ConveraLab Privacy Policy

Version: 2026-08-30

Effective date: 2026-08-30

1. Who we are and when this policy applies

ConveraLab is a coaching-practice product of Emerge Performance Pte Ltd (Emerge Performance, we, us, or our). This Privacy Policy explains how Emerge Performance collects, uses, discloses, and otherwise processes personal data through ConveraLab.

Emerge Performance provides ConveraLab directly and through organizational programs. A sponsoring organization may decide who participates in its program, assign cohorts and authorized program staff, and determine how program learning records are used. Its own privacy notice may also apply to those activities. Emerge Performance remains responsible for the operation of ConveraLab and engages technology and other service providers to process personal data on its behalf.

2. Personal data we process and where it comes from

Depending on how you use ConveraLab, we may process:

• account and contact information, such as your name, email address, email-link or Google sign-in method, account status, and a unique account identifier;
• program information, such as your organization, enrollment, cohort, role, assigned facilitator or lecturer, and program access status;
• practice-session information, such as scenario choices, session dates and duration, and other session metadata;
• session and progress content, such as voice recordings during practice sessions, transcripts, reports, scores, feedback, suggested improvements, self-assessment responses, pulse-check scores and comments, written reflections, authorized program-staff comments, and any other progress records;
• technical and usage information, such as device, browser, network, feature usage, authentication, reliability, error, security, and diagnostic data;
• approximate location information derived from a network address, such as country, continent, city, subdivision or region, postal code, latitude, longitude, time zone, and related GeoIP accuracy or confidence information;
• communications with Emerge Performance, authorized program staff, or support; and
• your verified email address if registration is unavailable and you separately choose to join the waitlist.

We receive this information from you, from the organization sponsoring your program, automatically when you use ConveraLab, and from information generated through the product, including AI-generated transcripts, reports, scores, and feedback.

3. How and why we use personal data

We use personal data to:

• create and secure accounts, authenticate users, and manage access;
• administer individual and organizational enrollment and program roles;
• provide AI role-play sessions and generate transcripts, reports, scores, and feedback;
• show practice history and progress to the participant and to authorized program staff where an organizational program applies;
• provide support, recover accounts, troubleshoot errors, monitor reliability, prevent misuse, and protect ConveraLab and its users;
• understand adoption, repeat use, feature usage, and user journeys so that Emerge Performance can evaluate and improve the product;
• understand the approximate geographic distribution of use and identify regional availability, reliability, or support needs;
• manage the waitlist and notify you if registration becomes available;
• comply with law, respond to lawful requests, establish or defend legal claims, and enforce applicable terms; and
• respond to privacy and data-handling requests.

Depending on the circumstances and applicable law, we process personal data with consent, to provide a service or program you have requested, to comply with legal obligations, or for permitted legitimate interests and business- improvement purposes.

Emerge Performance relies on legitimate interests to process limited account- linked product analytics for service security and reliability and to understand adoption, repeat use, feature usage, approximate geographic distribution, and regional reliability. The analytics are not used for advertising, cross-site tracking, certification, employment decisions, or other automated decisions about participants. This processing is part of the current ConveraLab service and is not offered on a separate opt-out basis. If you do not want account-linked product analytics processed as described in this policy, do not use ConveraLab.

4. AI features and product analytics

ConveraLab uses AI service providers to deliver voice role-play and to generate transcripts, reports, scores, and feedback. Depending on the feature, these providers may process voice audio, messages, transcripts, session context, and instructions needed to produce the requested output.

Emerge Performance does not use identifiable participant content to train or fine-tune AI models. We configure and contract with our AI service providers so that participant content is not used to train or improve their general AI models. Those providers may process or temporarily retain participant content as necessary to provide, secure, and monitor their services, prevent misuse, or comply with law, subject to their applicable data-processing terms and our provider configuration.

ConveraLab also uses limited product analytics. In the authenticated product, selected usage and reliability events are associated with a unique account identifier so that Emerge Performance can understand journeys and repeat use. These analytics are pseudonymous rather than anonymous because Emerge Performance can associate the identifier with an account.

For analytics events in the authenticated product, our analytics provider uses the request’s IP address during ingestion to derive approximate GeoIP information, such as country, continent, city, subdivision or region, postal code, latitude, longitude, time zone, and related accuracy or confidence information. The provider is configured to discard the raw IP address rather than retain it with the analytics event. The derived information estimates the location of the network connection; it is not precise device or GPS location and may be inaccurate, for example when a virtual private network, mobile network, or corporate gateway is used. We use it to understand geographic distribution and regional availability or reliability, not to make decisions about individual participants.

We do not intentionally include names, email addresses, sign-in links, tokens, prompts, transcripts, audio, reports, coaching goals, or other free-text session content in product-analytics events. The authenticated product does not use automatic capture or session recording for product analytics. The public ConveraLab website uses cookieless analytics that are not associated with a ConveraLab account. In that cookieless mode, the request IP address is stripped before GeoIP enrichment, so derived location information is not added to those website events.

