Privacy Policy

What we collect

Account. Your email address (to send sign-in links), your name, the professional profile link you give us, your city (you pick it from a map search; we store the city and its approximate coordinates, never your exact location) and your time zone. If you create a passkey, your device keeps the private key; we store only the public key.

Profile research, with your consent. When you join, you agree that Conclave may build a short professional profile from public sources: your public professional profile and recent public posts, the public pages of companies you’ve worked for, and public web, news and video results about you. We drop people-search and data-broker sites on arrival. Each fact cites its source; you can confirm, correct or hide any fact, and delete the whole profile at any time (Settings → Dossier).

What you share in groups. Posts and replies on group boards, events and RSVPs, the contact details you choose to show (phone, email, website, assistant), connections and introductions, and reports you file.

Messages. Direct messages, small group chats and introduction threads are end-to-end encrypted: they are encrypted on your device with keys only the people in the conversation hold. Our servers store and relay them but cannot read them, and neither can group admins or our AI. Group chats, topics and event rooms are stored on our servers so new members can read the history; they are visible to that group’s members and are never read by our AI or used for matching. Photos, files and voice notes you send are stored the same way as the conversation they belong to.

Places (optional). If you turn on place sharing, the restaurants, clubs and venues you save, shared only with groups you choose and only shown when two members have a place in common. On iPhone, optional place suggestions use your visits on the device; nothing leaves your phone until you approve a place.

Devices and notifications. A push notification token per device, the app version, your notification and privacy settings, and device public keys for encryption. Sign-in sessions and basic request logs (IP address, time, page) for security and to fix problems; logs are kept for a short period.

What we don’t collect. No advertising identifiers, no third-party analytics or tracking, no contacts upload (saving a member to your Contacts happens on your device), and no calendar access beyond adding an event you choose.

How we use it

• To run your account and the groups you belong to: sign-in, directory, chat, board, events and notifications.
• To suggest introductions between members of the same group. Group admins review every suggestion before anyone is introduced; you can opt out per group.
• To answer your questions in the Concierge, using your profile and the group’s shared information (never encrypted messages).
• To keep Conclave safe: preventing abuse, handling reports, and securing accounts.
• To send the emails you’d expect: sign-in links and, unless you turn them off, important group updates. Every notification email has a one-click unsubscribe.

Who can see your information

• Members of your groups see your profile, the contact details you chose to show, and what you post in that group. A group’s admins decide whether members can browse the directory.
• Group owners and admins additionally see join requests, suggested introductions and reports in their group. They cannot read encrypted messages.
• Service providers who process data for us under contract, only to provide Conclave: Cloudflare (hosting, storage, real-time messaging, email routing, and some AI processing), Neon (database), Resend (email delivery), Apple (push notifications), OpenRouter and the model providers it routes to, with data retention and training turned off (AI processing for research, matching and the Concierge), Mem0 (Concierge memory), apiserpent (public web search for profile research) and Photon / OpenStreetMap (city search).
• We may disclose information if the law requires it, to protect people’s safety, or as part of a merger or acquisition, in which case this policy continues to apply.

Your choices and rights

• See, correct or hide anything in your profile, and delete your researched profile, in Settings → Dossier.
• Choose which contact details each group sees, appear offline, turn off read receipts, and turn off notification emails, in Settings.
• Leave any group, or delete your account in Settings → Account. Deletion removes your profile, memberships, posts, device keys and research immediately.
• Ask for a copy of your data, or exercise any other right you have under the law where you live (including the GDPR and California law), by emailing support@joinconclave.app. We answer within 30 days.

How long we keep it

We keep your information while your account is open. When you delete your account or your researched profile, we delete it from our systems right away; copies in encrypted database backups expire within 30 days. Messages you set to disappear are deleted when their timer runs out.

Security

Data is encrypted in transit and at rest, private conversations are end-to-end encrypted, sign-in uses one-time email links or passkeys (no passwords), and you can sign out of every device at once from Settings if a phone is lost. No system is perfectly secure; if we learn of a breach that affects you, we’ll tell you.

Where data is processed

We are based in the United States and our main database is in the US. Our providers may process data in other countries; where required we rely on standard contractual clauses or equivalent safeguards.

Children

Conclave is for professionals aged 18 and over. We don’t knowingly collect information from anyone under 18.

Changes

If we change this policy in a way that matters, we’ll tell you in the app or by email before it takes effect. The date at the top shows the latest version.

Contact

Lead Magic Corporation, operator of Conclave. Email support@joinconclave.app with any question about your privacy. See also our Terms of Service.