Privacy Policy

1. The Secret Vault (Introduction)

At Casitka, privacy isn't just a legal requirement—it's a product feature. We call it The Secret Vault. This policy explains how we secure your thoughts, voice, and files, and guarantees that we do not train our AI on your personal data.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Voice recordings and audio files you upload
• Transcriptions and AI-generated content
• Usage data and preferences
• Payment and billing information

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Process your voice recordings and generate transcriptions
• Provide AI-powered insights and knowledge management features
• Communicate with you about updates, security alerts, and support
• Process payments and billing

4. Data Security

We implement enterprise-grade security measures to protect your data, including end-to-end encryption, zero-knowledge architecture, and regional data residency. Your voice recordings and transcriptions are encrypted both in transit and at rest.

5. AI and Your Data

We never use your voice recordings or transcriptions to train our AI models. Your conversations and data are yours alone. We use AI to process your content for your benefit, but we do not share or use your data for model training purposes.

6. Google User Data and Limited Use

When you connect a Google account, Casitka requests only the access needed for the features you use:

• Read and search your email messages, so the assistant can summarise your inbox and answer your questions about it (Gmail: gmail.readonly).
• Label, archive, and mark messages as read when you ask the assistant to organise your inbox. We do not delete your email (Gmail: gmail.modify).
• Prepare draft replies for you to review (Gmail: gmail.compose), and send a reply only after you have reviewed and approved it (Gmail: gmail.send).
• Read your calendar to brief you on your day, and create or update events you ask for (Google Calendar: calendar.readonly, calendar.events).
• Your Google account email address and basic profile, to identify the connected account (userinfo.email, userinfo.profile).

Google user data is accessed only to deliver the features you have enabled; it is encrypted in transit and at rest; it is never sold, never used for advertising, and never used to train AI models. We do not transfer Google user data to others except as needed to operate the features you use or as required by law. You can disconnect a Google account at any time from Settings, which revokes Casitka's access.

Limited Use. Casitka's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. You can delete your recordings and transcriptions at any time, and you may request account deletion through your account settings.

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data
• Opt-out of marketing communications

9. Regional Data Centers

We operate regional data centers to ensure your data stays within your geographic jurisdiction. You can select your preferred data region in your account settings.