Connect privacy notice

Last updated: 26 October 2026.

About this notice

This notice explains how Connect uses personal information.

Information we collect

• Account and security: your chosen username or email, password and recovery-key hashes, sessions, and a copy, version and acceptance time of the terms you accepted. We do not store your password or recovery key in readable form. An email-shaped username is not a verified email address.
• Your workspace: tasks, notes, lists, uploaded images, preferences and edits that you save.
• Connected channels: account identities, encrypted access credentials, selected conversations, messages, attachments and read or tracking state needed for the features you use. This can include information about the people you communicate with. We obtain it from the channel you authorise.
• Service and support: usage counts, dates and times when your signed-in app is open and in use, subscription references and status if payments are enabled, support correspondence, and technical information needed to secure and diagnose the service. Hosting infrastructure can process IP addresses, request paths, device/browser information and event times. App incident reports filter out arbitrary message bodies, error strings, URLs and stacks.

Why we use it

• To perform our contract with you: provide account access, save and sync your workspace, connect the channels you request, show your inbox, send the replies you request, and administer a subscription you choose.
• For our legitimate interests: protect accounts, prevent abuse, enforce fair-use allowances, investigate faults and answer support enquiries. Understand account adoption and use through an owner-only dashboard showing sign-ups, subscription status, last activity, active days and task, note and AI usage counts. This dashboard does not display task, note or message content. Our interest is a secure, reliable and useful service; we use information relevant to those purposes.
• To meet legal obligations: respond to applicable privacy rights and lawful requests, and retain records where the law requires it.
• Consent where required: any future non-essential tracking or direct marketing needs its own lawful basis and, where required, a separate choice. Accepting the terms is not blanket consent to advertising, AI training or marketing.

You can use tasks and notes without connecting a channel. If you do not provide account information needed to sign in, or decline a channel permission needed for a feature, we cannot provide that feature.

Connected accounts and Google data

Connecting a channel is optional. Access depends on the permissions you authorise and the features available for that provider. We use connected content to provide your inbox, selected conversations and requested replies. The source provider keeps the original content and also applies its own privacy notice.

If you connect Gmail, we access mailbox identity and the approved email content needed to display your inbox, organise your mail and send requested replies. Mail-management access lets us mark messages as read or unread, add or remove stars, archive conversations, move them between folders or labels, move them to Trash and restore them when you request those actions. We do not request permission to permanently delete Gmail messages while bypassing Trash. If you connect Google Chat, we access the approved work-account identity, spaces, messages and memberships needed for selected conversations. We do not sell Google account data, share it with advertisers, use it to select advertisements or use it to train general-purpose AI models. Our use and transfer of Google API information follows the Google API Services User Data Policy, including its Limited Use requirements.

Disconnect a channel in Settings, and use the source provider's connected-app or linked-device settings to revoke access there. For Google, you can review third-party connections in your Google Account. Disconnecting does not delete original messages held by the provider.

AI features

When you send an included assistant request, your request and relevant screen content or requested lookups are processed through Vercel AI Gateway by Baseten. This can include tasks, notes or connected messages relevant to your request. Customer requests require zero data retention and no use of prompts for model training at the inference provider. No other model or inference provider is used as a fallback. Accepting the service terms does not itself submit your content to AI.

A request is refused if private processing or the included allowance is unavailable. Short-lived retry responses are stored by this app for reliability and abuse protection; daily cleanup removes responses older than one day, so removal may occur later than exactly 24 hours. Usage records enforce account allowances. These controls do not remove the separate hosting logs described below. See Vercel AI Gateway's zero data retention policy.

The owner's separate assistant connection uses OpenRouter and its configured provider, currently NVIDIA. It does not authorise access to customers' private content, and its credentials are not shared with customer accounts. We do not use customer tasks, notes or messages to train our own AI models or to make advertising profiles. We will explain material new sharing or uses and provide any required choices before introducing them.

Who receives information

Vercel hosts the app and processes web requests. Supabase hosts the PostgreSQL database in London, UK. Aiven temporarily retains the previous database copy for migration rollback. iCloud and Yahoo connections use encrypted provider-issued app passwords to connect directly to their mail services for inbox access and requested replies. Revoke these app passwords in your email account to remove provider access. Existing hosted other-email connections use Nylas for mailbox authorisation, synchronisation and requested sending. Included customer AI uses Vercel AI Gateway and Baseten; the owner's separate connection uses OpenRouter and its selected inference provider. Connected-channel providers process the requests needed to use their services. If paid subscriptions become available, Stripe processes checkout and payment information; the app stores billing references and status rather than full card details. Support emails are received using Microsoft's email service.

