Privacy Policy
Last updated
Confidae is an AI assistant that helps you manage your email, operated by JustBard Technologies. This policy explains what we collect, why, who we share it with, how long we keep it, and the control you keep over it. It applies to the Confidae application, the confidae.com website, and the email we send you about the service.
At a glance
| Question | Answer |
|---|---|
| Do you read my email? | Confidae's software processes your mail to provide the features you ask for. People at Confidae do not read your mail except in the narrow cases listed below, and never for advertising or model training. |
| Do you train AI on my email? | No. Your content is not used to train or develop any AI model, ours or anyone else's. |
| Do you sell my data? | No. We do not sell personal information. If you come to Confidae by clicking a link to Confidae on Facebook or Instagram, such as one of our ads or a post on our Page, and then create an account, we tell Meta that a sign-up happened, which California law counts as sharing. “Who we share it with” below says exactly what is sent and how to opt out. |
| Does Confidae send email as me? | Only a message you have explicitly approved, one at a time. There is no bulk send, no scheduled send, and no autonomous send. |
| Can I delete everything? | Yes. Disconnecting a mailbox revokes our access and deletes the stored credential. Deleting your account erases your data across our systems. |
| Where does the AI run? | Inside infrastructure we operate and control. Your content is not sent to any third-party AI service. |
What we collect
Account information. Your name and email address, and a password credential if you sign in with one. If you join through an invitation, the organisation that invited you.
Google user data, when you connect a mailbox. You grant access through Google's OAuth consent screen. We request only the scopes the features below need, and nothing we do not use.
If you sign up with Google, that single consent both creates your account and connects the mailbox you signed up with, so the assistant works from the first screen. If you sign up with an email address and password instead, nothing is requested from Google until you choose to connect a mailbox, and you can hold an account without ever connecting one. Google's consent screen lets you decline individual items, and Confidae uses only what you actually grant.
Booking details, from someone who books time with you. If you publish a booking link, whoever uses it gives us their name, their email address, an optional note, and the time they picked. They do not have a Confidae account, so what we do with that is set out separately below, under “If someone books time with you”.
| Scope | What it lets Confidae do |
|---|---|
| Gmail modify | Read your messages and threads, and change their state (labels, read, archive) |
| Gmail send | Send a specific draft you have approved |
| Gmail settings (basic) | Read your Gmail signature, and list, create and remove Gmail filters you have approved |
| Contacts (read only) | Look up people you have saved as contacts |
| Other contacts (read only) | Look up people you have corresponded with but not saved |
| Calendar (read only) | Read your calendars and events |
Content derived from your mailbox. Message content and metadata, thread summaries, triage decisions, briefings, drafts we prepare for your approval, assistant conversation history, and the contact and preference notes the assistant keeps so it can work the way you want.
Payment information. Handled by Stripe. We receive billing identifiers, plan and subscription status, and what we need to issue receipts. We do not receive or store your full card number.
Technical and usage data. IP address, browser and device information, timestamps, and application logs generated when you use the service. If you arrive through a link that carries campaign tags (for example, a link in one of our ads or posts), we record those tags with your new account so we know which campaigns bring people to Confidae; they stay with Confidae and are never shared.
Website analytics, before you sign in. On the public pages of confidae.com that you can see before signing in, such as the home page, the page for lawyers, and the sign-up, sign-in, password reset, email verification and booking pages, we use JstVerify, website analytics operated by our parent company, JustBard Technologies, to understand how those pages are used and to find and fix problems with them. It records the pages you visit, your device and browser type (browser, operating system, language and window size), the time of your visit, a random visit identifier, and technical details of any error a page hits (the error message, where in our code it happened, the page address and the page that referred you, and recent warnings and failed requests on that page). It also times the requests a page makes, recording each one’s address, response status and duration, so that a slow or failing request can be followed to the part of our service that handled it. Every page and request address it records has its query string and fragment removed. On the home page only, it also records a session replay: the page as you saw it, with your scrolling, mouse movements and clicks, and with every input field masked so that nothing you type is recorded.
