Privacy Policy

Your data is used to run your personal assistant — nothing more. We do not write your messages into our app logs, and each person’s agent runs in its own container. We do not sell your data, we do not use it to train models, and we do not send it to third-party advertising or analytics networks. For exactly what we can and cannot see — including the honest limits — see our Security page.

• Account data — your email, billing details, and authentication identifiers.
• Conversations and memory — the messages you exchange with Spotter and the memory it builds to help you over time.
• Connected sources — everything in the mail, calendar, chats and other tools you connect. Spotter reads them continuously, not only when you ask: it sorts new mail, checks it against your rules, summarizes your day and reminds you of what is open.
• Chats you choose to follow — the Telegram conversations you pick, including what other people write in them.
• Calls — recordings and transcripts of calls Spotter joins for you, including what the other participants say.
• Contacts — the names and addresses of the people you correspond with, gathered from those sources.

Your agent runs on servers we operate, in a separate container of its own. The mail, chats and call notes Spotter reads are kept in our database so it can search them; that archive is not encrypted today, which means we could technically read it. Your conversations with the agent sit on our server’s disk, also unencrypted. Our nightly server backups hold copies of both, and they are not encrypted either. To sort, summarize and answer, Spotter sends text to an outside language-model provider. Our app’s own model calls tell the model router to use only providers that do not collect data; the agent’s chat does not set that yet, and we have not verified zero retention at the router or for our account, so we do not promise it. We are honest about that nuance rather than hiding it.

This website sets no tracking cookies and runs no third-party analytics. Nothing here follows you across the internet. The product uses cookies only to keep you signed in and to remember your language and layout. None of them track you.

A short list, and only where the work requires it: our hosting provider; the sign-in service that handles your account; our payment processor for billing; the integration service that connects your mail, calendar and other tools (it holds the sign-in token for your mailbox, and we reach it with one account key of ours); the model router and the provider it picks to answer a request — and, if you connect an AI account of your own, that provider, under your account’s terms; the messenger you talk to Spotter through (Telegram today), which carries those messages and, if you link your personal account, the chats Spotter reads; if you use call notes, the service that joins and records the call and the storage service that keeps the recordings; the search engines your agent queries when it looks something up on the web; and a public avatar service, which receives a hashed form of a contact’s email address to find their photo. Each sees what that job needs. We do not share your data with advertisers, data brokers, or analytics vendors, because we do not use any.

You can export your data or delete your account at any time. Deleting erases what Spotter holds in our live systems — your archive, memory, connected accounts and your agent’s container. Copies already in our server backups are not erased at that moment, and we cannot yet promise when they expire. Cancelling is not deleting: when the paid period ends, your agent’s container, with its chat history, is removed, while your archive stays until you delete your account. Reach us at privacy@wingsuit.co and we will respond within 30 days.

If this policy changes, the date at the top changes with it, and anything that alters what we do with your data will be said plainly rather than buried in a diff.

Questions about this policy? Write to privacy@wingsuit.co.