Privacy policy

What we store

• Account: your name, your email address and a salted scrypt hash of your password. The password itself is never stored.
• Sign-in sessions and devices: for each signed-in app, the platform (macOS, iOS), a device name, when it was created and last used, and a SHA-256 hash of its token. Password reset links are stored only as a hash and expire after one hour.
• Workspace content you create: assistants and their instructions, knowledge documents, conversations and messages, the actions assistants proposed and your approvals, workflows and their runs, memories, your dictation dictionary and style choices, meeting notes (transcript text and summaries) and workspace members.
• Keys and connections: model-provider API keys and MCP server headers you add are encrypted (AES-256-GCM) and never shown again, except their last four characters.
• Usage and audit records: counts of model tokens and cloud voice minutes per workspace (to apply plan limits), and a log of administrative actions in each workspace.
• Billing: your plan and the Stripe customer and subscription identifiers. Card details are entered with and held by Stripe; we never receive them.
• Embedded chat widget: if a workspace puts an assistant on its own website, that site's visitors' messages are stored in the workspace with a random visitor identifier, not a name or email.

What stays on your devices

• On the Free plan the Mac app runs models through Ollama and speech recognition and synthesis on your Mac. That audio and text do not reach our servers.
• Voice audio is not stored. Cloud dictation sends a clip for transcription and stores neither the audio nor the transcript, only the minute count.
• The apps keep sign-in tokens in the macOS or iOS Keychain. The web app keeps one session cookie that is needed to stay signed in. We use no advertising or analytics cookies and no tracking across apps or websites.

Who processes it

• DigitalOcean hosts the service and its database, in its Bangalore (India) region.
• The AI provider your workspace chooses (for example Anthropic or an OpenAI-compatible service) receives the messages, instructions and context needed to answer, sent with your workspace's own key and under that provider's terms.
• Our self-hosted speech-to-text server transcribes cloud dictation clips.
• Stripe processes payments for paid plans.
• Our email provider delivers password reset links and human-handoff notifications.
• Services you connect, such as MCP servers or a Slack webhook for handoffs, receive what you send to them.

How long we keep it, and how to delete it

• Your data stays until you delete it. Archived memories are removed automatically after 30 days.
• Delete your account at any time in Settings, in the web app or the iPhone app. This removes your account, your sessions and devices, and every workspace where you are the only owner or admin, with all of its data. In workspaces you share, another owner or admin takes over what you created and your membership ends.
• For anything else, such as a copy of your data, email [email protected].

Changes

When what we collect changes, this page changes with it and the date above is updated. Questions: Support.