Privacy
What we keep
- Your account: name, email and profile picture from Google sign-in, your timezone and your settings.
- What you ask the assistant to keep: tasks and reminders, contacts, facts about you and your business, quotes, drafts and notes.
- Your conversations: the words of voice and typed conversations, and a short summary of each.
- A record of what the assistant did for you (the "Completed" list).
- If you connect Google: encrypted access tokens, and the calendar, contact and mail details needed to do what you ask. Mail is only read if you give the Gmail permission.
- Technical logs used to keep the service running. Tokens, secrets, email addresses and phone numbers are masked before anything is written to a log.
Why we use it
To run the assistant for you: to answer, remind, draft and look things up. We do not sell your data and we do not use it for advertising.
Who else sees it
- OpenAI processes your voice and text so the assistant can understand and reply. Their handling is covered by their own terms and privacy policy.
- Google provides sign-in and, only if you connect them, Calendar, Contacts and Gmail. We ask for the narrowest permissions the feature needs, and you can disconnect in Settings or in your Google account.
- Our hosting and database providers store the data for us.
Some of these providers are outside Australia, so your information can be processed overseas.
How long we keep it
Conversation transcripts are deleted after 30 days. Tasks, contacts and the facts the assistant remembers stay until you delete them. See Data retention.
Your choices
- Settings, Account, "Download my data" gives you a copy of what we hold.
- Settings, Account, "Delete my account" removes your data, and it cannot be undone.
- Settings lets you see and delete individual facts the assistant remembers.
You can also ask us for access or correction at support@example.com. If you are in Australia you can complain to us first and then to the Office of the Australian Information Commissioner.
Security
Connection tokens are encrypted at rest, sessions use signed cookies, and access to the operator tools is limited to named administrators. No system is perfectly secure, and if we find a breach that is likely to cause you serious harm we will tell you.