JstVerify does not store your IP address. It uses it once per visit to estimate your approximate location (country, region, city, postal code and approximate coordinates) through its geolocation provider, ip-api.com, and keeps that location and a one-way identifier derived from your address, which cannot be turned back into it.
JstVerify’s website analytics never runs once you are signed in or anywhere inside the Confidae application, and never on the page that completes a Google sign-in or on the page for changing or cancelling a booking. It never receives your mail, your calendar, your contacts, or anything else from your Google account, and it is not linked to your Confidae account: we never give it your name, your email address or your account identifier. We do not sell this data or use it for advertising. To turn it off, see “Cookies and browser storage” below.
Server monitoring. Our servers send JstVerify technical performance data about the requests they handle, whether or not you are signed in (which of our services handled a request and which outside services it called, how long each step took, and the type of any error), never the content of your mail, calendar, messages or AI requests, and nothing from your Google account.
Activity log. An append-only record of every action Confidae takes on your behalf. It exists so you can audit us, and you can read it in the product.
Support communications. What you send us at support@confidae.com.
Why we use it
- To provide the features you ask for: organising mail, preparing briefings, drafting replies for your approval, answering questions about your inbox, managing labels and filters, and reading your calendar.
- To keep the service secure, prevent abuse, and investigate incidents.
- To bill you and keep the financial records the law requires.
- To support you when you contact us.
- To diagnose faults and keep the service reliable.
- To send you service messages, such as security alerts, billing notices, and material changes to this policy.
- To measure which of our ads and posts on Facebook and Instagram lead to sign-ups, as described under “Who we share it with”.
- To understand how the public pages of our website are used before you sign in, and to fix problems with them, as described under “Website analytics, before you sign in”.
- To comply with the law and enforce our terms.
We do not use your mail, your Google data, or your account details for advertising, and we do not build profiles of you for anyone else's purposes. The one advertising-related use is the sign-up measurement described under “Who we share it with”, which uses only a click identifier, your IP address and your browser type.
How Google user data is used (Limited Use)
Confidae's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We limit our use of Google user data to providing and improving the user-facing features that are visible in the Confidae interface.
- We do not transfer Google user data except to provide or improve those features with your consent, for security purposes such as investigating abuse, to comply with applicable law, or as part of a merger or acquisition after notice to you and your consent where required.
- We never use or transfer Google user data to serve advertising, including personalised, retargeted, or interest-based advertising.
- We do not allow humans to read your Google user data except in the cases set out below.
- Google user data, and anything aggregated, anonymised, or derived from it, is not used to train or develop generalised or non-personalised AI or machine learning models.
When a person may see your data
A person may access your mail content only when one of these is true:
- You have given your affirmative agreement to view specific messages or data, for example when you ask us to investigate a problem with a particular thread.
- It is necessary for security purposes, such as investigating abuse or a suspected compromise.
- It is required to comply with applicable law.
- The data has been aggregated and de-identified, and is used for internal operations.
Access of this kind is limited to staff who need it, and it is recorded.
How the AI works
When you ask for a briefing, a draft, or an answer, the relevant content is processed by a large language model running inside infrastructure we operate and control. The inference service does not retain your request or the response, and does not use either to train models. Your content is not sent to any third-party AI service, and model output is generated for your request alone.
AI output can be wrong. Drafts are prepared for your review, and nothing is sent without your explicit approval of that specific message.
