Privacy Statement

Effective October 4, 2026 · Last updated October 4, 2026

This Privacy Statement explains how Unsubject LLC (“Unsubject,” “we,” “us” or “our”) collects, uses, shares and protects personal information when you use the websites at unsubject.com and its subdomains, and the apps, bots, connectors, APIs and other online services we operate that link to this statement (together, the “Services”).

Some Services show additional privacy notices; those add to this statement. Capitalized terms not defined here have the meanings given in our Terms of Service.

1. Information we collect

Information you provide

• Account and contact details, such as your name, email address, and your user ID and username on a messaging platform like Telegram.
• Content you submit, such as text, voice messages and other audio, files, links, notes, ideas, goals and tasks.
• Messages to our bots, including messages in group chats a bot has been added to, when the bot is set up to process them.
• Communications with us, such as support requests and the information they contain.

Information from services you connect

When you choose to connect an account you hold with another provider, we receive the data you authorize, and only within the permissions you grant. For example:

• Google: depending on the permissions you grant, your Google Tasks (read and write), Google Calendar events (read-only), Google Contacts (read-only) and Gmail messages (read-only).
• AI assistants (such as Claude, ChatGPT, Gemini or Cursor) that you connect to a Service: the requests your assistant makes on your behalf, the content they contain, the assistant’s name, and the label you give the connection.

Information collected automatically

• Log data, such as IP address, browser or client type, the pages or endpoints requested, timestamps and error details.
• Usage records, such as which API or tool was called, when, and by which connection.
• Cookies and similar technologies that are strictly necessary, for example to keep you signed in or to protect the Services. Our network provider, Cloudflare, may set cookies to detect malicious traffic. We do not use advertising or cross-site tracking cookies.

Information we derive

We create information from your content to make the Services work, such as transcripts, summaries, tags, links between related items, and embeddings (numerical representations of text used for search).

2. How we use information

We use personal information to:

• provide, operate and maintain the Services, for example to store and organize your entries, transcribe audio, search your content, prepare summaries and briefings, and sync your tasks;
• authenticate you and connected clients, keep the Services secure, and detect and prevent fraud and abuse;
• troubleshoot problems and fix bugs;
• communicate with you about the Services and respond to your requests;
• comply with legal obligations and enforce our Terms; and
• do anything else you ask us to or agree to.

We do not:

• sell personal information, or share it for cross-context behavioral or targeted advertising;
• use your content to develop, improve or train generalized AI or machine-learning models, whether ours or anyone else’s; or
• let people read your content, except (a) with your permission, (b) when needed to investigate security issues or abuse, (c) to comply with the law, or (d) for our internal operations, using aggregated and anonymized data.

3. Google user data

In particular:

• We use Google user data only to provide and improve user-facing features of the Service you connected it to. Examples are showing and updating your tasks, linking your entries to related calendar events, contacts and emails, and preparing your daily briefing.
• We transfer Google user data to others only as needed to provide those features (for example, sending calendar event details to an AI provider to write your daily briefing), to comply with the law, to protect security, or as part of a merger, acquisition or sale of assets after giving you notice.
• We never use or transfer Google user data to serve advertising, including retargeting, personalized or interest-based advertising. We never sell it, and never use it to determine creditworthiness or for lending.
• We do not use Google user data to develop, improve or train generalized AI or machine-learning models. AI providers receive it through their APIs under terms that do not let them train their models on it.
• People do not read Google user data, except with your affirmative agreement for specific data, when needed for security purposes such as investigating abuse, to comply with the law, or for our internal operations when the data has been aggregated and anonymized.

You can remove our access at any time at myaccount.google.com/permissions. When you do, we stop collecting data from your Google account. To have the Google data we already store deleted, write to webmaster@unsubject.com.

4. How we share information

We share personal information only in these situations:

• Service providers that process it for us under contract and only on our instructions:
  • hosting, network and database providers, such as Cloudflare and Railway;
  • AI model providers, such as Anthropic and OpenAI, to transcribe, embed, classify, summarize and generate content for you; and
  • messaging platforms, such as Telegram, to deliver messages to and from our bots.
• At your direction. An AI assistant you connect receives the data its requests return. Other members of a shared space you use, such as a family group chat with one of our bots, can see what you share there.
• Legal reasons. To comply with law or legal process, or to protect the rights, property or safety of you, us or others.
• Business transfers. As part of a merger, acquisition, financing or sale of assets. The information remains subject to this statement.
• With your consent.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

5. How long we keep information

• We keep your content until you delete it or ask us to, or until we discontinue the Service that stores it.
• We keep account information for as long as you use the Services.
• We keep logs and usage records only as long as needed for security, auditing and troubleshooting, and then delete or anonymize them.
• Deleted data may remain in backups for a limited time until it is overwritten.
• We may keep information longer when the law requires it or to resolve disputes.

6. Security

We use reasonable technical and organizational measures to protect personal information. These include encryption in transit (HTTPS), storing the access tokens we issue only as hashes, and limiting who can access production systems. No method of transmission or storage is completely secure. If a breach affects your personal information, we will notify you as the law requires.

7. International transfers

Unsubject is based in the United States. We and our service providers process information in the United States and other countries, whose data-protection laws may differ from those where you live. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.

8. Your rights and choices

You can ask us to:

• confirm whether we process your personal information, and give you access to it;
• give you a copy of your data in a portable format;
• correct inaccurate information;
• delete your information;
• restrict or object to certain processing; and
• withdraw consent you have given, without affecting processing that took place before.

You can also disconnect connected accounts and revoke access tokens at any time.

Depending on where you live, for example in Virginia or another US state with a consumer privacy law, the European Economic Area, the United Kingdom or Hong Kong, some of these are legal rights. We honor these requests from all users, wherever they live.

To make a request, write to webmaster@unsubject.com.

• Verification. We may need to confirm your identity first, for example by asking you to write from the email address or account linked to your data.
• Timing. We respond within the time the law requires, usually within 30 days.
• Appeals. If we decline your request, you can appeal by replying to our decision. If you are still not satisfied, you can contact your state attorney general or your local data-protection authority.
• Fair treatment. We will not treat you differently for exercising your rights.

Because we do not sell personal information or share it for targeted advertising, there is nothing to opt out of. Where the law requires it, we treat Global Privacy Control signals as a request to opt out of sale and sharing.

9. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

10. Other providers’ services

The Services link to and work with products of other providers, such as Google, Telegram and AI assistants. Their own privacy policies govern how they handle your information, and we are not responsible for their practices.

11. Changes to this statement

We may update this statement from time to time. When we do, we will post the new version on this page and change the date at the top. If a change is material, we will give reasonable notice before it takes effect, for example in the Service or by email if we have your address.

12. Contact

Unsubject LLC is responsible for the personal information described in this statement. For questions or requests, contact us at webmaster@unsubject.com.