Privacy Policy

1. The short version

Aldyn is built on a simple principle: your email trains your assistant, and no one else's. We process your mail to organize it for you; we store the organizational record, not your email bodies; what Aldyn learns about your preferences is kept as readable rules and pins you can inspect and delete, never as weights in a shared model. We do not sell your data, and we do not use it to train generalized AI models. Ever.

2. What we access

When you connect a mailbox, you grant Aldyn scoped access via the provider's official API (Google Gmail API or Microsoft Graph): reading messages, applying and removing labels/folders/categories, and creating drafts. As a matter of product design, Aldyn never sends email on your behalf and never deletes messages, drafts are created for you to review and send yourself. On applicable plans, you may also connect a calendar (to support scheduling and meeting features).

3. What we store, and what we never store

Stored: your account details; message identifiers and organizational metadata (which category a message was filed into, by which layer, and why); sender records (address or list identity, pinned category, unsubscribe endpoint); your rules and categories; correction and example records stored as structured "sketches" (sender domain, truncated subject line, category); a voice profile describing how you write (typical greetings, sign-offs, tone traits, and length, distilled from your sent mail so drafts match your voice; your sent emails themselves are not stored); drafts Aldyn generated for you; and service logs.

Not stored: your email bodies and attachments. Message content is fetched from your provider, processed in memory to make a classification or draft, and discarded. Aldyn's database cannot leak your email archive, because it doesn't contain one.

Deletion mirrors your inbox: when you permanently delete a message in your mailbox, Aldyn automatically purges every stored record referencing it (its decision log entry, draft records, and example sketches).

4. How AI processing works

Most of your mail is organized by deterministic logic that involves no AI at all. When a message is genuinely ambiguous, its content is sent to a large-language-model API to classify (or, on applicable plans, to draft a reply). Our model providers process this data under API terms that prohibit them from training their models on it. We never fine-tune or train any generalized model on customer mail; everything Aldyn "learns" is stored per-account as data you can view and delete.

5. Google API Services, Limited Use disclosure

Aldyn's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: Google user data is used only to provide and improve user-facing features of Aldyn for the user who granted access; it is not used to develop, improve, or train generalized AI or machine-learning models; it is not transferred to third parties except as necessary to provide the Service (e.g., to the subprocessors below), for security, or to comply with law; and it is never sold or used for advertising. Humans do not read your data except with your explicit permission for support, for security investigation, or where required by law.

6. Subprocessors

We use a short list of infrastructure providers to run Aldyn: cloud hosting and database (e.g., Supabase, Vercel, Google Cloud, Cloudflare), model APIs for classification and drafting (e.g., Google Gemini API, Anthropic API), payments (Stripe), and transactional email. Each processes data only to provide their service to us, under data-protection agreements. The current list is available on request and will be maintained at getaldyn.com/subprocessors.

7. Retention and deletion

Disconnecting a mailbox revokes our access immediately and deletes that mailbox's stored data, decisions, sender pins, rules, categories, and example sketches, within 30 days (backups roll off on a fixed schedule thereafter). Deleting your account deletes everything. You can also remove any individual rule, pin, or example at any time in the app; removal is effective immediately in the engine.

8. Sharing

We do not sell or rent your data, use it for advertising, or share it with third parties except the subprocessors above, to comply with legal obligations, or in a merger/acquisition (in which case this policy continues to apply and you will be notified).

9. Security

Data is encrypted in transit and at rest. Provider access uses OAuth tokens (never your password), stored encrypted, revocable by you at any time from Aldyn or from your Google/Microsoft account settings. Access to production systems is restricted and logged.

10. Your rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA, and similar), you may have rights to access, correct, export, delete, or restrict processing of your personal data, and to object or withdraw consent. Most of these are self-service in the app; for anything else, email privacy@getaldyn.com and we will respond within 30 days. EU/UK users: Ascended Entertainment LLC is the data controller for account data and a processor for mailbox contents processed on your instructions; you may lodge a complaint with your supervisory authority.

11. Changes and contact

Material changes to this policy will be announced by email or in-app at least 14 days in advance. Contact: privacy@getaldyn.com · Ascended Entertainment LLC.