Legal & Privacy
Privacy Policy
01 Overview
Computer Consulting Wizards ("CCW", "we", "our", or "us") operates Dossier, a software-as-a-service tool that guides users through structured client interviews — covering design preferences, brand identity, and tone — and generates markdown files from those interviews to prime AI-assisted ("vibe") coding sessions.
This Privacy Policy explains what personal information we collect when you use Dossier, how we use it, with whom we share it, and what choices you have. By using Dossier you agree to the practices described here. Your use of Dossier is also governed by our Terms of Service.
We do not sell your personal information to third parties, and we never will.
02 Data we collect
We collect only what is necessary to provide and improve Dossier.
| Category | What this includes | Source |
|---|---|---|
| Account information | Name, email address, and password (stored as a secure hash) | You, at sign-up |
| Interview content | Your responses to design, brand, and tone interview questions; the markdown files generated from them | You, during use |
| Payment information | Billing name, payment card details (tokenised — we never see raw card numbers), and transaction history | You, via Stripe |
| Usage & analytics data | Pages visited, features used, session duration, browser type, device type, and approximate location derived from IP address | Automatically collected |
| Communications | Emails or support messages you send us | You, directly |
We do not intentionally collect sensitive personal data (such as health, financial account numbers, or government ID numbers). Please do not include such information in interview responses or support messages.
03 How we use your data
We use the data we collect for the following purposes:
- Providing the service — operating your account, processing interviews, and generating your markdown files.
- Improving Dossier — analysing aggregated, de-identified usage patterns to understand how features are used and where we can make improvements.
- Billing & payments — processing subscriptions and managing billing history through our payment processor.
- Communications — sending transactional emails (account confirmations, password resets, billing receipts) and, where you have opted in, product updates.
- Security & fraud prevention — detecting and protecting against abuse, unauthorised access, or other harmful activity.
- Legal compliance — meeting obligations under applicable law.
We do not use your interview content to train AI models without your explicit, informed consent. Your Dossier account information (name, email, billing details) is never transmitted to AI API providers — only interview responses are. Those responses may include personal information about your clients, such as their name, phone number, email address, or postal address, which you should inform your clients about as appropriate.
04 Third-party services
We share data with a small number of carefully chosen service providers who help us operate Dossier. These providers are contractually bound to use your data only to deliver their services to us.
| Provider type | Purpose | Data shared |
|---|---|---|
| Payment processor (Stripe) | Billing & subscription management | Billing name, payment details (tokenised), transaction amounts |
| AI API providers (Anthropic, OpenAI) | Processing interview responses to generate markdown output | Only the responses entered during an interview session — which may include your client's name, phone number, email address, and postal address. Your Dossier account information is never shared with AI providers. See Anthropic's Privacy Policy and OpenAI's Privacy Policy for their data practices. |
| Analytics provider | Understanding product usage and improving the experience | Anonymised usage events, device/browser metadata, approximate location |
| Email provider | Sending transactional and product emails | Your email address and the content of emails we send you |
We do not share your data with advertisers or data brokers. We may disclose data if required by law or to protect the rights, property, or safety of CCW, our users, or the public.
06 Data retention
We keep your personal data only as long as necessary:
- Active accounts — your account data, interview content, and generated files are retained for as long as your account is active.
- Account closure — when you close your account, your personal data will be permanently deleted within 90 days, except where we are required to retain it for legal or tax purposes (typically up to 7 years for billing records).
- Deletion requests — you may request deletion of your data at any time (see Section 7). We will action valid requests within 30 days.
- Backups — copies in encrypted backups may persist for up to 30 days after deletion.
07 Your rights
Depending on where you are located, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Deletion — ask us to delete your personal data ("right to be forgotten").
- Portability — receive your data in a structured, machine-readable format.
- Restriction — ask us to restrict how we process your data in certain circumstances.
- Objection — object to processing based on our legitimate interests.
- Withdraw consent — where processing is based on your consent, withdraw it at any time.
Users in the European Union and United Kingdom have these rights under GDPR / UK GDPR. Users in California have rights under the CCPA/CPRA, including the right to know, delete, and opt out of sale (we do not sell data). Other jurisdictions may provide similar rights under local law.
To exercise any of these rights, please visit the Support page within the Dossier app. We will respond within 30 days.
08 International data transfers
Dossier serves users globally. Your data may be processed in countries other than where you reside, including the United States. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
By using Dossier, you acknowledge that your data may be transferred to and processed in these jurisdictions.
09 Security
We take the security of your data seriously and implement technical and organisational measures to protect it, including:
- Encryption in transit (TLS) and at rest for stored data.
- Tokenisation of payment data through Stripe — we never store raw card numbers.
- Access controls that limit who within our team can access personal data.
- Regular review of our security practices.
No system is perfectly secure. If you believe your account has been compromised, please contact us immediately via the Support page in the app.
10 Children
Dossier is not directed at children under the age of 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11 Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice within the app before the change takes effect. The "last updated" date at the top of this page will always reflect the most recent revision.
Your continued use of Dossier after any changes constitutes your acceptance of the updated policy.
12 Contact us
If you have questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please reach out through the Support page within the Dossier app. We aim to respond to all privacy enquiries within 30 days.