We only use optional providers for features actually enabled and requested. We may disclose relevant information when legally required, to protect the service or people's rights, or to professional advisers bound by appropriate duties. We do not sell your tasks, notes or messages.

International processing

Providers and their subprocessors may process information outside the UK, including in the EEA and United States. An EU database or mailbox region does not mean all processing stays in the EU. Hosting and database processing is covered by the providers' data-processing terms, which describe the applicable transfer mechanisms, including standard contractual clauses and the UK addendum where required. See Vercel's data-processing addendum and Supabase's data-processing addendum and Aiven's data-processing agreement. Contact us for information about the safeguards applicable to your data and how to obtain a copy.

How long information stays

We keep account and workspace information while needed to provide your account. Daily account activity records are kept while you have an account and are included in account deletion. Connection credentials and imported data are used while needed for the connection. Retention of security, fault and support records depends on the issue, whether it remains unresolved, legal obligations and the need to establish or defend claims. We do not retain those records merely to use your content for advertising.

Account deletion closes access immediately and starts removal of stored account data. A daily cleanup makes a further pass after requests already in progress have expired; failed external connection revocations are retried. Provider outages or cleanup failures can delay completion. We do not promise that every copy disappears immediately or on a fixed deadline. Contact us if you need confirmation of a deletion request.

Infrastructure logs and disaster-recovery copies follow the relevant provider's retention and backup rotation. Deleted records can remain in those copies until they are overwritten. Source-channel originals and payment-provider records are separate and may remain under those providers' rules or legal obligations. Deleting the app account does not delete them.

Cookies, device storage and sponsored cards

Session cookies and device storage keep you signed in and save workspace data, drafts and preferences. Signing out removes the active session, but saved data may remain on the device until you clear the app's site data. Use your own device or clear site data after using a shared device.

Free accounts may show occasional, labelled and dismissible sponsor cards after the tasks list. These cards use no advertising tracking scripts and do not use tasks, notes or messages to choose an ad. A sponsor link opens another website, whose own notice applies.

Google advertising on the public homepage

We have configured Google AdSense for the signed-out public homepage. Ads can appear after Google approves the site and account. Google advertising scripts are not loaded in sign-in or registration forms, signed-in workspaces, inboxes, chats, tasks or notes. Opening an account form from the advertising homepage loads a fresh page. We do not send account identities, tasks, notes, connected messages or Google API data to Google or other advertisers for advertising.

On the advertising homepage, Google and third-party ad partners can receive technical information such as your IP address, browser and device details, the page URL and ad interactions. Google and third-party vendors use cookies or similar device storage to serve, measure and, where you consent, personalise ads based on prior visits to this and other websites. Google's advertising cookies enable Google and its partners to show ads based on those visits.

Google's consent message provides choices for visitors in the EEA, UK and Switzerland, including Consent, Do not consent and Manage options. The message lists the participating ad partners and their purposes. You can change or withdraw your choice using Privacy and cookie settings in the public homepage footer when Google's consent tools are available. Declining advertising consent does not prevent you from opening Connect or using its free account features. Your service-terms acceptance is separate from advertising consent.

Read how Google uses information from sites that use its services and Google's advertising information. You can manage Google personalised advertising through My Ad Center, or opt out of participating third-party vendors' personalised advertising through YourAdChoices. These external choices are separate from this site's consent message and do not necessarily remove all ads. Google and its partners may process advertising information outside the UK under their published privacy notices.

Your rights and choices

You can correct your workspace, download saved tasks and notes, disconnect channels and request account deletion in Settings. For other access, correction, erasure, restriction, objection or portability requests, contact support. Rights depend on the purpose and applicable law. You can object to processing based on legitimate interests and withdraw consent where we rely on it. We may need proportionate information to verify a request, but will not ask for your password, recovery key or full card details.

We do not use your content to make solely automated decisions producing legal or similarly significant effects about you. The app is not directed at children. Contact us if you believe a child has provided personal information that should be removed.

You can complain to the UK Information Commissioner's Office. You can contact us first, but you do not have to.

Changes

We will update the date on this notice when it changes. Material new uses or sharing will be explained before they take effect, with any additional choice or consent required by law.