment starts, then deleted (if the workspace is deleted sooner, its ID is removed from the record at once) - Workshop applications and answers to the free diagnosis: deleted a year after you send them - Email addresses given for the aio-cycle skill: deleted a year after you send them - Form submission data: Managed by site owners - Data pages save for all their visitors: until the page's owner deletes it or the page is deleted, as it is with the account; kept while the page is unpublished - Audit logs: 1 year - Results of the automatic abuse check: until the page is deleted

You have the following rights regarding your personal data:

- Access: View your personal data - Correction: Update inaccurate data - Deletion: Delete your account and associated data - Data Portability: Export your data - Withdrawal of Consent: Revoke previously given consent

To exercise these rights, contact us at tomoya.fujita@fluxenic.com.

For details on how we use cookies, please see our Cookie Policy.

The Service is not intended for children under 13, and they may not use it (Terms of Service, section 2). If we learn that a user is under 13, we will promptly delete their account and the personal information we have collected from them. If you are under 18, you may use the Service only with the consent of a parent or legal guardian.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on our website. Your continued use of the Service after such notice constitutes acceptance of the updated policy.

Convika is operated by Fluxenic Inc. (株式会社Fluxenic). The business operator that handles your personal information through Convika is:

- Name: Fluxenic Inc. - Address: Shibuya Dogenzaka Tokyu Building 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo, Japan - Representative: Tomoya Fujita, Representative Director

Until October 20, 2026, Tomoya Fujita ran Convika as a sole proprietorship. On October 21, 2026, the Convika business passed to Fluxenic Inc. by a business transfer, and with it Fluxenic Inc. took over your personal information. Fluxenic Inc. handles that information only within the purposes it was used for before the transfer (section 2).

If you have any questions about this Privacy Policy, please contact us at tomoya.fujita@fluxenic.com.