Converge Privacy Policy
Version 2026-10-launch-v3 – Effective October 15, 2026

1. Scope and contact
This policy describes information handled by the current Converge educational-leadership service. Contact info@tylercomeau.ca with privacy questions or requests. It covers the verified network, Ask Converge, private Pro features and paid Pro subscriptions. Converge is operated by Tyler Comeau in Alberta, Canada. Team and Organization inquiries are handled directly; self-service organization administration and private-community provisioning are not part of the current app.

2. Information we handle
We handle application and verification information; account identifiers, email and contact information; name, professional role, organization and optional profile photo; verified country and region; community memberships; situations, replies and outcomes; follows, saves and notification preferences; reports and moderation records; named-member blocks; legal-document acceptance versions and timestamps; location-change requests; deletion-workflow records; support requests; subscription status, purchase history and entitlement status; and product interactions recorded to operate features, such as follows, saves, onboarding completion, preference changes and subscription/access or Ask request events. These records are linked to your account where needed. Authentication and infrastructure providers also process technical information needed to deliver and protect the service, such as session, request and security logs. Do not include confidential information about students, staff or other people in contributions or support messages.

3. Why information is used
We use this information to verify membership, authenticate accounts, assign appropriate communities, display authorized discussions and named identities, save preferences, provide notifications, process support and location requests, enforce safety rules, record legal acceptance, prevent abuse and fulfill deletion requests, provide paid access and reconcile subscription lifecycle events. These categories are not used by Converge for advertising tracking. Authentication credentials are handled through Supabase Auth; the app uses your current password to verify sensitive password-protected deletion requests and does not intentionally log that password.

4. Who can see information
Members can view content permitted by community access rules. Named contributions may display your name, role and avatar. Anonymous contributions do not expose your author identifier, name, role or avatar in ordinary member interfaces. The authenticated account remains associated internally with content for ownership, access control, moderation, safety, reporting, deletion and authorized administration. Authorized administrators can access protected attribution for their responsibilities. Administrators can review applications, account information, reports and location requests for their responsibilities. Providers supporting hosting, authentication, storage and delivery process information needed for those services. Information may also be disclosed where legally required or necessary to address a lawful security or safety matter.

5. Limits of anonymity and blocking
Anonymous participation is anonymous to members, not to authorized platform administration. Text you write may identify you or another person. Blocking affects the display of named contributions and does not filter anonymous content by hidden identity. Other members may have already seen or copied content; Converge cannot retract their independent copies. Use reporting or contact support about identifying information.

6. Preferences and controls
Profile allows changes to your name, role, organization and avatar. Verified location changes require review so memberships remain consistent. Settings include notification preferences; categories or channels not implemented in the current app are labelled Coming soon. You can manage blocked members, request support, review legal documents and initiate account deletion. Appearance supports System, Light and Dark; that preference is stored on the current device/browser. Tour completion is stored with your account and Replay App Tour is available in Profile & settings. Saving a preference for a future notification channel does not activate delivery.

7. Retention and deletion
Account information is retained while needed to operate the account and provide the service. Deletion revokes access, erases personal profile and geographic information, removes avatars and private account records, and erases the deleting member’s original situations, replies and outcomes. Non-identifying placeholders, discussion identifiers and timestamps may remain so other members’ contributions retain their thread structure. Relevant moderation and audit records are redacted and detached from the deleted identity; only narrowly needed security and operational metadata is retained. Authentication is removed after database and storage cleanup. Interrupted cleanup is retried rather than treated as completed.

Provider backups, infrastructure logs and cached copies may remain temporarily under the providers’ retention and recovery processes; deletion from active service is not an immediate purge of every backup or previously cached copy. Support correspondence, subscription and purchase records, and information subject to tax, accounting or other legal preservation duties may require separate retention. Apple, RevenueCat and Stripe may retain their own payment, subscription, fraud-prevention and legally required records under their applicable policies; deleting Converge data does not immediately erase provider-held records or cancel external billing. We do not promise a fixed period that has not been established for those systems. Contact support for the applicable retention information or a privacy request. Content written independently by another member is not automatically erased with your account; identifying quotations can be reported for review.

8. Security and international processing
Converge uses access controls and restricted administrative operations to protect information. No service can promise absolute security. Hosting and support providers may process data in locations outside your jurisdiction, where applicable laws may differ. Contact support for current provider and hosting information.

9. Requests and changes
You may contact info@tylercomeau.ca to request access, correction or deletion of personal information, or to raise a privacy concern. We may verify identity before acting and will handle requests according to applicable law. Public deletion instructions are at https://converge.tylercomeau.ca/delete-account. Updated policies carry a version and effective date; the app requests renewed acceptance when required.

