top of page
CONCLUDO-logo

Concludo Privacy Policy

Last updated: 14 October 2026

Entity: Concludo Pty Ltd (ACN 701 605 898, ABN 61 701 605 898)

Address: Suite 329, Level 3, 98 to 100 Elizabeth Street, Melbourne VIC 3000

Contact: hello@concludo.au

Canonical URL: https://www.concludo.au/privacy-policy

Who we are

Concludo Pty Ltd is an Australian proprietary company based in Melbourne, Victoria. In this policy, Concludo, we, and us refer to Concludo Pty Ltd. You can contact our privacy officer anytime at hello@concludo.au.

What this policy covers

This policy covers the Concludo marketing website (https://www.concludo.au), the Concludo Workspace web application (https://app.concludo.com.au), and all related services, tools, and products provided by Concludo Pty Ltd.

The Concludo Workspace is our software platform for turning meeting transcripts and communications into finished documents, executive intelligence, and structured execution workflows. This policy explains what information we collect, how customer transcripts and mailbox communications are handled, third-party service disclosures, and how you can exercise your rights under the *Privacy Act 1988* (Cth) and Australian Privacy Principles (APPs).

The short version

We collect as little information as we can. We tell you why before we collect it. We do not sell your personal information to anyone, ever. We never train public AI models on your private data. You can inspect what we hold, request corrections, or delete your data at any time.

1. What we collect, and why

  • Email address: Collected when you register for an account, subscribe to the Workspace, or submit a contact enquiry. Used to authenticate your session, deliver notifications, and provide customer support.

  • Account credentials: Encrypted credentials managed securely via Supabase Authentication. Used solely to authenticate your workspace sessions.

  • Billing and payment details: Processed directly by our payment processor, Stripe. Concludo never stores or receives your credit card numbers on our servers.

  • Technical telemetry: IP address, browser user-agent, and timestamp logs collected strictly for security, fraud prevention, rate-limiting, and error diagnosis.

2. Meeting transcripts and document processing

When you upload or paste conversation transcripts into the Concludo Workspace:

  1. Customer ownership: You retain complete ownership of all uploaded transcripts and generated documents. Transcripts are processed solely to produce the outputs you request.

  2. No individual tracking or scoring: Concludo enforces a strict ethical constraint: *“Measure work, never people.”* We do not calculate, store, or display individual productivity rankings, contribution scores, talk times, or surveillance metrics.

  3. No advertising or data sales: We never sell transcript data or use your content for targeted advertising.

  4. Zero AI model training: Your proprietary transcript text is never used to train or fine-tune public foundation models. Model interactions run under zero-retention provider terms.

  5. Export and deletion: You can export your data or delete transcripts and projects at any time through the workspace interface.

3. Connected mailboxes and email intelligence (Inbox Command Centre)

When you choose to connect an email account (Google Workspace / Gmail or Microsoft 365 / Outlook) to Concludo's Inbox Command Centre:

  1. Explicit authorization: Access is granted solely through user-directed OAuth consent with Google or Microsoft. You select which account to connect and authorize specific permissions (gmail.readonly, Mail.Read, and optional sending scopes gmail.send, Mail.Send).

  2. Purpose limitation: Connected mailbox access is used strictly to display inbox triage, prioritize urgent threads, extract commitments and deadlines, and draft reply suggestions for your review.

  3. Human-in-the-loop dispatch: Concludo adheres strictly to the axiom *“Concludo proposes; a person disposes.”* Concludo never sends emails autonomously. Every outbound email requires explicit human confirmation in the Approval Centre before transmission.

  4. Data isolation and encryption: OAuth access and refresh tokens are encrypted at rest using AES-256-GCM. Tokens remain server-side and are never exposed to client browsers or third parties.

  5. Disconnection and revocation: You can disconnect your mailbox at any time in Settings > Integrations. Disconnecting immediately revokes token authorization at the provider and purges local cached synchronization data.

4. Third-party service providers

We use trusted third-party service providers to host infrastructure, authenticate users, and process payments. Each provider receives only the minimum data required to perform its function:

  • Supabase: Database hosting, row-level security (RLS), encrypted credential storage, and Edge Functions.

  • Stripe: Secure payment processing and subscription billing.

  • GitHub Pages: Static hosting and delivery of compiled application bundles (app.concludo.com.au).

  • Google Cloud & Microsoft Entra: OAuth authentication and mailbox API access for user-connected accounts.

  • Wix: Marketing website hosting and public enquiry forms (www.concludo.au).

5. Data retention and deletion

  • Workspace project data: Retained while your account is active, or until deleted by you.

  • Email analysis records: Retained only within your configured retention window (default 30 to 90 days). Purged automatically or upon disconnecting the mailbox.

  • Tax and accounting records: Retained for 5 years as required by Australian taxation law.

  • Account closure: Upon account deletion, all active project data, transcripts, and integration tokens are permanently removed from our active database.

6. Keeping your information safe

All data transmitted between your browser, our servers, and third-party APIs is encrypted using modern TLS (HTTPS). Sensitive tokens are encrypted at rest using AES-256-GCM authenticated encryption. Access by Concludo personnel is strictly restricted on a least-privilege need-to-know basis.

7. Your rights under Australian privacy law

Under the Australian Privacy Principles, you have the right to:

  • Access personal information we hold about you.

  • Request correction of inaccurate or out-of-date information.

  • Request deletion of your personal information.

  • Opt out of any non-essential communications at any time.

To make a request, email hello@concludo.au. We will acknowledge your request within 5 business days and respond within 30 days.

8. Complaints

If you believe we have breached the Australian Privacy Principles, please email hello@concludo.au with "Privacy complaint" in the subject line. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at [oaic.gov.au](https://www.oaic.gov.au) or by calling 1300 363 992.

9. Changes to this policy

We may update this Privacy Policy from time to time. When changes are made, the "Last updated" date at the top of this document will be revised. Material changes will be highlighted in the application and on our website.

*Concludo Pty Ltd · ACN 701 605 898 · Melbourne, Victoria, Australia*

Concludo Pty Ltd · ACN 701 605 898 · ABN 61 701 605 898 · Melbourne, Australia

bottom of page