Privacy Policy
Last updated: March 15, 2026
Convo (“we”, “our”, or “us”) is operated by Crema and accessible at convosurvey.ai. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Information We Collect
Information you provide directly
When you create an account or use Convo as an admin, we collect your name and email address. You may sign up and sign in using your Google account via Google OAuth — in that case, Google authenticates you and shares your name and email address with us. If you register with a password, it is stored securely via Supabase Auth and never stored in plain text. When you respond to an interview as a participant, we collect the name, email address, and company name you enter, along with your interview responses.
Interview data
Interview questions are created by admin users. Responses — including the full conversation transcript and AI-extracted summaries — are stored in our database and are accessible only to the interview creator and any collaborators they have explicitly granted access to.
Automatically collected information
We collect standard server logs (IP addresses, browser type, pages visited, timestamps) for security, debugging, and service improvement. We use Sentry for error monitoring — if an error occurs, diagnostic information (including browser type, OS, page URL, and a stack trace) may be transmitted to Sentry’s servers. We do not use tracking pixels or third-party advertising cookies.
How We Use Your Information
- To provide and operate the Convo service
- To authenticate admin users and protect access to interview data
- To send transactional emails (collaborator invitations, password resets) via Resend
- To generate AI-powered conversation and analysis via the Anthropic API
- To improve and debug the service
- To comply with legal obligations
AI Processing
Convo uses the Anthropic Claude API to power interview conversations and to extract structured summaries from transcripts. Interview content — including questions and respondent answers — is sent to Anthropic for processing. Anthropic’s use of this data is governed by their Privacy Policy. We do not use your data to train AI models.
Data Storage and Security
Your data is stored in Supabase, a cloud database provider. All data is encrypted at rest and in transit. Access to interview data is controlled by row-level security policies — respondent data is accessible only to the interview owner and collaborators they authorize. We apply industry-standard security measures but no system is 100% secure.
Data Retention
Admin account data is retained for the lifetime of your account. Interview and response data is retained as long as the interview exists. You may delete your interviews and their associated responses at any time from the admin dashboard. To delete your account entirely, contact us at george@crema.us.
Sharing Your Information
We do not sell your personal information. We share data only with the following service providers who help operate Convo:
- Supabase — database and authentication hosting
- Google — optional OAuth sign-in; Google’s use of data shared during sign-in is governed by the Google Privacy Policy
- Anthropic — AI conversation and extraction processing
- Resend — transactional email delivery
- Sentry — error monitoring and diagnostics; error data is governed by the Sentry Privacy Policy
- Vercel — web application hosting and analytics
We may disclose information if required by law or to protect the rights, property, or safety of Convo, our users, or others.
Your Rights
Depending on your location, you may have rights to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise any of these rights, contact us at george@crema.us.
Cookies
Convo uses strictly necessary cookies to maintain your authenticated session. Our analytics provider (Vercel Analytics) does not use cookies and does not track individuals across sites. We do not use advertising or tracking cookies.
Children’s Privacy
Convo is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify admin users of material changes by email. Continued use of Convo after changes are posted constitutes acceptance of the updated policy.
Contact Us
Questions about this Privacy Policy? Contact us at george@crema.us or visit convosurvey.ai.