Privacy policy
This policy explains how Pixel Port LLC (“Concierge”, “we”, “us”) handles personal data when you visit conciergesdk.com, sign up for and use the Concierge dashboard at app.conciergesdk.com, connect a coding agent to our MCP server, or contact us.
Who this policy covers, and who it does not
Section titled “Who this policy covers, and who it does not”Covered: our customers and visitors. For the people who run a Concierge account (developers, support staff, billing contacts) and for visitors to our website, we are the controller: we decide why and how this data is used.
Not covered: the end users of our customers’ apps. When someone chats with support inside an app that uses the Concierge SDK, the company that makes that app is the controller of that data and Concierge is its processor. We handle that data only on the app maker’s instructions, under our Data processing agreement. If you are an end user of such an app, please read that app’s privacy policy and send requests (access, deletion and so on) to the app maker. If you contact us instead, we will pass your request on to them.
The short version
Section titled “The short version”- We collect what we need to run the service and bill for it, nothing more.
- No advertising trackers, no selling or sharing of personal data for cross context behavioral advertising, no session replay.
- The website uses cookieless analytics. The dashboard uses only the cookies it needs to keep you signed in and safe.
- AI features run on Anthropic’s Claude models. Anthropic does not train on this data under its commercial terms.
- Our primary servers are in Canada (OVHcloud, Beauharnois, Quebec), behind Cloudflare. Photo attachments and encrypted database backups are stored in Cloudflare R2 in North America (United States).
- You can export or delete your account from the dashboard at any time.
What we collect
Section titled “What we collect”Account and dashboard data
Section titled “Account and dashboard data”| Data | Where it comes from | Why |
|---|---|---|
| Name, email address, profile picture (if you sign in with Google), password hash (if you use a password) | You, or Google or Apple when you sign in with them | Create and secure your account, sign you in |
| Organization name, members and roles, invitations you send or receive | You and your teammates | Run shared workspaces and permissions |
| Session records: IP address, browser user agent, sign in times | Your browser | Keep you signed in, detect suspicious sign ins, rate limit abuse |
| Content you create: apps, settings, knowledge docs, replies you send, notes, offers, API key names and the last characters of keys (never the full secret) | You | Provide the service |
| Notification preferences and email unsubscribe choices | You | Send only the email you want |
| Billing contact, company name, address, tax ID, subscription status, invoices | You, via Stripe | Bill for the subscription, keep tax records |
| Audit log entries (who did what, when, from which IP) | The service | Security, troubleshooting, accountability |
| MCP and API usage (which tools or endpoints a key called, when, success or error) | Your coding agent or integration | Provide the MCP server, rate limit, debug |
| Support emails and messages you send us | You | Answer you |
We do not receive your full card number: Stripe collects and stores payment details.
Website visitors
Section titled “Website visitors”The website is static and served by Cloudflare. Cloudflare processes your IP address and request details to deliver the page and block attacks. We use Minilytics, a cookieless analytics tool that we host ourselves on our server in Canada, to count page views. It sets no cookies, stores nothing on your device, never stores your IP address and does not build a profile of you across sites. It sends nothing if your browser has Do Not Track or Global Privacy Control turned on; it sees the page you viewed, the referring site, and coarse browser, device and country information. The site saves your light or dark theme choice in your browser’s local storage, which never leaves your device.
Error reports
Section titled “Error reports”When the dashboard, API or MCP server hits an error, an error report goes to GlitchTip, an error tracker we host ourselves on our own server, so these reports never go to a third party. Reports are scrubbed before they are sent and again on arrival: message text, email addresses, tokens and auth headers are removed and IP addresses are anonymized. Error events are deleted after 30 days.
