Privacy notice

Draft for review. Not yet final.

Placet is an assistant that acts for you only within rules you set and approvals you give. This notice says what we keep, why, for how long, and who helps us run it.

Who we are

[Operator: legal name, registered address and contact email to be added]

What we keep

• Your account: your name, email address, mobile number (if you add one), passkeys (public keys only), and the hash of your recovery codes. Your authenticator secret is encrypted.
• What your assistant does: each proposed email, text, invite, call and trust rule, its status, and who approved it. This record is kept for your account's life so you can see what happened.
• Conversations: emails and texts sent to or by your assistant. Message bodies are encrypted and deleted after 30 days.
• Files: attachments emailed to your assistant and files you upload, encrypted, deleted after 30 days.
• Calls: calls are not recorded. A transcript and summary are kept, encrypted, for 30 days, then deleted. The call is deleted at our voice provider once we have the result.
• Content checks: before anything goes out, its text is checked for threats, harassment, fraud, phishing and spam, by fixed rules and by an AI model. We keep what the check found, not a copy of the text. If it finds a likely threat or fraud, a person at Placet reads that one message to decide whether it can go out, and that reading is recorded on your account.
• Notes: short notes your assistant saves about you. You can see and delete each one on your account page.
• Waitlist: if you join the waitlist, your name, email and what you would use it for, and whose link you came from, until you join or ask us to remove you.
• Where you signed up from: the country, worked out when you join the waitlist or create your account, from your connection's country, your mobile number's country code or your browser's time zone. We keep the country and time zone, not your IP address.
• Usage: counts of what went out and model tokens used, to run plans and limits.

What we never do

• We never read your own mailbox, calendar or messages: your assistant has its own address and number.
• We never sell your data or use it for advertising.
• We never let an AI model approve anything: approvals need you, with a passkey on your device (Face ID, a fingerprint, Windows Hello or your screen lock) or your authenticator code.

Who helps us run it

Our servers and database are in the EU (Fly.io, Amsterdam). Some providers process message content outside the EU, under their data processing terms and the EU-US Data Privacy Framework:

• Postmark (email delivery and receipt), United States.
• Anthropic (the AI model that answers your texts when you text your assistant, and checks the content of messages your assistant is about to send), United States.
• Photon (iMessage and SMS lines), Vapi (phone calls), Twilio (mobile number verification), Stripe (payments).
• WhatsApp (Meta), when you text your assistant on WhatsApp: your messages and its replies pass through WhatsApp, on Placet's own numbers.

Your choices

• Stop everything at once with the kill switch on your account page.
• Disconnect Claude, remove trusted contacts, delete files and notes on your account page.
• Download a copy of your data from your account page at any time.
• Close your account from your account page. Your assistant stops at once; everything is deleted after 14 days unless you keep the account, and a paid plan is cancelled with no further charge. Your assistant's address is never given to anyone else. The security log of what was proposed, approved and sent is kept under a random account number, without your name or any message text (it can include the addresses messages went to), so misuse can still be investigated.

You can also complain to your data protection authority (in Portugal, the CNPD).