Privacy Policy

Last updated: June 2026

1. Introduction

ChiefMe ("we", "our", or "us") is an AI-powered executive assistant that helps you schedule meetings, triage email, and manage daily tasks through a chat interface. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. What We Collect

• Full name — collected during registration to personalise your experience.
• Email address — collected when you sign in via Google OAuth, used to identify your account.
• Phone number (WhatsApp) — collected when you connect via WhatsApp, used to send and receive messages through the assistant.
• Google Calendar access tokens — collected when you connect your Google Calendar. Used only to read your calendar and create or update events on your behalf.
• Company name — collected if you use team features, used to group team members and generate a shared invite link.
• Chat messages — the text and voice messages you send to ChiefMe, used to process your requests in real time.
• Usage metadata — basic request logs (timestamps, error codes) used for debugging and service reliability. No content is stored in these logs.

We do not collect payment information, contact lists, email body content, or any data beyond what is necessary to fulfil your requests.

3. How We Use Your Data

• To authenticate you and maintain your session.
• To schedule, update, and retrieve calendar events when you ask ChiefMe to do so.
• To process your text and voice messages and return a relevant AI-generated response.
• To improve reliability and fix bugs (using anonymised logs).

We do not use your data to train AI models, run advertising, or any purpose beyond operating the ChiefMe service.

4. Data Storage & Security

Your data is stored securely on Supabase, hosted on AWS infrastructure. We do not sell, share, or transfer your personal data to third parties. All data transfers are encrypted using TLS.

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), token-based authentication, and restricted database access. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes. Data is shared only with the infrastructure providers that run the service:

• Supabase — database and authentication (EU/US regions).
• OpenAI — processes your messages to generate AI responses. OpenAI's data use is governed by their API data policies.
• Google — calendar access via Google Calendar API.

6. Data Retention

Your data is retained as long as your account is active. Upon account deletion or written request, all personal data will be permanently deleted within 30 days. Chat message history is not persistently stored beyond the duration of a session.

7. Cookies

ChiefMe uses only essential session cookies required for authentication. We do not use tracking or advertising cookies.

8. Your Rights

Depending on your location, you may have rights under GDPR, CCPA, or similar laws, including:

• Right to access — request a copy of the personal data we hold about you.
• Right to correct — request correction of inaccurate or incomplete data.
• Right to delete — request permanent deletion of your personal data.
• Right to data portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, contact us at chiefme.app@gmail.com.

9. Children's Privacy

ChiefMe is not directed at anyone under the age of 16. We do not knowingly collect data from minors. If you believe a minor has provided us data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date above. Continued use of ChiefMe after changes constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or requests, contact us at: chiefme.app@gmail.com

← Back to ChiefMe