Cookies and similar technologies
Section titled “Cookies and similar technologies”| Name or storage | Where | Purpose | Kind |
|---|---|---|---|
| Session cookie (Better Auth) | Dashboard and API | Keeps you signed in | Strictly necessary |
| CSRF protection cookie | Dashboard and API | Stops other sites from acting as you | Strictly necessary |
| Local storage and IndexedDB (query cache, theme, layout preferences) | Dashboard, in your browser | Makes the dashboard load instantly and remember your settings | Strictly necessary, never sent to us as tracking |
| Local storage (theme) | Website | Remembers light or dark mode | Strictly necessary |
We use no advertising, social media or cross site tracking cookies, so there is no cookie banner: the cookies above are exempt from consent under the ePrivacy rules because the service cannot work without them. Signing out clears the session cookie. You can also clear site data in your browser at any time.
AI features
Section titled “AI features”When an organization turns on Concierge‘s AI features (AI replies, knowledge autopilot, review reply drafts, translation, spam screening), the relevant text, photos and knowledge docs are sent to Anthropic to generate the output. Under Anthropic’s commercial terms, this data is not used to train models. AI replies are labeled as AI to the people who receive them. We do not use your data or your end users’ data to train any AI model of our own.
Why we use your data (legal bases)
Section titled “Why we use your data (legal bases)”If you are in the EEA, the UK or Switzerland, we rely on:
- Contract (GDPR Art. 6(1)(b)): to create your account, provide the service, and bill you.
- Legitimate interests (Art. 6(1)(f)): to keep the service secure, prevent fraud and abuse, fix errors, improve the product with aggregated usage data, and send you service announcements about features you use. We balance these against your rights and you can object at any time.
- Legal obligation (Art. 6(1)(c)): to keep tax and accounting records and answer lawful requests.
- Consent (Art. 6(1)(a)): for optional marketing email, if we ever send it. You can withdraw consent at any time with the unsubscribe link.
Who we share data with
Section titled “Who we share data with”We share personal data only with the service providers (subprocessors) that help us run Concierge, listed below and kept current on the Subprocessors page, and when the law requires it. We also connect to services you choose to connect (for example Google or Apple sign in, Slack, the App Store, Google Play, RevenueCat or push providers); those are governed by your agreement with them.
OVHcloud
- Purpose
- Dedicated server that runs the Concierge API, worker, MCP server, the Postgres database and our self-hosted error tracking (GlitchTip).
- Data
- All service data: account data, conversations, end user profiles, device data, knowledge docs, logs.
- Location
- Beauharnois, Quebec, Canada
- End user data
- Yes
- Transfer safeguard
- EU adequacy decision for Canada (commercial organisations under PIPEDA); UK and Swiss equivalents.
Cloudflare
- Purpose
- DNS, TLS, CDN, firewall and the tunnel in front of our server; hosting for this website and the dashboard (Pages); R2 object storage for photo attachments and encrypted database backups.
- Data
- All traffic in transit (including IP addresses and request contents), attachments, encrypted backups.
- Location
- Global edge network; Cloudflare, Inc. is based in the United States. R2 buckets: Western North America (United States).
- End user data
- Yes
- Transfer safeguard
- EU-US Data Privacy Framework certification and Standard Contractual Clauses in the Cloudflare DPA.
Anthropic
- Purpose
- Claude models that write AI replies when the AI agent is on, and power the knowledge autopilot, spam filter, translation and review reply drafts.
- Data
- Conversation text and photos sent to the AI, the knowledge docs and app context needed for the reply.
- Location
- United States
- End user data
- Yes
- Transfer safeguard
- Standard Contractual Clauses in the Anthropic commercial terms and DPA. Under those terms Anthropic does not train models on API data.
Resend
- Purpose
- Sending transactional email: sign in codes and links, team invites, new message notifications and digests to your staff, and (only if you turn them on) renewal heads up emails to your end users.
- Data
- Recipient email address, name, email content, delivery metadata.
- Location
- United States
- End user data
- Yes
- Transfer safeguard
- Standard Contractual Clauses in the Resend DPA.
PostHog
- Purpose
- Product analytics for the Concierge dashboard: which features our customers use. Never used in the SDK or for your end users.
- Data
- Staff user id, pages and feature events in the dashboard, browser and device type. No email, no names, no message content.
