Privacy and security
What we know about you is protected like it matters. Because it does.
A concierge learns where you live, where you travel, what you buy and who you are with. Obsidian Concierge is built by the team behind Obsidian OS, and treats that knowledge with the same seriousness. These are not promises; they are how the system is built.
Your information
Kept close, kept little, and then gone.
Just a username
Joining takes a username and a password. No email, no name, no phone number. If you forget your password, the recovery code you were given gets you back in.
No logs of your visits
Our servers do not record internet addresses or browser details, for visitors or for members. Not when you browse, not when you sign in, not when you make a request.
Erased when it is done
Thirty days after a request is completed or cancelled, it is erased: what you asked for, every message and file, the places and the quotes. Notifications go after thirty days too.
Paid in Monero
Top ups arrive in Monero, to a new address every time, so your payments cannot be linked to each other. There are no cards and no banks, and no receipts are sent.
Only what the law requires for money
The amount and date of each top up and each charge, and nothing about what was bought. That is the one record we must keep.
Encrypted before it is stored
Addresses, request locations, saved places, your preferences and the secrets behind your sign in are encrypted with AES-256 before they reach the database. A copy of the database alone does not reveal them.
Notifications that say nothing
Anything that could appear on a lock screen says only that there is an update. We hold no email address for members, so nothing about you ever sits in an inbox.
No tracking, anywhere
No analytics, advertising, social media pixels or third party scripts, on this site or in the app. Fonts and images are served from our own servers, so visiting tells nobody else anything.
Files handled with suspicion
Attachments are checked by what they actually contain, not what they are called, limited to photographs and PDFs, and only ever handed back as downloads.
Your phone, kept apart
Members receive a Pixel 10 running Obsidian OS, but the concierge runs on its own separate systems, apart from the phone's software and its messaging. Using one never weakens the other.
Your account
Hard to get into, for anyone but you.
Passkeys and two step sign in
Sign in with a passkey on your phone or computer, or add an authenticator app as a second step. Passwords are stored only as Argon2id hashes, the current recommended standard.
Guarded against guessing
Repeated wrong passwords rest the account for a while, and the sign in page gives the same answer whether or not an address belongs to a member.
Told about every change
A new passkey, a changed password or two step sign in turned off: you receive a notice each time, so nothing changes without you knowing.
Sessions that end
Sessions expire on their own, and changing your password signs out every other device at once.
Our team
Access by need, and nothing more.
Only those who need to
Each member of staff sees what their role requires and nothing more. A concierge sees the members and requests they look after. Finance sees balances, not what was bought.
Every staff account has two factors
No member of staff can reach anything at all until they have proved it is them with a passkey or an authenticator code.
Who looked, never what they saw
When our team opens a member's account or changes a request, the system notes who and when, with no content, no internet address and no browser. Nobody on the team can look without it being known, and the note itself is erased after thirty days.
Internal notes stay internal
What our team writes to each other is kept in a separate place that nothing a member can reach ever reads from.
Your rights
Your data, on request.
Members can download a copy of what we hold about them from the app at any time, and can ask for their information to be corrected or deleted. Our privacy notice explains what we collect, why, and for how long.