Privacy Policy

Our privacy policy and how we use your data

Last updated 5 August 2026

Concierge is operated by Unicity Labs. This policy explains what we collect, why, and who processes it on our behalf. It covers this website and the Concierge application.

What we collect

If you contact us. The name, email address and message you submit through the contact form. We use these only to reply to you.

If you have an account. Your email address, name and profile picture, provided by your sign-in method (Google, or email and password). We do not receive or store your Google password.

If your organisation uses Concierge. The customer records your organisation loads or connects, and records of what the agent did — messages sent, calls placed, escalations raised. Where voice is enabled this includes call audio and transcripts.

We do not use analytics or advertising trackers on this website.

Where it is processed

We use the following processors. Data is stored in the European Union except where stated.

ProcessorPurposeRegion
SupabaseDatabase, authenticationIreland (EU)
VercelWebsite and application hostingGlobal edge, US company
ResendTransactional emailUS
AnthropicThe agent's language modelUS
VAPITelephony for voice callsUS
HamsaArabic speech recognition and synthesisJordan
HubSpotCRM, where a customer connects onePer the customer's own HubSpot account

Voice calls are currently processed in the United States. If you operate in a jurisdiction with data-residency requirements, speak to us before enabling voice — a regional deployment is available on request.

Automated decisions and AI

Concierge uses AI agents to communicate with customers. Where an agent places or answers a phone call it identifies itself as an AI at the start of the call. Agents do not make decisions that produce legal or similarly significant effects without a human in the loop; where a conversation needs a person, it is escalated to one.

Agent actions are logged, including where a governance rule prevented an action.

How long we keep it

  • Contact form messages: 24 months.
  • Account data: for as long as the account exists, then 30 days.
  • Customer records and agent activity: for as long as the organisation's account exists, or until they delete them.
  • Call recordings and transcripts: 90 days by default. An organisation can request a shorter period.

Your rights

If you are in the UK or EU you have the right to access, correct, delete or export your personal data, to object to processing, and to complain to your data protection authority.

If your data is held by an organisation using Concierge, they are the data controller and we process it on their behalf — contact them first, and we will support them in responding.

Contact

Write to hello@unicity-labs.com for any privacy question, or to exercise any of the rights above.