5. Who can access or receive personal data

Access within ConveraLab is based on a person’s role and is limited to the relevant account, program, cohort, or support task.

• For individual practice, users can access their own sessions, reports, transcripts, available audio, and progress. Other users cannot access that individual-practice content.
• In an organizational program, authorized program staff, including lecturers and program administrators, may access account, membership, cohort, practice, assessment, report, transcript, available audio, feedback, comment, and progress information as permitted by their assigned role and program scope. Not every role can access every category.
• Authorized Emerge Performance personnel and technology or support providers may access personal data where reasonably necessary to operate, secure, troubleshoot, support, or improve ConveraLab, or to respond to a privacy or support request.

We may also disclose personal data to:

• cloud hosting, authentication, storage, database, security, email, support, analytics, and AI service providers that process data on our behalf;
• professional advisers, auditors, insurers, and other advisers where reasonably necessary;
• public authorities or other parties where required by law or reasonably necessary to protect rights, safety, or security; and
• a successor or prospective successor in connection with a merger, reorganization, financing, or transfer of all or part of the product or business, subject to appropriate confidentiality protections.

Current principal providers include Google Cloud and Firebase for cloud and authentication services, Google AI services for voice role-play and report generation, Resend for email delivery, and PostHog for limited product analytics. These providers may engage their own subprocessors under their applicable terms.

We do not sell personal data or use participant session content for targeted advertising.

6. International processing

The primary ConveraLab application and database are hosted in Singapore. Some service providers may process personal data in other countries, including the United States. Those countries may have data-protection laws that differ from the laws where you live.

When personal data is transferred outside Singapore, Emerge Performance uses contractual and other measures designed to provide a standard of protection comparable to the protection required under Singapore’s Personal Data Protection Act. Where another transfer mechanism is required by applicable law, we will put that mechanism in place before the relevant processing begins.

7. Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, the applicable account or program lifecycle, and legal, security, audit, dispute, and compliance requirements.

• Voice recordings are retained for up to 30 days unless deleted earlier.
• For the current testing programs, transcripts, reports, scores, feedback, facilitator comments, and progress records are retained until no later than 90 days after the program closes and no later than 15 months after the first participant is invited, unless participants receive updated notice or a different lawful retention requirement applies.
• Account and program-administration records are retained while the account or program is active and for a reasonable period afterward to close the program, handle requests, and meet legal or audit requirements.
• Operational and security logs are retained for up to 180 days.
• Pseudonymous product-analytics events, including derived GeoIP information, are retained for up to 12 months after collection.
• A waitlist email is retained while the waitlist remains open. If you leave the waitlist, we stop using the email for notifications and delete or de-identify it within 30 days. If registration reopens or we close the waitlist, we delete or de-identify the remaining waitlist emails within 180 days. We may retain a minimal suppression or audit record where necessary to honor your choice or demonstrate compliance.
• Backup copies are overwritten or deleted within 30 days under the applicable backup procedure.

Information that has been aggregated or de-identified so that it no longer identifies a person may be retained for product evaluation, statistics, and compliance. We may also retain the minimum information necessary to document a privacy request, comply with law, resolve disputes, maintain security, or enforce agreements.

8. Security

Emerge Performance and its providers use reasonable technical and organizational measures designed to protect personal data. These include verified authentication, role-based authorization, scoped program access, encrypted transport, access controls, logging, restricted support workflows, and operational monitoring.

No system can be guaranteed completely secure. If you believe personal data or an account may have been compromised, contact us promptly using the details in section 12.

9. Children’s privacy

ConveraLab is intended for adults aged 18 or over and is not directed to children. Emerge Performance does not knowingly permit anyone under 18 to participate. Contact us if you believe a child has provided personal data through ConveraLab.

10. Your rights and choices

Depending on applicable law, you may ask to:

• access personal data that Emerge Performance holds about you and receive information about how it has been used or disclosed;
• correct inaccurate or incomplete personal data;
• delete personal data where deletion is available or required;
• withdraw consent for processing that relies on consent.

Withdrawing consent may prevent Emerge Performance from continuing to provide a feature or program that requires the affected personal data. It does not affect processing that occurred before the withdrawal or processing permitted on another legal basis.

We may request information reasonably necessary to verify your identity and authority before responding. Requests concerning organizational program records may require coordination with the organization that sponsors or administers the program. Rights may be subject to exceptions under applicable law, including where information must be retained for security, legal, audit, or dispute purposes or where disclosure would affect another person’s rights.

Send privacy requests to privacy@converalab.com. You may also raise an unresolved concern with the Singapore Personal Data Protection Commission or another competent privacy regulator where applicable.

11. Changes to this policy

We may update this Privacy Policy to reflect changes to ConveraLab, our providers, our data handling, or applicable requirements. The effective date at the top shows when the current policy took effect. Where a change materially affects how personal data is processed, we will provide additional notice where required before the change takes effect.

12. Contact us

Emerge Performance Pte Ltd is responsible for this Privacy Policy and the operation of ConveraLab.

Privacy questions, requests, and suspected privacy or security incidents: privacy@converalab.com.

Account and service support: support@converalab.com.