Watching, not touching
These rules are built into the system, not written in a policy. Most of them cannot be broken.
It reads your calendar and inbox, and that is all it can do. It can never send, change or delete your email. If you choose Act, you give it one extra permission for your calendar only, so it can hold and move your time.
Drafts arrive inside your Debrief. Change it, bin it, or send it straight to your drafts folder with one tap, ready in your own email account. Nothing ever leaves without you pressing send.
Your messages stay in your account. What we keep is what the system learned: the commitment, the goal, the correction you gave it.
Every Debrief is readable by its owner alone, including on team accounts. Not the manager, not your business. During the founding pilot, one human checks each brief in confidence before it sends, the way your accountant sees your numbers. Beyond that, nobody.
Our contract keeps your data out of any AI training. It keeps your score, and nothing else.
Every member gets a signed privacy promise on day one. What your Debrief knows stays between you and it.
Your history is deleted within 30 days of leaving. The paperwork behind all of this is published.
Full detail lives in our Data Processing Agreement and Privacy Notice.