Trust is a feature.
Our apps hold your work, so protecting it comes first. Here’s how we do it — in plain words.
Security
-
Encrypted in transit and at rest
Every connection uses TLS. Stored data is encrypted.
-
Workspace isolation
No workspace can see or write another’s data. We test for it on every release.
-
Passkeys and two-step verification
Phishing-resistant sign-in, available on every account.
-
Least-privilege access
Our team only accesses customer data when you ask for support, and every access is logged.
Privacy
-
We don’t sell your data
Not to advertisers, not to anyone.
-
Collect less
We ask only for what an app needs to work.
-
Export and delete
Download or delete your data, per app or for your whole account.
-
Nothing kept forever
Retention has limits. Deleted means deleted after the stated period.
Responsible AI
-
Optional and labeled
Every AI feature is marked as such and can be turned off.
-
Assists, never decides
AI suggests. It doesn’t reorder your priorities or change your data without asking.
-
Works without AI
Every core feature has a manual path.
-
Non-destructive agents
Through MCP, agents can read and propose. Destructive actions need explicit permission.
Your rights
-
Access
See what we hold about you.
-
Correction
Fix anything that’s wrong.
-
Portability
Take your data with you in standard formats.
-
Deletion
Ask us to erase it.
Found a vulnerability?
Write to [email protected]. We reply to every report and credit the researchers who help us.
This page describes our commitments. Detailed policies will be published before general availability.