- Location
- European Union (Frankfurt) or United States, depending on the project region
- End user data
- No
- Transfer safeguard
- Standard Contractual Clauses in the PostHog DPA.
Stripe
- Purpose
- Subscription billing, payment processing, invoices and tax for the Concierge subscription. Never sees your end users.
- Data
- Billing contact, company details, payment method (held by Stripe, we never see full card numbers), invoices.
- Location
- United States and Ireland (Stripe Payments Europe for EEA customers)
- End user data
- No
- Transfer safeguard
- EU-US Data Privacy Framework certification and Standard Contractual Clauses in the Stripe DPA.
If Concierge is ever involved in a merger, acquisition or sale of assets, personal data may transfer to the new owner, who will be bound by this policy. We will tell you before that happens.
International transfers
Section titled “International transfers”Our primary servers and database are in Canada, which the European Commission recognizes as providing adequate protection. Photo attachments and encrypted database backups are stored in Cloudflare R2 in North America (United States), and some subprocessors (Cloudflare, Anthropic, Resend, Stripe) are based in the United States. For transfers from the EEA, the UK and Switzerland we rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses (with the UK addendum and Swiss amendments).
How long we keep data
Section titled “How long we keep data”| Data | Kept for |
|---|---|
| Account and workspace data | While your account exists. Deleting your account or organization in the dashboard deletes it right away. If we close your account, we delete it within 30 days. |
| Billing records and invoices | As long as tax and accounting law requires. These stay with Stripe and in our accounting records. |
| Session records | Deleted when you sign out or delete your account. An expired session can no longer be used. |
| Error reports (GlitchTip) | 30 days |
| Encrypted database backups | Deleted data rolls out of backups within 30 days |
Your rights
Section titled “Your rights”Depending on where you live you have the right to access your data, get a copy in a portable format, correct it, delete it, restrict or object to processing, and withdraw consent. You also have the right to complain to your data protection authority.
- Export: in the dashboard, Team page, Export my data downloads everything tied to your account as JSON.
- Delete: in the dashboard, Team page, Delete my account. An organization owner can delete the whole organization, including all apps, conversations and attachments, from the same page (Delete organization). If you are the only owner of an organization, delete it or hand ownership to someone else first.
- Anything else: email privacy@conciergesdk.com. We answer within one month (GDPR) or 45 days (CCPA), and may need to verify your identity first. You can use an authorized agent; we will ask for proof of their authority.
California and other US states
Section titled “California and other US states”Under the CCPA (as amended by the CPRA) and similar laws in other states, you have the rights to know, access, correct and delete your personal information, and to opt out of its sale or sharing. We do not sell personal information and do not share it for cross context behavioral advertising, and we have not done so in the past 12 months. We do not use sensitive personal information to infer characteristics about you. We will not discriminate against you for using your rights. The categories we collect are the ones in the tables above: identifiers, commercial information (subscription and billing), internet activity (sessions, usage logs), and professional information (organization and role). We collect them from the sources listed and use them for the purposes listed.
Children
Section titled “Children”Concierge is a business service for app developers. It is not directed to children and we do not knowingly collect personal data from anyone under 16 for our own account data. If you believe a child has given us personal data, email privacy@conciergesdk.com and we will delete it.
Security
Section titled “Security”We encrypt data in transit (TLS) everywhere, run our server with no public inbound ports behind a Cloudflare tunnel, encrypt backups and stored push credentials, scope every query to its organization, and limit staff access. The DPA’s security annex describes the measures in detail. Report a vulnerability to security@conciergesdk.com.
Changes to this policy
Section titled “Changes to this policy”We will post any change on this page and update the date at the top. If a change is material, we will also email account owners at least 30 days before it takes effect.
Contact
Section titled “Contact”Concierge is operated by Pixel Port LLC, a Florida limited liability company, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, United States. Pixel Port LLC is the controller of the personal data described in this policy. Email: privacy@conciergesdk.com.