Dossier — Privacy Policy

Last updated: August 20, 2026

Applies to the Dossier iOS app (App Store: “Dossier: Contact Intelligence”), published by The Parker Group Consulting Company, LLC (“The Parker Group,” “we,” “us,” or “our”).

1. Information we collect — and don’t

Dossier does not require an account, a login, or a profile. We do not ask for your name, email address, or phone number to use the app.

Data that stays on your device:

• Business-card images you capture and the contact details extracted from them.
• AI research briefs and draft follow-up emails generated for your contacts.
• Your app settings and preferences.

Data that reaches our servers or service providers (only in the situations described in the sections below):

• When you use a managed AI feature: the card image and the contact details you submit, processed in transit and relayed to our AI provider (see §3).
• An anonymous billing identifier, usage counters, and entitlement status used to enforce plan limits (see §4).
• Operational cost-log metadata for each AI request — timestamp, operation type, AI model, and cost — which contains no card images and no contact information (see §4).

What we do not collect: we do not collect your name or contact details as a user, we do not build advertising profiles, we do not use analytics or tracking SDKs, and we do not sell or rent your personal information.

2. Contacts you capture (on-device)

The contacts you scan and file with Dossier are stored in the app’s local storage on your device. They are not uploaded to or stored on our servers. They remain on your device until you delete them in the app or delete (uninstall) the app. If you have enabled iCloud device backups, your device backup may include app data under Apple’s terms; that backup is controlled by you and Apple, not by us.

3. How AI features process your data

AI features are used only when you choose to run them. Dossier offers three tiers, and where your data goes depends on the tier:

Core (free) and Pro · Managed

When you run a managed AI action (AI card extraction, a research brief, or a drafted follow-up email), the app sends the card image and the contact details you entered to Dossier’s backend — a serverless proxy hosted on Vercel. The backend relays the request to our AI provider, Anthropic, and returns the result to your device. Our backend processes the request in transit only and does not persist the card image or contact content.

Pro · Your Key

If you have purchased Pro · Your Key and configured your own AI provider key, managed AI requests are sent directly from your device to your own AI provider. In that mode the card image and contact details do not pass through Dossier’s backend, and your use is governed by your provider’s terms and privacy policy.

Research uses web search

The optional research feature queries the open web (web search) about the contact in order to build a research brief. This means the contact’s name and similar identifying details may be included in a search query to public sources. Use the research feature only when that is appropriate for the contact.

4. What our backend stores

The only user-linked data our backend stores is what we need to enforce your plan and understand cost:

• An anonymous RevenueCat app user id tied to your app installation. It is not your name or email; it identifies the install for billing and limit purposes.
• Usage counters and entitlement status — e.g., how many managed AI operations you have used against your plan’s limits, and which entitlements you hold.
• A cost log of operation metadata — timestamp, operation type, AI model, and cost per request.

The cost log and usage records contain no card images and no contact PII. We use this data solely to enforce plan limits (including per-billing-period caps for Pro · Managed), prevent abuse, and manage our own costs.

5. Service providers & subprocessors

We rely on the following providers to operate Dossier. Each processes data only as needed to provide its service, under its own terms:

On the Pro · Your Key tier, your own AI provider is an additional processor that you select and contract with directly.

6. Optional integrations you control

Dossier can send a contact’s details to other apps and services, but only when you choose to sync. These integrations are user-initiated; nothing is sent to them automatically or in the background without your action:

• Apple Contacts — to import or export a contact on your device.
• HubSpot, Pipedrive, and Monday.com — to file a contact into your CRM when you connect one and choose to sync.
• Calendar and Reminders — to create follow-up events or reminders on your device.

When you sync to one of these services, the contact data you send is handled under that service’s own terms and privacy policy. You control which integrations you connect and when you use them.

7. Your own AI provider key

If you add your own AI provider key (Pro · Your Key), that key is stored in your device’s secure Keychain. It is never sent to, or stored on, Dossier’s servers. It is used on-device to authenticate requests you send directly to your own AI provider.

8. Device permissions

Dossier requests the following iOS permissions, each used only for the stated purpose and only after you grant it:

• Camera and Photo Library — to capture or select a business card image.
• Contacts — to import a contact into Dossier or export a filed contact to Apple Contacts.
• Calendar and Reminders — to create follow-up events or reminders.

You can review or revoke these permissions at any time in the iOS Settings app.

9. Purchases & billing identity

Dossier is a free download with optional in-app purchases handled by Apple through StoreKit, with entitlements managed by RevenueCat. Your identity for billing and plan limits is an anonymous RevenueCat app user id tied to your installation — not a name, email, or account. Dossier never sees or stores your payment card details; those are handled entirely by Apple.

10. No analytics or advertising

Dossier uses no third-party analytics SDKs and no advertising SDKs. We do not track you across apps or websites, and we do not use your data for advertising.

11. Data retention

• On your device: contacts, briefs, and drafts persist until you delete them in the app or uninstall the app.
• AI request content: not persisted by our backend. Our AI provider retains inputs and outputs only briefly for trust & safety, per its terms.
• Backend records: the anonymous app user id, usage counters, entitlement status, and cost-log metadata are retained as needed to enforce plan limits, support your purchases, and manage costs.

12. Security

AI requests are transmitted over encrypted connections (HTTPS/TLS). Your AI provider key, if any, is stored in the device Keychain. We use commercially reasonable safeguards to protect the limited data our backend stores. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Your rights & choices

Because Dossier does not maintain user accounts and stores your contacts on your device, you are in direct control of your data:

• Access: your captured contacts, briefs, and drafts are viewable in the app on your device.
• Deletion: delete individual items in the app, or delete (uninstall) the app to remove Dossier’s local data from your device. Deleting the app removes the on-device data; data you previously synced to Apple Contacts, a CRM, Calendar, or Reminders is controlled through those services.
• Permissions: grant or revoke Camera, Photos, Contacts, and Calendar/Reminders access in iOS Settings at any time.
• Managed backend records: to request deletion of backend records associated with your anonymous app user id, contact us at support@parkergroup.us. Note that deleting entitlement records may affect your access to features you have purchased.

14. Children’s privacy

Dossier is a business networking tool intended for professionals. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information through the app, contact us and we will address it.

15. California (CCPA/CPRA) & EEA/UK (GDPR)

California residents. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. You have rights to know, access, and delete personal information; because we hold only an anonymous app user id plus usage and cost metadata, and your contacts live on your device, our ability to identify you from backend records is limited. You may exercise applicable rights by contacting us.

EEA/UK residents. Where the GDPR or UK GDPR applies, our legal bases for processing are: performance of our agreement with you (providing the AI features and enforcing plan limits), and our legitimate interests (preventing abuse and managing costs). You have rights of access, rectification, erasure, restriction, objection, and portability, and the right to lodge a complaint with your supervisory authority. Contact us to exercise these rights.

16. International data transfers

Our service providers, including Anthropic, Apple, RevenueCat, Vercel, and Upstash, may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards under applicable law.

17. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be reflected here, and your continued use of Dossier after an update constitutes acceptance of the revised policy.

18. Contact us

Questions about this Privacy Policy or your data can be directed to: