Privacy Policy
The short version. Converge is a mail client. To do its job it has to connect to your email accounts and keep a copy of your messages, so you can read and search them quickly. That data is yours: we use it only to provide the service, we do not sell it, we do not use it for advertising, and you can delete it at any time by removing an account or closing your login. Mobile numbers given for text reminders are used only for those reminders and are never shared for marketing.
- What we collect
- How we use it
- Who we share it with
- Text messaging (SMS) data
- Data from Google (Sign in with Google, Gmail, Google Drive)
- How long we keep it
- How we protect it
- Your choices and rights
- Cookies and similar technologies
- Children
- Changes to this policy
- Contact
Converge is an email client made by Converge (www.convergemail.com) that lets you read, organise and answer mail from several email accounts in one place. This policy describes the data that involves and what we do with it.
1. What we collect
| Category | What it is | Where it comes from |
|---|---|---|
| Converge login | Your name, the email address you sign in with, and a password (stored only as a one-way hash, never in a readable form). Whether the address has been verified, and the plan your login is on. | You, when you create a login. |
| Email account connections | For each email address you add: the address, display name, the mail server settings Converge detected or you entered, and the password or sign-in token for that account (stored encrypted). Any signature you set. | You; your mail provider during sign-in. |
| Your email | Messages from the accounts you connect: headers (sender, recipients, subject, date), message bodies and attachments, folder structure, and read/starred status. Converge keeps a copy of messages it has downloaded so they open instantly and can be searched. Messages you send through Converge, and drafts you write in it. | Your mail provider, through the account connection. |
| Documents and Files | Document attachments (PDF, Word, Excel, PowerPoint, text and similar) from mail you receive, collected into a library, with the sender, date and subject they came with. | Derived from your email. |
| Cloud storage connections | If you choose to copy documents to Google Drive or Dropbox: an access token for the folder Converge creates there (stored encrypted). Converge can see only files it put there. | You, by connecting the service. |
| Urgent marks and reminders | Which messages you marked urgent and when you asked to be reminded to respond. | You. |
| Mobile number (optional) | If you opt in to text reminders: your mobile number, the time you consented and the network address the consent came from, and when each reminder text was sent. | You, in Settings. See section 4. |
| Technical data | Network address, browser or app version, device type, and server logs of requests (including errors). Session cookies or tokens that keep you signed in. | Automatically, when you use Converge. |
| Support correspondence | Anything you send us when you ask for help. | You. |
We do not collect payment card details ourselves. When paid plans begin, payments will be handled by a payment processor and we will update this policy to say who it is and what they receive.
2. How we use it
- To provide Converge: connecting to your mail accounts, downloading, displaying, searching and sending mail, saving drafts, collecting documents, keeping reminders, and syncing between the web app and the phone app.
- To keep your account secure: verifying your email address, resetting your password, keeping you signed in, limiting abusive sign-in attempts.
- To send the notifications you asked for: reminders as in-app and phone notifications and, if you opted in, by text message.
- To run the service: diagnosing problems, preventing abuse, measuring load, and improving Converge.
- To communicate with you about your account: verification codes, password resets, important changes to the service or to billing. We do not send marketing email unless you ask for it, and you can stop it at any time.
- Converge Collective: if you take part, your suggestions and votes are shown to the community under the name you choose.
We do not read your email for any purpose other than providing the service to you. We do not use the content of your messages, documents or contacts to build advertising profiles, to train machine-learning models, or to sell to anyone.
3. Who we share it with
We share data only with the service providers that Converge is built on, each only for the purpose stated, and with no permission to use it for their own purposes:
| Provider | What they process | Why |
|---|---|---|
| Render | Everything Converge stores (encrypted at rest on their infrastructure). | Hosting the Converge servers and database. |
| Resend | Your login email address and the contents of verification and password-reset emails. | Delivering email that Converge sends to you. |
| Twilio | Your mobile number and the contents of reminder texts, only if you opted in. | Delivering text messages. |
| Your mail provider (Gmail, Microsoft 365, iCloud, your hosting company, etc.) | Your mail account credentials and the mail itself. | That is where your mail lives; Converge connects to it on your behalf. |
| Google Drive or Dropbox | Copies of documents, only if you connected the service. | Keeping copies where you asked. |
Beyond that, we disclose data only if the law requires it (for example a valid court order), to protect the rights, safety or property of Converge or its users, or as part of a merger or acquisition — in which case this policy continues to apply and you will be told.
We do not sell personal information, and we do not share it with third parties for their marketing.
4. Text messaging (SMS) data
Converge offers an optional text-message program, Converge Reminders, described in full on the SMS program page. Here is what it means for your data:
- We collect your mobile number only if you enter it in Settings and tick the consent box. The box is never pre-ticked.
- We keep a record of your consent: the number, the date and time, and the network address the request came from.
- We use the number only to send the reminder texts you asked for. We do not send marketing texts.
