It reads with a key you can revoke any minute, in your own Google or Microsoft account. It keeps the brief, not your mail. It only ever drafts, nothing sends without you.
Concierge is run by a real person, and set up for you by one. Anything on this page, or anything at all about your data: email us and a human answers.
You connect Gmail and Calendar with one Google sign-in. That grant lets Concierge do exactly four things, and you can revoke it any time in your Google Account → Security → Third-party access:
Concierge never sends mail to anyone but you, never deletes anything, and never shares mailbox content.
Concierge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
If your email is in Outlook or Microsoft 365 instead, you connect it with one Microsoft sign-in. Concierge reads your recent email, creates drafts in your own Drafts folder, and reads your calendar. It does not ask for permission to send mail at all, so on Outlook it cannot send anything, to you or to anyone else, even by mistake. Your brief is waiting in the app each morning. You can revoke access any time at myapps.microsoft.com or in your account's privacy settings.
One honest difference. Microsoft does not publish a permission that allows creating drafts without also allowing mail to be changed or deleted. The narrowest permission that lets Concierge draft at all is called Mail.ReadWrite, so the consent screen you see will say Concierge can read, write and delete your mail. It is wider than we would choose. Concierge does not delete or alter your mail, and it holds no permission to send from your account at all. We would rather tell you that plainly than let the consent screen surprise you.
Booking, if you switch it on, is the same story: Microsoft has no permission limited to calendars you own, so the one Concierge asks for also covers calendars shared with you. That is exactly why booking is off until you turn it on.
Email that comes with your domain, from Titan, Blacknight, Register365, GoDaddy and the like, has no one-click sign-in. Concierge connects to it the same way your phone or Outlook does, over IMAP, and does two things: reads your recent email to build your brief, and writes replies into your Drafts folder.
Being straight about the difference. Google and Microsoft hand us a key you can cancel in one click, and we never see a password. Your web host has no such thing, so this option stores a password instead, encrypted with a key kept off the disk it lives on. That is genuinely less good, and it is why we ask you to use an app password where your provider offers one: it opens your mail and nothing else, and you can cancel it on its own without changing your real password.
Concierge connects for reading and drafting only. It is never given the ability to send from these accounts, so it cannot email you or anyone else from them, even by mistake. Disconnect at any time and the password is deleted.
We do not keep a copy of your mailbox. Your email is read when a brief or a reply is being prepared, used, and let go.
What is stored: your briefs, your drafts, your chat with Concierge, your settings and firm knowledge, and your mailbox connection details (encrypted): a token for Google and Microsoft, a password for email from a web host. If you switch on the WhatsApp option (early access), recent WhatsApp messages are kept on our server to build your brief.
Your mailbox is never copied, so there is nothing of it to keep. What Concierge does keep, it keeps to a stated limit and then deletes automatically:
This runs on its own once a day. You do not have to ask, and you can delete everything sooner from Settings, which takes effect immediately.
The full list, with what each one does and where it runs, is on the sub-processors page. In short:
The disk your data lives on is encrypted at rest. Your Google and Microsoft tokens are additionally encrypted with a key held outside that disk. Everything travels over TLS.
Settings has a Delete my account button. It removes everything at once: your briefs, your drafts, your chat, your settings and every mailbox connection. It is immediate and it cannot be undone. Replies already sitting in your own Drafts folder stay there, because they are yours, not ours.
You can also cut Concierge's access yourself at any moment from your Google or Microsoft account permissions, or by changing the password on a mailbox you connected directly. The key is yours, not ours.
Prefer a person to do it? Email us and we will, but you do not have to wait for us.