Privacy Policy — Concier (tryconcier.com)

1. Overview

Concier ("we", "our", or "us") operates an AI-powered sales agent embedded on third-party websites via a script tag. This Privacy Policy explains how we collect, use, store, and share your information when you interact with Concier — whether through tryconcier.com directly or through any website where the Concier widget is deployed.

By using our service, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Email address — when you create an account, sign in (including with Google if you choose that option), or submit forms on tryconcier.com
• Name and business details — optionally provided during onboarding or in conversations
• Messages and chat content — everything you type into a Concier widget, which is processed to generate AI responses

2.2 Information Collected Automatically

• Usage data — pages visited, features used, session duration, click patterns, and interaction frequency
• Device and browser info — browser type, OS, screen resolution, and IP address
• Referrer URLs — the page or source that brought you to tryconcier.com
• Widget interaction events — when and how visitors interact with the Concier widget on embedded sites (hover, open, trigger events)

2.3 Information from Third-Party Integrations

• Payment data — billing details, payment-method metadata, and transaction history processed by Razorpay (we do not store full card numbers, full UPI IDs, or complete payment credentials on our servers)
• Product and site analytics — usage of the Concier dashboard and tryconcier.com (and, when enabled, tools such as Google Analytics); and aggregated signals from how visitors interact with embedded widgets

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the service — process conversations, generate AI responses, and deliver the Concier widget experience
• Manage your account — authenticate login, manage subscriptions, and track monthly session usage against your plan (as shown in your billing dashboard)
• Process payments — charge your subscription via Razorpay and send billing receipts
• Improve the product — analyze usage patterns, identify bugs, and build new features
• Send transactional emails — account confirmations, billing receipts, usage alerts, and important service updates
• Send product updates — occasional emails about new features or changes (you can opt out at any time)
• Ensure security — detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations — respond to lawful requests from authorities where required

We do not use your data to train our own AI models without explicit consent, and we do not sell your personal information to any third party. Processing through OpenAI is subject to OpenAI's terms and policies for API customers.

4. Third-Party Services We Use

We share data with the following trusted third-party processors to operate our service:

Each third-party provider has their own privacy policy. We recommend reviewing them if you have concerns about downstream data handling. We only share the minimum data necessary for each provider to perform their function.

5. Data from Embedded Websites

When Concier is deployed on a third-party website by one of our customers (a "client site"), end-user data collected through the widget is processed on behalf of that website operator. In this context:

• We act as a data processor; the website operator is the data controller
• Conversations, triggered messages, and session metadata are stored and attributed to the client's Concier account
• End users of client sites should refer to that website's own privacy policy for data rights
• We do not independently use end-user data from client sites for any purpose beyond providing the Concier service

6. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in to your Concier dashboard (including Supabase auth session cookies)
• Remember your preferences and settings
• Track usage on tryconcier.com and the app (including Google Analytics or similar tools when we enable them)
• Attribute referral sources for marketing purposes

The Concier widget embedded on third-party sites may set a session cookie to maintain conversation state within a single visit. No persistent tracking cookies are placed by the widget across sessions by default.

You can disable cookies in your browser settings, though this may affect functionality of the Concier dashboard.

7. Data Storage and Security

• Application data is stored in Supabase (e.g. accounts, sessions, conversations); knowledge embeddings for RAG are stored in Cloudflare Vectorize; runtime traffic is handled on Cloudflare Workers — with encryption in transit (TLS) and protections offered by those providers at rest
• Access to production data is restricted to authorized personnel only
• Payment data is handled entirely by Razorpay and is never stored on our servers
• We retain conversation logs for as long as your account is active, plus 90 days after account deletion
• Usage analytics may be retained in anonymized form indefinitely for product improvement

While we take security seriously and follow industry best practices, no system is 100% immune to breaches. We will notify affected users promptly in the event of a data incident.

8. Data Retention

You may request earlier deletion of your data at any time (see Section 10).

9. Children's Privacy

Concier is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your account and associated data
• Portability — receive your data in a structured, machine-readable format
• Opt-out of marketing — unsubscribe from non-essential emails at any time via the link in any email
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email us at hello@tryconcier.com. We will respond within 30 days.

GDPR / CCPA: If you are located in the EU or California, you have additional rights under applicable law. We honor all such requests and do not discriminate against users who exercise their privacy rights.

11. International Data Transfers

Concier is operated from India. Data may be processed and stored on servers located in the United States and other jurisdictions via our infrastructure providers (Cloudflare, Supabase). By using our service, you consent to the transfer of your information to these locations, which may have different data protection laws than your country of residence.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this page. For material changes, we will notify users via email or a prominent notice in the dashboard. Continued use of Concier after any change constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, contact us at:

ConcierEmail: hello@tryconcier.com
Website: tryconcier.com