Privacy Policy

Last updated: June 11, 2026

THE SHORT VERSION

We built this assistant to help you, not to read your email. This policy explains exactly what we collect, how we use it, and the choices you have. LAura is for adults and is not directed to anyone under 18.

WHAT WE STORE

- Your name and email address (from your Google, Microsoft, or IMAP/iCloud sign-in). - Your assistant configuration: your name, role, family member names, writing preferences, and processing settings. - A log of each processing run. For up to 30 days this run log can include the titles and links of the tasks, events, and draft replies LAura created (so you can review and undo them); it is encrypted at rest and automatically deleted after 30 days, leaving only counts. It never includes the body, subject, senders, or recipients of your email. - A small amount of learning data derived from your activity (for example, titles of items you rejected, and how often a sender writes to you), kept encrypted to improve accuracy. - Your OAuth access credentials, encrypted with a key that is separate from our database. - Feedback you choose to send us via the in-app feedback button: the message you type, its category, and your email address so we can follow up. If you delete your account, your feedback is anonymized but the message may be kept to improve the product.

WHAT WE DO NOT STORE

- The body, subject, senders, or recipients of your email. Messages are read, processed in memory, and discarded. We keep no copy of your mail. - Any AI prompts or responses. These are built in memory and discarded after each email is processed.

HOW YOUR EMAIL IS PROCESSED

When your assistant runs, it connects to your Gmail, Outlook, or IMAP mailbox using the permissions you granted, reads recent emails, and sends their content to a third-party AI provider to extract tasks and events. It then creates those items in your calendar and task list and discards all email content from memory. The AI provider processes the content only to return the result; see the next section.

AI PROVIDERS AND OTHER SERVICES

To turn your email into tasks and events, LAura sends email content to one or more third-party AI providers, which may include Google, Anthropic, OpenAI, DeepSeek, Groq, or OpenRouter. Under our terms with them, these providers process the content to return a result and do not use it to train their models. We also use Stripe to process payments (Stripe never receives your email) and, if enabled, an error-monitoring service that receives diagnostic data with your email content and personal identifiers removed. We never sell or share your data for advertising.

GOOGLE API SERVICES - LIMITED USE

LAura's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google account data only to provide and improve the user-facing features of LAura. We do not transfer this data except as necessary to provide those features, comply with the law, or as part of a merger or acquisition; we do not use it for advertising; and no human reads it except with your explicit consent, for security, or as required by law.

DATA RETENTION

Run-log detail (item titles and links) is automatically deleted after 30 days, leaving only counts. Your encrypted OAuth credentials are kept until you disconnect the mailbox or delete your data. Everything else is kept until you delete it. Deleting your data or account takes effect immediately and permanently.

WHO CAN SEE YOUR DATA

Only you and the service providers listed above, and only as needed to run LAura. We do not sell, rent, or trade your data with anyone. Our staff does not access your email or your assistant configuration except to diagnose a technical problem you have specifically reported to us, and only with your permission.

CHILDREN

LAura is intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has used LAura, contact us and we will delete the data.

YOUR RIGHTS

You can delete your data at any time from the Settings page. "Delete my data" removes your configuration and processing history and revokes our access to your email account immediately. "Delete my account" removes everything including your user record. Both actions are permanent and take effect instantly. You can also email us to request access to, or deletion of, your data.

CONTACT

Questions about privacy, or a data request? Email us at support@samsonit.net.