Privacy policy

Konverge (“we”, “us”) provides construction site management software to contracting businesses. This policy explains what we collect, why, and the choices you have. It is written for the people who actually use the app, site and office staff of our customer companies, as well as visitors to this site.

The company relationship

Konverge is business software. Your workspace is owned by the company that invited you (our customer). For the project data your company puts into Konverge, that company is the data controller and we act as its processor. For your account itself (phone number or email address, profile), for billing, and for operating the service, we are the controller.

What we collect

• Account: your phone number or email address (used to sign in with a one-time code), or the name and email address from Google or Microsoft if you choose to sign in with one; your name, optional avatar, company membership and role; and, if you turn on two-step verification, a record that an authenticator app is set up.
• Project content your company creates: projects, documents and drawings, daily logs, snags, photos, messages, contacts, financial records such as estimates and invoices, and audit trails.
• Details your company records about other people: a contact record for a subcontractor, supplier or employee can include their name, email, phone, address, emergency contact, and — where your company chooses to enter them — bank account details, National Insurance number and date of birth. Your company decides what to record here; Konverge stores it on their instruction. For this data your company is the data controller and we are its processor, so the notice they give their own people governs it.
• Location, only when attached to a record: a site photo or incident report can carry the coordinates of where it was taken. This is captured at the moment you create the record and never in the background.
• AI copilot inputs: when you use the assistant, the messages, photos, or voice recordings you submit to it, plus the project context needed to answer (see “AI features” below).
• Device and diagnostics: push notification tokens, crash reports and performance data (Sentry), device model and OS version.
• Product analytics: which screens and features are used in the web and phone apps (for example “opened the drawings register”, “created a company”), keyed to your user and company IDs, processed by PostHog in the EU. It never includes names, emails, phone numbers or the contents of your records, IP addresses are discarded, and it sets no cookies.
• Billing: for a company that pays, its plan and the plan’s status and dates. Card payments on the web are taken by Stripe, which also collects the billing email, address and any tax number at checkout: card details go to Stripe and are never seen or stored by Konverge. Plans bought in the App Store or Google Play are paid to Apple or Google; RevenueCat tells us the subscription’s status, using an account reference that does not identify you.
• Demo, pilot and contact requests from this website: what you enter in the form (your name and email address, and if you give them your phone number, company, company size, country, when suits you and your message), the page you sent it from, the page that referred you and any campaign (UTM) tags in the link. We also keep a one-way hash of your IP address, salted so it cannot be turned back into the address, and use it only to stop the form being abused; the IP address itself is not stored with your request.
• Support requests: when you contact support, from the app, the web app or by email, we keep the ticket: your messages and our replies, any files you attach, your name and email address and, if you are signed in or we can match your email to your account, your user account and company. A request sent from the app or web app also carries technical details to help us reproduce the problem (for example the app version, operating system, device model, screen, network type, language and time zone). For an emailed request we keep the headers needed to thread the conversation and whether your email provider confirmed the sender (SPF/DKIM/DMARC). If you choose to rate our help, we keep your satisfaction score and any comment.

For website enquiries and support requests, Konverge is the data controller.

Why we process it

• To provide the service under our contract with your company;
• to secure accounts and prevent abuse (legitimate interest);
• to fix crashes and improve reliability (legitimate interest);
• to meet legal obligations, including construction record-keeping your company configures (for example golden-thread audit trails);
• to answer a demo, pilot or contact request you send us and follow it up (legitimate interest in responding to people who ask about Konverge, and steps you ask us to take before entering into a contract);
• to provide support: for our customers’ users under our contract with your company, and for anyone else who contacts us, our legitimate interest in answering them and keeping a record of what was said.

We do not sell personal data, and we do not use your content for advertising.

AI features

The Konverge copilot is powered by Google Gemini (Google Cloud’s generative AI API). We use API terms under which submitted content is not used to train Google’s models.

Two distinct things send content to Google, and they work differently:

The copilot, when you use it. The text, photos, or voice clips you submit, plus relevant project records, are sent to Google’s API to generate the response. AI-suggested actions are drafts: nothing is saved to your project until a person confirms it, and every confirmed AI action is recorded in an audit log. You are asked for consent in the app before first using the copilot.

Document and drawing search, automatically. So that documents and drawings are searchable by their contents rather than only their file names, every PDF and image uploaded to Konverge is sent once to Google’s API to extract its text. This happens automatically shortly after upload, whether or not anyone has used the copilot, and it is not covered by the copilot consent prompt. The extracted text is stored in your workspace and used only to power search within it. If you do not want your documents processed this way, contact us and we will disable content extraction for your company; search will then match on file names and metadata only.

Support replies, when our team asks for a draft. A member of our support team can ask the AI to suggest a reply to a support ticket. The ticket’s messages are then sent to the AI provider to write a draft, which a person reads and edits before anything is sent to you. This is not done for a ticket filed under a company that has turned AI off.

Subprocessors

Transfers outside the UK/EEA rely on the UK International Data Transfer Addendum / EU Standard Contractual Clauses or an adequacy decision.

Retention

Project content is retained while your company’s workspace is active, because it is your company’s business record. Crash diagnostics are kept for 90 days. Billing records are kept for as long as tax and accounting law requires. Demo, pilot and contact requests are deleted 24 months after the request, unless your company becomes a customer. If it does, we keep your name, email address and the link to your company, and delete your message and phone number 24 months after the request. Support tickets, with their messages, attachments and satisfaction ratings, are deleted 36 months after the ticket is closed. If you delete your account, see account deletion: deletion is immediate in the live database and clears from encrypted backups as they roll off (within 30 days).

Your rights

Under UK/EU data protection law you can request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interest. Email support@getkonverge.com. Where your data lives inside a company workspace we may need to route the request via that company (as its processor). You can complain to the ICO (ico.org.uk) or your local supervisory authority.

Websites

This website (getkonverge.com) is served from our own server on Amazon Web Services in London. It sets no cookies and uses no third-party tracking scripts. Its demo, pilot and contact forms send what you type to our database on Supabase (EU), as described above. Its server logs, kept for security and reliability, include your IP address for a short period.

The web app (app.getkonverge.com) is hosted by Vercel. It sets only the cookies it needs to work (keeping you signed in, and remembering which client portal a staff member is previewing), and no advertising cookies. Its error reporting (Sentry) and product analytics (PostHog, EU) set no cookies, and are set up not to send your name, email address or IP address.

Changes

We will post changes here and, for material changes, notify you in the app. Questions: support@getkonverge.com.