Where your data lives.

Application data lives in a managed Postgres database at Supabase. The application runs on Vercel. Both are configured in United States regions. Backups are taken by Supabase on their schedule and inherit their encryption.

A short list, and it is short on purpose. Every one of these is a company we pay to run part of the product, not a partner we share data with:

• Supabase: the database and authentication.
• Vercel: hosting.
• Google or Microsoft, only if you connect a calendar, and only to create the invitation for a conversation you scheduled.
• Granola, only if you connect it, and only to read notes from your own account at your request.

There is no advertising network, no analytics vendor holding personal data, no data broker and no model provider. We do not sell anything about you.

Private content stays in the database. Message text, preparation notes, meeting notes and answers to follow-up questions are not sent to any third party, are not included in analytics, and are not read by us as a matter of course.

• Your account and its content are kept while the account exists.
• Deleting your account removes your profile, messages, goals, notes and meeting notes. That action is in your profile settings and takes effect immediately.
• Meeting notes you imported stay in Mentable until you delete them or delete your account. Deleting them here does not touch your copy in Granola.
• Disconnecting Granola or a calendar deletes the stored credential at once.

An organization can export its own operational figures as CSV: who joined, who was matched, how many conversations happened. Those exports contain counts and participation, never private content, because administrators cannot reach private content in the first place.

A member can delete everything from their profile settings. We do not yet offer a one-click export of an individual member’s own data. If you need one, ask and we will do it by hand while we build it.

If we discover a breach affecting your organization’s data, we will tell your administrators what happened, what was reached, and what we did, as soon as we understand it well enough to describe it accurately. We do not have a formal notification window written into a contract yet, and we would rather say so than quote one we have not committed to.