10. Ask Converge processing and controls
Converge stores your Ask questions, generated responses, conversation identifiers and titles, timestamps, source/citation references, request status and operational usage records to provide private history, follow-ups, access control, reliability and abuse prevention. We use a bounded selection of earlier messages when generating a follow-up; OpenAI is not the source of truth for your conversation history.

OpenAI processes the question and bounded conversation context you submit, decision-support instructions, permitted Converge evidence and selected external evidence to generate a response. This processing may include confidential details you choose to enter. Avoid names and identifying or confidential details unless necessary and lawful to share. Retrieval does not supply hidden anonymous author identifiers or profile attribution, reports, audit logs or moderation notes. Content you or another member writes may itself contain identifying information.

Where outside evidence is useful, Ask may research external sources through OpenAI’s web-search capability. A separate server-controlled planning step generates a query and validates it before searching. Raw private questions are not sent directly as web-search queries; queries are intended to exclude identifying and unnecessary confidential details. If validation fails, that search is not performed. We retain limited source information, such as links, titles and relevant excerpts or metadata, rather than copies of entire external articles.

Converge sends Ask OpenAI requests with store=false. API processing is subject to OpenAI’s applicable API/business terms and data policies. This does not mean zero provider retention: separate provider security, abuse-monitoring, legal and infrastructure retention may apply under the provider’s policies and our applicable service configuration. We do not use Ask content for unrelated model-training workflows. Contact info@tylercomeau.ca for current processing and retention information.

Private Ask history is available to its owner through the normal application. Administrator status does not grant general browsing access to private conversations. If you choose Report response, you share that generation’s question, generated response, source references and your optional explanation with authorized administrators for investigation. Other conversation messages are not made available through this review path. Opening a reported generation and changing its review status are recorded in a protected audit trail. Necessary restricted service operations remain available for security, delivery, support and deletion.

Archiving hides a conversation from the active list and is reversible. Deleting it removes its private question/answer history, citation/external-source and execution telemetry content, and associated response report text and review events from active Ask records. Minimal non-content request identifiers, account association, timestamps, entitlement/status and accounting or replay-prevention metadata may remain to prevent allowance resets, duplicate execution and abuse. Deleting a conversation does not delete shared Converge discussions. Account deletion clears private Ask conversation and response-report content through the account-deletion workflow. Provider backups, logs and legally required retention remain subject to the qualifications in section 7; deletion is not a promise of immediate erasure from every technical system.

Ask can use accessible member discussions, genuine member perspectives, editorial Founding Scenario context and external sources. Founding Scenarios are fictionalized discussion starters, not actual experiences or outcomes; generated synthesis and external information are distinct from member contributions. Responses may be inaccurate or incomplete. Converge supports your judgment and does not make decisions for you.

11. Service providers and subscriptions
Supabase provides authentication, database, storage, backend functions and related infrastructure, including access-controlled RPCs and database row-level security. It processes account and service content necessary to operate Converge.

RevenueCat handles subscription and entitlement management and RevenueCat Billing for web subscriptions. It processes your Converge account identifier and relevant purchase, product, billing-platform, subscription-status and expiration information. Your authenticated Converge account UUID is used as the RevenueCat App User ID so paid access can be associated with the correct account. Converge stores the subscription/access state and limited lifecycle-event metadata needed to reconcile entitlement, prevent duplicate processing and handle support.

Stripe processes web payments and applicable tax calculation through RevenueCat Billing. Payment details and billing information entered in checkout are handled by the payment infrastructure; Converge does not receive or store full payment-card numbers or card security codes. Apple processes iOS purchases and payments under Apple’s applicable terms and privacy practices. OpenAI processes Ask requests as described in section 10. Providers may process related operational and security data under their applicable policies; no zero-retention or particular data-residency guarantee is made.

12. Private Workspace, reflections and Playbook
Converge stores Workspace titles, decision/context notes, options, considerations, unresolved questions, final decisions, next steps, dates, manual resource titles/URLs/notes and secure references to evidence. Reflections store what happened, optional learning and future-approach notes. Playbook entries store their type, optional heading, insight, private context, dates, archive state and revision information.

These records are private to their owner in the normal product. They are not included in network feeds, network search, member profiles or Ask retrieval, and normal administrator status does not grant general browsing access. Restricted technical operations may access data where necessary to provide, secure, support or delete the service. Referenced network and Ask material remains subject to current access permissions; unavailable sources are not exposed through the reference.

A Playbook insight deliberately saved from a reflection is independent: deleting the originating reflection or Workspace does not delete the insight, and deleting the insight does not delete its source. Workspace deletion removes its reflections and Workspace-owned notes/references, not original network or Ask content. Account deletion includes private Workspace, reflection and Playbook records, subject to section 7’s retention qualifications. Pro expiry preserves prior private history as read-only rather than deleting it.

13. Intended audience
Converge is intended for education professionals, not children or students. Do not create student accounts or submit children’s personal or protected records. Contact support if you believe a child has provided personal information through the service so we can review and address it.