On this page
Privacy policy
Last updated 2026-09-09
This page explains what we do with your data. The short version comes first. The full text follows.
The short version
- CTRL 18 makes Convorge. We are in Bengaluru, India.
- Your contracts belong to your company. We only handle them on its instructions.
- An AI reads your contracts to find the key facts. It is never trained on them.
- Files you pick from your drive are copied into Convorge as contract files.
- Your data is kept inside the EU.
- Questions? Write to hello@ctrl18.com.
Who we are
CTRL 18 Private Limited runs Convorge. Write to hello@ctrl18.com.
Convorge is made and run by CTRL 18 Private Limited. Our address is 249, 2nd D Cross Rd, 2nd Stage, Domlur, Bengaluru, Karnataka 560071, India.
We have not appointed a data protection officer. The address hello@ctrl18.com reaches the person who answers privacy questions. Use it for any request about your data.
Two kinds of data, two roles
Your contracts are your company's. Your account details are handled by us.
There are two kinds of data in Convorge.
The first kind is your company's contracts and everything in them. This data belongs to your company. We only handle it on your company's instructions. In legal terms, your company is the controller and we are the processor. A processor is a company that handles data for someone else.
The second kind is the data we need to run your account. That is your name, your email, your login and your support messages. We decide how to handle this data, so for it we are the controller.
If you use Convorge through your employer, your employer decides what happens to the contracts. Ask them first. We have a data processing agreement for customers. Ask for it at hello@ctrl18.com.
What we collect and why
We collect only what we need to run the service and to answer you.
We do not sell data. We do not show ads. We do not track you across other websites.
| What | Why | The legal reason |
|---|---|---|
| Your name, email and password | To run your account and let you sign in | Our contract with your company |
| What you do in Convorge, such as sign-ins and changes | To keep the service safe and working, and to show your team who did what | Our legitimate interest in running a safe service |
| Messages you send to support | To answer you | Our contract with your company |
| The demo form on our contact page | To reply to you | Your request |
| Your company's contracts and files | To provide the service to your company | Your company's instructions |
The AI assistant
An AI reads your contracts to find key facts. It is never trained on them.
Convorge uses an AI assistant to read contracts. It finds key facts like the parties, the dates and the value. It also suggests wording and answers questions about a contract.
To do this, we send the contract text to our AI provider in the United States. For scanned files, we send the page images.
Our AI provider's terms say it does not train its models on our customers' content. Your company keeps its inputs and owns the outputs. The provider acts as a processor for us under standard contractual clauses.
The assistant can be wrong. A person always confirms what it found before it counts.
Files from OneDrive, SharePoint and Google Drive
We read only the files you pick. We store a copy in Convorge.
Your company's owner or admin can connect OneDrive, SharePoint or Google Drive to Convorge. Then people can pick files and folders to bring in.
We read only what you pick. We copy each file into Convorge as a contract file. We do not scan your whole drive.
The connection uses a token from Microsoft or Google. We store that token encrypted. When you disconnect, we delete it and tell the provider.
Convorge's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
At many companies, the Microsoft 365 admin has to approve Convorge once before the first connection.
Who else sees data
A few companies help us run Convorge. Ask us for the full list.
A few companies process data for us: the company that hosts our servers in the European Union, the service that delivers our email, our AI provider in the United States, our electronic signature partner, and Microsoft or Google only when you connect a drive.
We share the full list with customers on request. Write to hello@ctrl18.com.
Where your data lives
Your data is kept inside the EU. Our team works from India.
Your data is stored on servers in the European Union. Our email is sent from the European Union too.
Our team works from India. We reach your data only to run the service and to help you. Our data processing agreement names this transfer.
The AI vendor is in the United States. We use standard contractual clauses for that transfer.
How long we keep it
While your company has an account, then 30 days.
We keep your company's data while it has an account with us.
When the account ends, we delete everything within 30 days.
We keep activity logs for 90 days. We keep database copies taken before software updates for 90 days.
Your rights
You can ask to see, fix or delete your data. Write to hello@ctrl18.com.
You can ask us to show you the data we hold about you. You can ask us to fix it, delete it, or stop using it. You can ask for a copy to take elsewhere. If we asked for your consent, you can take it back at any time.
Write to hello@ctrl18.com. We answer within 30 days.
If you are unhappy with our answer, you can complain. In India, that is the Data Protection Board of India. In the European Union, it is the data protection authority of your country.
Children
Convorge is for companies. It is not for anyone under 18.
Convorge is a tool for businesses. It is not meant for anyone under 18. We do not knowingly collect data from children.
Changes to this page
We will update this page when something changes.
When we change this policy, we will update the date at the top of this page. For a big change, we will also email the owner of each customer account.