Concierge
← Home

Privacy Policy

Effective April 29, 2026

What we collect

  • Account info: your Google account email address and display name, obtained when you sign in via Google OAuth using the openid, email, and profile scopes. We do not request access to Gmail, Drive, Calendar, Contacts, or any other Google Workspace data.
  • Connected accounts: WhatsApp phone number IDs, Instagram page IDs, and encrypted access tokens
  • Message logs: inbound/outbound WhatsApp and Instagram messages processed by auto-reply
  • Lead form submissions: phone numbers submitted through your lead capture forms
  • Persona prompts and reply rules: the AI persona text you write and the rule descriptions you configure

How we use it

Solely to operate the Service: authenticating your sign-in, routing messages, generating auto-replies, and displaying your admin dashboard. Your Google account email and name are used only to identify your account and to display your name in the admin UI.

How we store and protect your data

Data is stored on Cloudflare's infrastructure (D1 database and KV store). All transfers between your browser, the Service, and third-party APIs use TLS encryption. Sensitive tokens (Meta access tokens, session cookies) are encrypted at rest with AES-256-GCM. Database access is restricted to the Service's backend code and a small number of authorised maintainers; no human routinely reviews customer data.

AI processing

Inbound message text and your persona prompt are sent to Cloudflare Workers AI to draft replies and to classify message intent and persona safety. Cloudflare's AI processing terms apply. Persona prompts are also classified by an automated safety scanner; the scanner's category labels are logged for abuse review and not shared. AI-generated replies may be incorrect or inappropriate. See our Terms of Service for the liability disclaimer.

How we share your data

We interact with Meta's WhatsApp and Instagram APIs and Cloudflare Workers AI on your behalf to deliver the Service. We do not sell your data, transfer it to data brokers or information resellers, or share it with any other third party, except (a) with your explicit consent, (b) as required by law or valid legal process, or (c) as part of a merger, acquisition, or sale of assets, in which case we will notify you before your data is transferred and becomes subject to a different privacy policy.

Limited use of Google user data

Concierge's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We use Google account data (email and name) only to provide and improve user-facing features of Concierge that are visible and prominent in the user interface.
  • We do not use Google user data to serve advertisements, including retargeting, personalised, or interest-based advertising.
  • We do not transfer Google user data to third parties except as necessary to provide or improve the Service, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
  • We do not use Google user data, or data derived from it, to develop, improve, or train generalised or non-personalised AI or machine-learning models.
  • We do not use Google user data for credit-worthiness, lending, insurance underwriting, or any similar evaluation.
  • No human at Concierge reads your Google user data unless we have your affirmative consent for specific messages, it is necessary for security purposes (e.g. investigating abuse), to comply with applicable law, or the data is aggregated and used for internal operations in line with this policy.

Data retention

Data is retained while your account is active. You can delete all your data at any time from Settings. When you delete your account, your Google account email, display name, and all associated tenant data are removed from our database immediately.

Data deletion

To delete your account and all associated data:

Deletion is immediate and irreversible.

Contact

Questions? Open an issue at github.com/ananthb/concierge.