This Privacy Policy describes how With Not For AI Consulting, LLC ("we," "us," or "our") collects, uses, and protects your information when you use our website and Morning Briefing service at withnotfor.ai.
1. Information We Collect
We collect the following categories of personal information:
- Account information: Your name and email address when you sign up for the Morning Briefing service.
- Email content: Emails from your connected inbox are accessed to generate your daily briefing. We read email metadata (sender, subject, date) and body content solely for summarization purposes.
- Calendar events: If you connect your calendar, we access event titles, times, attendees, and descriptions to include scheduling context in your briefing.
- Questionnaire answers: Preferences and context you provide during onboarding to personalize your briefings.
- Authentication tokens: OAuth refresh tokens required to access your email and calendar on an ongoing basis.
- Payment information: Billing details collected and processed by Stripe. We do not store your credit card number.
2. How We Process Your Data
Your email and calendar content is sent to Anthropic's Claude API for AI-powered summarization. Anthropic processes this data under their enterprise API terms, which include the following data handling commitments:
- Content sent via the API may be retained by Anthropic for up to 7 days for abuse and safety monitoring, after which it is deleted.
- API inputs and outputs are not used to train Anthropic's models.
- Anthropic's data handling is governed by their Privacy Policy and API usage policies.
After your daily briefing is generated, the email and calendar content used to produce it is not retained by us.
3. How We Store Your Data
- Database: Account data, questionnaire responses, and subscription status are stored in AWS DynamoDB with encryption at rest, hosted in the
us-east-1 region.
- Refresh tokens: OAuth tokens are encrypted using AWS Key Management Service (KMS) before being written to DynamoDB.
- Email and calendar content is processed in memory during briefing generation and is not written to persistent storage by us.
4. Third-Party Services
We share data with the following third parties as necessary to provide our service:
- Anthropic — AI processing of email and calendar content to generate briefings.
- Stripe — Payment processing and subscription management.
- Amazon Web Services (AWS) — Infrastructure, database, and encryption key management.
- Google / Microsoft — Email and calendar access via OAuth, depending on which provider you connect.
We do not sell, rent, or share your personal information with any other third parties for marketing purposes.
5. Data Retention
- Email and calendar content: Processed during briefing generation and discarded immediately afterward. Not retained.
- Refresh tokens: Stored for the duration of your active subscription. Deleted when your subscription is cancelled or upon request.
- Account and questionnaire data: Retained while your account is active. Deleted upon request or account termination.
- Payment records: Retained by Stripe per their data retention policies and as required by applicable law.
6. Your Rights
You have the right to:
- Request a copy of the personal data we hold about you.
- Request correction of inaccurate information.
- Request deletion of your account and associated data by emailing jack@withnotfor.ai.
- Revoke OAuth access at any time through your Google or Microsoft account settings. This will stop future briefings from being generated.
- Cancel your subscription at any time, which will remove your access and result in deletion of your stored tokens.
7. Security
We implement industry-standard safeguards including encryption at rest (AWS DynamoDB), encryption in transit (TLS), and KMS-encrypted OAuth tokens. Access to infrastructure is restricted to authorized personnel only. No system is 100% secure, and we cannot guarantee absolute security of your data.
8. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at least 30 days before the changes take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.
10. Contact
For privacy inquiries, data deletion requests, or questions about this policy, contact us at:
With Not For AI Consulting, LLC
jack@withnotfor.ai