Privacy Policy

Effective October 2026

ConvoForge is operated by TelaLoom (ABN 65 366 917 788), Australia.

Identity

When you first visit ConvoForge, a random UUID is generated locally in your browser and stored in localStorage under the key cf_user_id. We use that UUID to remember your streak, weekly session count, and tier. Practising needs no account and we do not know your name or IP. We only hold your email if you choose to give it: on your score card (for lesson emails) or just before upgrading to Pro (for your receipt and payment support). Clearing your browser storage signs you out permanently.

Camera

Camera-based body-language analysis runs entirely on your device using Google MediaPipe compiled to WebAssembly. Video frames never leave your browser. We store only aggregated, non-reversible metrics (for example, an eye-contact percentage) keyed to your anonymous UUID.

Microphone

Audio from your microphone is streamed over TLS to Deepgram, our speech-to-text provider, solely to produce a live transcript. Deepgram processes this audio under its own privacy terms and does not retain it for model training. We do not persist the raw audio. The transcript is stored on our servers, keyed to your anonymous UUID, so we can score filler words, pace, and hedging.

Language analysis

Your transcript is sent to Anthropic (Claude) for coaching feedback. Anthropic does not use API inputs to train its models. We store the resulting score and insight against your anonymous UUID.

Avatar voice (text-to-speech)

When a pre-recorded lesson clip isn't available, the lesson script (Carnegie principle, context, and practice prompt — not your transcript or any personal data) is sent to OpenAI's text-to-speech API so the avatar can read it aloud. OpenAI processes this text solely to generate the audio and does not receive your transcript, recordings, or anonymous UUID. See OpenAI's privacy policy.

Payments

Pro upgrades are processed by Stripe Checkout. Stripe handles all card data; ConvoForge never sees your card number, CVV, or billing address. We receive Stripe's customer and session IDs so we can unlock Pro features. The email you enter before checkout is passed to Stripe and kept by us so we can send your receipt and follow up if a payment doesn't go through. It is not added to any newsletter. See Stripe's privacy policy.

Recordings

Session recordings are off by default. If you opt in, recordings are uploaded to Cloudflare R2 using a presigned URL and deleted on a lifecycle schedule.

Cookies and storage

ConvoForge does not use tracking cookies or third-party analytics cookies. We store one item in localStorage (your anonymous UUID) and one item for your cookie-banner acknowledgment.

Your rights (GDPR / CCPA)

If you have not given us an email, your UUID is not linked to any personal identifier, so there is nothing to search or delete by name. Clearing your browser storage disconnects you from your data, but the rows themselves (scores and transcripts) are kept until you ask us to delete them. To request deletion, email [email protected] with your ConvoForge ID (stored in your browser as cf_user_id) — without it we have no way to find your data.

If you have given us your email, you can ask us to access, correct or delete it (and the data linked to it) by emailing [email protected]. Payment records held by Stripe are covered by Stripe's own policy.

Contact

Questions or requests: reach out at [email protected]. Changes to this policy will be announced on this page with an updated effective date.