Konverge (“we”, “us”) provides construction site management software to contracting businesses. This policy explains what we collect, why, and the choices you have. It is written for the people who actually use the app, site and office staff of our customer companies, as well as visitors to this site.
The company relationship
Konverge is business software. Your workspace is owned by the company that invited you (our customer). For the project data your company puts into Konverge, that company is the data controller and we act as its processor. For your account itself (phone number, profile) and for operating the service, we are the controller.
What we collect
- Account: your phone number (used to sign in via SMS code), name, optional avatar, and company membership and role.
- Project content your company creates: projects, documents and drawings, daily logs, snags, photos, messages, contacts, financial records such as estimates and invoices, and audit trails.
- Details your company records about other people: a contact record for a subcontractor, supplier or employee can include their name, email, phone, address, emergency contact, and — where your company chooses to enter them — bank account details, National Insurance number and date of birth. Your company decides what to record here; Konverge stores it on their instruction. For this data your company is the data controller and we are its processor, so the notice they give their own people governs it.
- Location, only when attached to a record: a site photo or incident report can carry the coordinates of where it was taken. This is captured at the moment you create the record and never in the background.
- AI copilot inputs: when you use the assistant, the messages, photos, or voice recordings you submit to it, plus the project context needed to answer (see “AI features” below).
- Device and diagnostics: push notification tokens, crash reports and performance data (Sentry), device model and OS version.
Why we process it
- To provide the service under our contract with your company;
- to secure accounts and prevent abuse (legitimate interest);
- to fix crashes and improve reliability (legitimate interest);
- to meet legal obligations, including construction record-keeping your company configures (for example golden-thread audit trails).
We do not sell personal data, and we do not use your content for advertising.
AI features
The Konverge copilot is powered by Google Gemini (Google Cloud’s generative AI API). We use API terms under which submitted content is not used to train Google’s models.
Two distinct things send content to Google, and they work differently:
The copilot, when you use it. The text, photos, or voice clips you submit, plus relevant project records, are sent to Google’s API to generate the response. AI-suggested actions are drafts: nothing is saved to your project until a person confirms it, and every confirmed AI action is recorded in an audit log. You are asked for consent in the app before first using the copilot.
Document and drawing search, automatically. So that documents and drawings are searchable by their contents rather than only their file names, every PDF and image uploaded to Konverge is sent once to Google’s API to extract its text. This happens automatically shortly after upload, whether or not anyone has used the copilot, and it is not covered by the copilot consent prompt. The extracted text is stored in your workspace and used only to power search within it. If you do not want your documents processed this way, contact us and we will disable content extraction for your company; search will then match on file names and metadata only.
Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Supabase (on AWS) | Database, authentication, file storage, serverless functions | EU (Ireland, eu-west-1) |
| Google (Gemini API) | AI copilot (text, vision, voice) and automatic text extraction from every uploaded document and drawing | Google Cloud (global) |
| Twilio | SMS sign-in codes | US/EU |
| Resend | Transactional email sent on a user’s behalf (for example a document link a user chooses to email to someone outside the app) | US/EU |
| Google Firebase | Push notifications (FCM) and app analytics (screen views, feature usage) | Global |
| OpenStreetMap / Nominatim | Reverse geocoding: turning photo coordinates into a place name (proxied; only coordinates are sent) | EU |
| Sentry | Crash and performance reporting | US/EU |
| Railway | Drawing and PDF processing workers | US/EU |
| Vercel | Serving this website (getkonverge.com) | Global edge network |
Transfers outside the UK/EEA rely on the UK International Data Transfer Addendum / EU Standard Contractual Clauses or an adequacy decision.
Retention
Project content is retained while your company’s workspace is active, because it is your company’s business record. Crash diagnostics are kept for 90 days. If you delete your account, see account deletion: deletion is immediate in the live database and clears from encrypted backups as they roll off (within 30 days).
Your rights
Under UK/EU data protection law you can request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interest. Email support@getkonverge.com. Where your data lives inside a company workspace we may need to route the request via that company (as its processor). You can complain to the ICO (ico.org.uk) or your local supervisory authority.
Website
This website is served by Vercel and sets no advertising or analytics cookies. It does not use third-party tracking scripts. Server logs kept by our host for security and reliability may include your IP address for a short period.
Changes
We will post changes here and, for material changes, notify you in the app. Questions: support@getkonverge.com.