- No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
- Twilio delivers the messages on our behalf and processes your number for that purpose only.
- You can opt out at any time by replying STOP to any message or by turning text reminders off in Settings. When you do, we delete the number and the consent record. Replying HELP gets you program information.
5. Data from Google (Sign in with Google, Gmail, Google Drive)
Converge can connect to Google in three separate, optional ways. Each one asks you for permission on a Google screen that names exactly what is being requested, and you can take the permission back at any time at myaccount.google.com/permissions or by disconnecting inside Converge.
| What you choose | Google data Converge receives | What it is used for |
|---|---|---|
| Continue with Google (signing in to Converge) | Your Google account's email address, name and account identifier (the openid, email and profile scopes). | Creating or signing in to your Converge login and showing your name. Nothing else; Converge gets no access to your mail this way. |
| Adding a Gmail or Google Workspace mailbox by signing in | Access to that mailbox over IMAP and SMTP (the https://mail.google.com/ scope): your messages, folders, labels and attachments, and the ability to send mail from the address. A sign-in token for the mailbox (stored encrypted). | Everything described in sections 1 and 2 for that mailbox: showing, searching and syncing your mail, sending your replies, saving drafts, collecting document attachments and keeping reminders. The same as for any other mail account. |
| Copying documents to Google Drive | Permission to create and manage only the files Converge itself creates in your Drive (the drive.file scope), and a token for that (stored encrypted). Converge cannot see any other file in your Drive. | Keeping copies of documents from your mail in a folder you choose there. |
Converge's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the Converge features you see and use yourself, as described above. We do not use it for advertising, we do not sell it, and we do not use it to develop, improve or train generalised or non-personalised AI or machine-learning models.
- We do not transfer Google user data to anyone except as needed to provide those features (the hosting provider that runs Converge, under section 3), to comply with the law, or as part of a merger or acquisition with notice to you.
- Humans do not read your Google data, except with your explicit permission to help you with a problem, for security or abuse investigation, to comply with the law, or where the data has been aggregated and anonymised.
- Google user data is stored only for as long as the connection exists: remove the mailbox or disconnect Drive in Converge and the cached data and tokens are deleted (section 6). Close your login and everything is deleted.
6. How long we keep it
- Email and documents are kept while the account is connected to Converge. Remove an email address from Converge and its cached messages, documents and settings are deleted from Converge. (The mail itself stays in your mail account, untouched.)
- Your Converge login and everything under it are deleted when you close the login (see section 8).
- Mobile number and SMS consent are deleted when you opt out.
- Verification and reset codes expire after 15 minutes and are deleted when used.
- Server logs are kept for up to 30 days for troubleshooting and security, then discarded.
- Backups of the database may hold data for up to 30 days after deletion before they cycle out.
7. How we protect it
- All traffic between you and Converge, and between Converge and your mail providers, is encrypted in transit (TLS).
- Passwords and sign-in tokens for your mail accounts and cloud storage are encrypted at rest with a key that is kept separately from the database.
- Your Converge password is stored only as a salted hash (scrypt).
- Email shown in Converge is cleaned of scripts and tracking content before display, and remote images are not loaded unless you choose to.
- Access to production systems is limited to the people who operate Converge and is used only to run the service or to help you when you ask.
No system is perfectly secure. If we learn of a breach that affects your data, we will tell you without undue delay and explain what happened and what we are doing about it.
8. Your choices and rights
- See and change your data: your login details, addresses, signatures, settings and connected services are all under Settings in Converge.
- Remove an email account from Converge at any time; its data is deleted from Converge.
- Google permissions can also be withdrawn at myaccount.google.com/permissions.
- Disconnect Google Drive or Dropbox under Settings → Documents and Files.
- Opt out of text messages by replying STOP or in Settings.
- Close your Converge login: email support@convergemail.com from your login address and we will delete the login and everything under it.
- Export: your mail remains in your mail accounts in the standard formats; documents can be downloaded from Documents and Files at any time.
Depending on where you live, you may have legal rights to access, correct, delete, restrict or port your personal data, to object to certain processing, and to complain to a supervisory authority. To exercise any of them, contact us at the address below; we will respond within the time the law requires. We will not treat you differently for exercising your rights.
9. Cookies and similar technologies
The Converge web app uses a single, strictly necessary session cookie to keep you signed in. The phone apps use a sign-in token kept in the device's secure storage. Your browser may also keep small preferences (such as how you last grouped a list) on your own device. We do not use advertising cookies, tracking pixels or third-party analytics on the site or in the app.
10. Children
Converge is not directed at children under 13 (or the higher age your country sets), and we do not knowingly collect personal data from them. If you believe a child has created a login, contact us and we will delete it.
11. Changes to this policy
When we change this policy, we will update the effective date above. If a change meaningfully affects how we use your data, we will tell you in Converge or by email before it takes effect.
12. Contact
Questions, requests or concerns about your data: support@convergemail.com.