Converight — Immutable Conversation Compliance

Terms of Service

Last updated: 13 September 2026

These terms govern your use of Converight, operated by Thinkdata Labs LLP. By creating an account or connecting a workspace, you agree to them.

What the service does

Converight connects to your Intercom workspace under a read-only authorisation, copies your conversations and related records, encrypts them, and stores them in immutable object storage under a retention period you choose. It provides search, transcript viewing, export, Legal Hold and audit facilities over that archive.

We never write to your Intercom workspace. The permissions we request are read-only and are listed before you authorise the connection.

Your data stays yours

You retain all rights in the data you archive. We claim no ownership and acquire no licence beyond what is necessary to provide the service to you: storing, encrypting, indexing and returning it at your direction.

We do not use your archived content to develop or improve the service, do not analyse it for any purpose of our own, and do not train machine-learning models on it.

Your responsibilities

  • You confirm you are entitled to archive the data in the workspaces you connect, and that doing so is consistent with your own privacy notices and any consent you rely on.
  • You are responsible for choosing a retention period appropriate to your legal and regulatory obligations. We do not advise on what that period should be.
  • You are responsible for the security of your account credentials and for the actions of users you invite.
  • You must not use the service to store data you are legally required to delete, or in a way that breaks any law applying to you.

Immutability, and what it means for deletion

Records are stored under object-level retention locks. For the duration of the retention period you set, an archived record is protected by S3 Object Lock, with governance-bypass permission denied across our AWS organisation. Enterprise Compliance mode removes the storage-level override entirely. That is the guarantee you are buying.

It follows that a request to delete an archived record cannot be honoured by deleting it. We support erasure instructions through cryptographic shredding, as described in the DPA and the Data Subject Rights document: the encryption key for the affected records is destroyed, which renders them permanently unreadable while the locked object remains in place. You accept that this is the mechanism by which erasure is achieved, and that it is irreversible.

Fees and billing

Subscription fees are as shown on our pricing page at the time you subscribe. Fees are billed in advance and are non-refundable except where required by law.

The subscription term is 12 months, paid upfront. It renews annually. We email a reminder 30 days before renewal. You may turn off renewal at any time, with no cancellation fee and no notice period; the service continues to the end of the term you have paid for.

Fees are based on the archived-conversation volume agreed at purchase: a base price covering the included volume, plus a fixed price per additional block. Where a promotional rate is offered, it applies for the period stated at the time of purchase. We may change standard pricing on 30 days’ notice; a change never applies to a term you have already paid for.

If payment fails we will attempt to contact you and allow a grace period before suspending backups. Suspension stops new archiving; it does not delete your existing archive.

Termination and what happens to your archive

You may cancel at any time. On cancellation, backups stop and the stored access token is destroyed immediately. Your existing archive is retained for the documented post-cancellation period so you can export it. After that period, eligible records are cryptographically shredded following operational acknowledgement. Shredding does not occur while a Legal Hold, active restriction or unresolved critical alert blocks completion.

We may suspend or terminate an account for non-payment, or for use that breaches these terms. Except where the law compels immediate action, we will give you notice and a reasonable opportunity to export your archive first.

Availability

We aim for continuous availability but do not guarantee uninterrupted service, and we do not currently offer a service-level agreement or service credits.

A dashboard outage does not affect the integrity of your archive: archived objects remain under retention lock independently of whether our application is running.

Warranties and disclaimers

We warrant that we will provide the service with reasonable skill and care, and that the protections described in our documentation — read-only access, per-record encryption, object-level retention locks, the append-only audit log — operate as described.

Beyond that, the service is provided “as is”. We do not warrant that it will meet any particular regulatory requirement applying to you. Converight is not a law firm and nothing in the product or its documentation is legal advice. Any SOC 2 material we provide is informational and is not an audit, certification, attestation or readiness opinion.

Indemnity

Customer shall indemnify, defend and hold harmless Thinkdata Labs LLP, its partners, personnel and affiliates from third-party claims, losses, damages, liabilities, legally recoverable penalties, costs and reasonable legal expenses arising from:

  • Customer Data or Customer’s instructions infringing privacy, confidentiality, intellectual-property or other third-party rights;
  • Customer’s failure to establish a lawful basis or provide required notices;
  • Customer’s retention, Legal Hold, restriction, erasure or disclosure instructions;
  • Customer’s breach of Applicable Data Protection Law or the Agreement;
  • Customer’s or its authorised users’ misuse of the Services; or
  • Customer’s failure to secure its accounts, credentials or authorised users.

This indemnity does not apply to the extent the claim results from Converight’s fraud or wilful misconduct.

Customer shall not settle a claim that admits fault by, or imposes an obligation on, Converight without Converight’s written consent.

Converight shall:

  • provide prompt notice of the claim;
  • provide reasonable cooperation at Customer’s expense; and
  • permit Customer to control the defence, subject to Converight’s right to participate through its own counsel.

A delayed notice reduces Customer’s obligations only to the extent it causes material prejudice.

Except where expressly agreed in a written order form signed by Thinkdata Labs LLP, Converight provides no contractual indemnity.

Limitation of liability

Neither party excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded.

Subject to that, our total liability arising out of or in connection with these terms is limited to the total subscription fees you paid to us in the twelve months immediately preceding the event giving rise to the claim. Neither party is liable for indirect or consequential loss, or for loss of profit, revenue or anticipated savings.

Data protection

Our handling of personal data is described in our Privacy Policy, and the parties’ respective obligations are set out in our Data Processing Addendum, which forms part of these terms. Our sub-processors are listed here.

Changes, governing law and contact

We may update these terms. For material changes we will give notice and, if you do not accept, you may cancel and receive a pro-rata refund of any prepaid unused term.

These terms are governed by the laws of India, and the courts at Chandigarh, under the jurisdiction of the High Court of Punjab and Haryana, have exclusive jurisdiction.

Thinkdata Labs LLP, registered office #176, First Floor, Sector-10, Panchkula, Haryana 134109, India. LLP registration number AAI-9081. Contact: connect@converight.com