Privacy Policy
Last updated: 1 August 2026
The short version. Concierge runs entirely on your own computer. We do not have a server that stores your data, and we never receive the résumés or candidate information you process — we could not access them if we wanted to.
Information leaves your device only when you choose to connect an outside service: an AI provider, an email server, or your licence check. Each of those is described below.
1. Who we are
Concierge is a Windows desktop application published by SyphonDigital, a sole trader registered in Australia. In this policy, "we", "us" and "our" mean SyphonDigital; "you" means the person or organisation using Concierge.
Contact: support@syphondigital.online
2. The most important thing to understand
Concierge is local-first software, not a cloud service. When you import résumés, they are read, analysed and stored on your own computer, in a database inside your Windows user profile. There is no SyphonDigital account, no upload step, and no copy of your data on our systems.
You remain responsible for the candidate information you handle. Because that data stays in your possession, you — not SyphonDigital — are the entity accountable for it under privacy law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to you, and equivalent laws in other countries where your candidates are located. We act only as the supplier of the software.
3. What we collect
Data we never receive
- Résumés, CVs and any documents you import
- Candidate names, contact details, employment history, or any extracted information
- Your job campaigns, scores, notes, scorecards, interview records or reports
- Your AI provider API keys or email password
Concierge contains no analytics, no telemetry, no usage tracking, no advertising identifiers and no crash reporting. The application does not "phone home" to report what you do with it.
Data we do receive
Only in these two situations:
- Licence validation. If you buy a subscription, your licence key is checked against our payment provider so we can confirm it is active. This involves your licence key and an identifier for the device activation — not your candidate data.
- If you contact us. If you email support, we receive whatever you choose to put in that email. Please do not send us candidate documents; we do not need them and do not want to hold them.
4. Where your data is stored on your device
Concierge stores everything in your Windows user profile (typically %APPDATA%\concierge), including the database, imported source documents, local backups, logs, and an activity log of actions taken in the app.
- Optional encryption at rest. You can switch on database encryption in Settings. The encryption key is held in the Windows credential store, protected by your Windows account.
- Credentials. Any API keys or your email password are stored in the Windows credential store, not in plain text.
- Backups. Automatic local snapshots are kept on your device only.
Because this data lives on your computer, its security depends on the security of that computer and your Windows account. We recommend full-disk encryption and a strong account password, particularly on a portable machine.
5. When information leaves your device
Only through connections you configure yourself. Nothing below is enabled by default.
| Connection | What is sent | When |
|---|---|---|
| AI provider (Anthropic, OpenAI or Google Gemini) | The résumé text and job details being analysed, sent to the provider you chose using your API key | Only if you enter an API key. Otherwise Concierge uses its built-in offline engine. |
| Local AI (Ollama) | Nothing leaves your machine — it runs on localhost | Only if you enable it |
| Email sending (SMTP) | The message you compose, to the mail server you configure | Only if you set up and enable email |
| Licence check (Lemon Squeezy) | Your licence key and activation identifier | On activation and periodically. Works offline for up to 14 days between checks. |
| Update check (GitHub) | A request for the latest version file. No personal data. | On launch, in the version downloaded from our website. The Microsoft Store version updates through the Store instead. |
Bring your own key. When you use a cloud AI provider you are using your own account with that provider, under their terms and privacy policy — not ours. We never see that traffic. If you would rather no candidate text ever leave your machine, use the built-in offline engine or a local Ollama model, and Concierge remains fully functional.
6. Payments
Subscriptions are handled by Lemon Squeezy, which acts as merchant of record. Your billing details are entered on their systems and are subject to their privacy policy. We never see or store your card details. We receive confirmation that a subscription exists and the licence key associated with it.
7. Your rights over candidate data
Because candidate data sits on your device and not ours, requests from candidates — access, correction or erasure — are yours to fulfil, and you can do so directly in the application. Concierge lets you view everything held about a person, delete an individual candidate, delete an entire campaign, and export records. We cannot action such a request on your behalf, because we hold nothing to action.
For the limited data we do hold (licence and support correspondence), you may ask us for a copy or ask us to delete it by emailing support@syphondigital.online. We may need to keep records of a purchase for as long as tax and accounting law requires.
8. Children
Concierge is a business tool intended for employers and recruiters. It is not directed at children and we do not knowingly collect information from them.
9. Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes affecting how data is handled will be noted in the application's release notes.
10. Contact
Questions about this policy or about privacy in Concierge:
support@syphondigital.online
If you are in Australia and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).