This policy explains what the product reads, what it keeps, and how it uses that information. The product is a limited, invitation-only pilot operated by one person. Fewer than five people are taking part, and there is no public signup.
Information the product reads
With your permission, the product connects to and reads:
- your email
- your calendar
- transcripts or notes from your meetings
These connections are read-only. The product does not write information back to your connected accounts. Data flows from those accounts to the product, never the other way around.
You can disconnect an account at any time. This stops the product from reading anything further from that account.
Information the product keeps
The product keeps short summaries and individual observations distilled from the information it reads. These are typically a few sentences each.
It also keeps notes about the people you interact with, based on the same sources. Pointers to original emails, calendar entries, meeting transcripts, or notes are kept so the product can find an item again when needed.
The product does not keep:
- the full text of your emails
- full meeting transcripts
- a copy of your calendar
When the original item is needed, the product fetches it live from the connected source. The product discards it afterwards.
How the information is used
The product uses this information to:
- write and send you a daily briefing email
- answer questions you send by replying to that email
- update its record when you say that something has changed
It will not send email as you or send email to your contacts.
Information about other people
The product necessarily holds information about people who have not signed up. Your colleagues, clients, and other contacts may appear because they are mentioned in your email, calendar, meetings, or meeting notes.
Those people have not consented to this. They cannot see or correct the information held about them through the product.
The pilot limits this impact in several ways:
- Only short summaries are kept, never the original messages or recordings.
- The product distinguishes between something a person actually said and something inferred about them. It identifies which is which.
- Information about other people is available only to the single user whose account it came from.
- It is used to help that user remember information and follow through on commitments. It is never used to score, rank, or rate anyone.
This approach is being used only for a limited pilot with a small number of personally invited users. It will be revisited before any wider release.
Services that handle information
Short summaries are sent to the AI models the product uses for analysis and writing.
The briefing itself and your email address are sent to the service that delivers the email. The product's hosting service handles ordinary web traffic.
The current list of providers is available on request by emailing privacy@asksteelman.com.
The product does not sell your information or share it for advertising. It does not show one user's information to another user.
Access and connected accounts
Access is restricted to each individual user's own account. Credentials used to connect your email, calendar, and meeting sources are stored encrypted.
The product is not designed for deliberately storing government identifiers, such as national insurance or social security numbers, or regulated health information.
It reads whatever is present in the accounts you connect, so it may encounter this kind of information incidentally. You should not use the product as a place to deliberately store it. The product is not offered as a compliant service for regulated health data.
Retention, access, and deletion
Information is kept until you ask for it to be deleted. There is no automatic expiry.
Disconnecting an account stops further reading, but it does not erase what the product has already understood from that account. Deletion requires a separate request.
You may ask what information is held about you by emailing privacy@asksteelman.com. The operator will respond within 30 days.
You may also ask the product to forget a single item. This hides the item so that it no longer appears in anything the product does or says. It does not completely remove the item.
Deleting your whole account is different. It results in a genuine, complete removal of the information held for that account.
To request deletion, email privacy@asksteelman.com. Deletion requests will be completed within 30 days.
If something goes wrong
If information about you is exposed, you will be told directly, on the day it is discovered, by the person who operates the product. You will be told what happened, what was reachable, whether it was actually accessed, what has been done about it, and what you should do.
If it is not yet known whether information was actually accessed, you will be told that too, rather than being given a reassurance that has not been established.