Converra privacy & data

Name and email address

Organization name, role, and contact details

Billing details such as company name, billing address, and tax IDs

Device and browser information (type, version, user agent)

IP address and approximate location inferred from IP

Usage metrics (e.g. token consumption, optimization runs, team members, feature usage)

Conversations, transcripts, simulation outputs, and evaluation data

Authenticate users and secure multi-tenant access

Detect and prevent fraud, abuse, and security incidents

Analyze aggregated usage patterns (e.g., which features are used, how often)

Process subscriptions and usage-based fees

Send transactional emails (security alerts, account notices, billing updates)

We will delete or de-identify Customer Data from active systems within 30 days

Backup copies may persist for a limited time as part of normal backup and disaster recovery processes.

MongoDB Atlas Primary database US

PostHog Product analytics US/EU

we will implement appropriate safeguards (such as standard contractual clauses or equivalent mechanisms)

We will provide at least 30 days' notice before adding new subprocessors that process Customer Data.

The current list is also maintained in our Data Processing Agreement

Upon termination of your account or upon your explicit written request: We will delete or de-identify Customer Data from active systems within 30 days

Access: Request confirmation of whether we process personal data about you and receive a copy of that data.

Correction: Request correction of inaccurate or incomplete personal data.

Deletion: Request deletion of personal data, subject to legal and contractual retention requirements.

Portability: Request a copy of your personal data in a structured, commonly used, machine-readable format.

Objection: Object to certain processing activities, particularly where based on legitimate interests or for direct marketing.

We do not sell your personal information or Customer Data.