Updated August 27, 2026
Draft, not reviewed by a lawyer
These documents describe how the Service actually works, but no lawyer has reviewed them. Before you start selling, show them to a legal professional in your country — especially the parts on liability, refunds and data transfers.
You are responsible for the data you put into the Service: those are your clients and your records. We process it on your instructions and for the purposes described here.
For your own account data we are responsible. Contact: [not filled in].
Account: name, email address, hashed password, role in the workspace.
Working data: bookings, clients and their contacts, amounts, payments, tasks, shifts, enquiries.
Technical: sign-in times, request address, error reports.
What you upload to Inbox: photos, documents, voice recordings, text.
The main database and files are on Supabase, Ireland region (European Union). Data leaves the EU only in the cases named below.
Supabase — database and file storage, EU.
Stripe — subscription payments; it receives your payment details directly, we neither see nor store them.
Anthropic and Groq — recognising what you send to Inbox: text, photos, documents, speech. The data goes to the United States and is processed to return a parsed draft to you. Under these providers' terms, what is sent through their API is not used to train models.
Telegram — only if you connected a bot as a lead source yourself: then we receive the messages sent to your bot.
We do not sell data and do not share it for advertising.
To provide the Service and perform the contract — the software working, payment, support.
To comply with the law — accounting and tax duties.
Our legitimate interest — security, abuse prevention, keeping the Service running.
As long as your workspace exists. After it is closed, working data is deleted within 30 days, and backups are overwritten within 90 days.
Payment records are kept for as long as tax law requires.
You may obtain a copy of your data, correct it, delete it, restrict or object to processing, and lodge a complaint with a data protection authority.
Export and deletion are available in the Account section. We answer written requests within 30 days.
We use only those without which signing in does not work: they hold your session and chosen language. There are no advertising or tracking cookies, which is why we do not ask for consent to them.
We will announce material changes to this policy by email at least 30 days in advance.