Legal
Privacy policy
What personal data Converge handles, why, and what you can ask us to do with it.
Last updated: 11 November 2026.
Converge is operated by PT Antero Daemon Teknologi ("we"). This policy covers the Converge websites under cnvrg.si and the Converge platform that our customers sign in to.
Two kinds of data
Account data is what we need to give a person access: name, email address, the organization they belong to, their roles, and a record of sign-ins. We decide how this data is used, and this policy describes it.
Customer data is what a customer organization loads into its own Converge installation: its datasets, its ontology, its documents and the actions its people take on them. The customer decides what goes in and what it is used for. We process it only to run the service for that customer, under our agreement with them. If you are a person described in a customer's data, ask that customer first; we will help them answer you.
What we collect
| Data | When | Why |
|---|---|---|
| Name and email address | When an administrator invites you, or when you first sign in | To create and recognize your account |
| Name, email address and profile picture from Google | Only if you choose Sign in with Google | To create your account and sign you in. We ask Google for nothing else, and we never receive your Google password |
| Password or passkey | If you set one | To sign you in. Passwords are stored as salted hashes; a passkey's private part never leaves your device |
| Sign-in and activity records | While you use the platform | Security, and the audit log each customer relies on |
| Messages you send us | When you write to support | To answer you |
We do not sell personal data, and we do not use it for advertising. The public websites set no advertising or cross-site tracking cookies.
Sign in with Google
When you sign in with Google, Google tells us your name, your email address, your profile picture and whether your email address is verified. We use them to create your account and to show who you are inside your organization's installation. We do not read your mail, files, contacts or calendar, and we do not share what Google gives us with anyone outside the service providers listed below.
A new account has no access to an organization's data until that organization's administrator gives it a role, unless the organization has chosen to admit everyone from its own Google Workspace domain.
Who else handles the data
- Hosting. The platform runs on servers we rent in a data centre in Southeast Asia. The hosting provider has no access to the contents of the databases.
- AI model providers. When a customer turns on a feature that calls a hosted AI model, the text needed for that request is sent to the model provider the customer selected. A customer can keep AI features off, or run them on a model inside its own installation.
- Google, when you choose to sign in with it.
We disclose personal data to authorities only when the law requires it, and we tell the affected customer unless the law forbids that.
How long we keep it
- Account data: for as long as the account exists. When a customer's contract ends, its installation and the accounts in it are deleted after the customer has had the chance to export its data.
- Audit records: for the period agreed with each customer. They can be redacted when personal data must be removed.
- Support messages: for as long as needed to resolve the request and keep a record of what was agreed.
How we protect it
Each customer's data is kept separate from every other customer's. Connections are encrypted in transit. Access inside an installation follows roles and markings set by the customer, and security-relevant operations are written to a tamper-evident audit log. Our own staff sign in through a separate identity system, and their access to a customer installation is recorded.
No system is perfectly secure. If we learn of a breach that affects your personal data, we tell the affected customer without undue delay.
Your choices
You can ask us to show you the account data we hold about you, to correct it, or to delete your account. If your account belongs to a customer organization, its administrator can do most of this directly, and deleting the account may need their agreement because it is part of their records.
To stop using Google sign-in, remove Converge from the third-party access list in your Google account; your administrator can then give you another way to sign in or close the account.
Changes
When we change this policy we update the date at the top. If a change affects how we use account data in a material way, we tell customer administrators before it takes effect.
Contact
Write to support@cnvrg.si. We answer privacy requests within 30 days.