Who we share it with
We do not sell your personal information. We share it only as follows.
| Who | Why | What they process |
|---|---|---|
| Our cloud infrastructure provider | Hosting, compute, storage, AI inference, encryption, email delivery | All Confidae-held user data, within infrastructure we operate and control |
| The source of your mail, calendar, and contacts data, under your OAuth grant | Gmail content and metadata, Calendar, and Contacts, per the scopes you granted | |
| Stripe | Payment processing and billing | Billing identifiers and payment data. No mail content. |
| Meta (Facebook and Instagram) | Measuring which of our ads and posts lead to sign-ups, only when you arrived by clicking a link to Confidae on Facebook or Instagram, such as one of our ads or a post on our Page | The click identifier Meta added to the link, your IP address, and your browser type. Never your email address, your name, or anything from your Google account or your mailbox. |
| JstVerify, website analytics operated by our parent company, JustBard Technologies | Understanding how the public pages of our website are used before you sign in, finding problems with them, and monitoring the performance and errors of our servers | From the public pages: pages visited, device and browser type, a random visit identifier, approximate location estimated from your IP address (JstVerify uses ip-api.com as its geolocation provider), error details, the address, status and timing of each request a page makes, and on the home page a session replay with every input field masked. From our servers: which of our services handled each request and which outside services it called, how long each step took, and the type of any error. Never your account details, your mail, or anything from your Google account. Not used for advertising and not sold. |
Ad measurement. When you arrive at Confidae by clicking a link to Confidae on Facebook or Instagram, such as one of our ads or a post on our Page, and then create an account, we tell Meta that a sign-up happened, using only the click identifier Meta added to the link plus the technical details needed to match it (your IP address and browser type). We never send Meta your email address, your name, or any information from your Google account or your mailbox. This lets us measure which of our ads and posts lead to sign-ups. It happens once, when the account is created, and it uses no cookies or browser storage. If you did not arrive that way, nothing is sent.
We name our cloud infrastructure provider by category rather than by brand on this page, and we will give you the full named list, with the data classification for each, on request at support@confidae.com.
We keep this list current and update it before a new provider goes live. We may also disclose information when required by law, to respond to lawful requests, to enforce our terms, or to protect the rights, safety, or property of our users, the public, or Confidae. If Confidae is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, and we will give you notice before your information becomes subject to a different privacy policy.
Selling and sharing. We do not sell personal information, and we have not done so in the preceding twelve months. The ad measurement above is the one way we share personal information for cross-context behavioural advertising, as California law defines those terms; before we added it, we did not share personal information for advertising at all. Confidae honours Global Privacy Control: when your browser sends that signal, we do not pass the click identifier on at all. You can also use the “Do not share my information” link at the foot of our home, sign-up, sign-in, password reset, email verification and booking pages before you sign up, and nothing will be shared for the rest of that visit (until you reload or close the page). The same link also turns off our website analytics for that visit. Because the measurement is sent once, when your account is created, there is nothing further to stop afterwards, and it never includes your email address, your name, or any information from Google. Questions about this are welcome at support@confidae.com.
If someone books time with you
If you publish a booking link, anyone with that link can book a time without creating a Confidae account. We ask them for their name, their email address, and optionally a short note about the meeting, and we record the time they chose.
That information is used to create the meeting and nothing else. It goes to you, because the meeting is with you, and to Google Calendar, which sends the invitation. It is not shared with anyone else, it is not used to train AI models, and it is not used to market anything to them.
We keep a booking for as long as you have a Confidae account. Deleting your account deletes the bookings made through your link along with everything else. Someone who booked can also ask us to erase their record sooner, and the paragraph below says how.
If you are the person who booked, the confirmation email and the calendar invitation both contain a link that lets you change or cancel the meeting without signing in to anything. That link is how we recognise you, because you have no account for us to check. Cancelling removes the meeting from both calendars. If you also want the record of it erased from our systems, email support@confidae.com with that link and we will delete it.
How long we keep it
| Data | How long |
|---|---|
| Account profile | For the life of your account |
| Mailbox credentials | Until you disconnect the mailbox or delete your account, whichever is first |
| Mail threads and their summaries | Deleted automatically once a thread has had no activity for your plan's retention period: 180 days on the Solo plan, 730 days (24 months) on the Professional plan. A thread still waiting on you, or with a draft in progress, is kept. Also deleted when you disconnect the mailbox or delete your account, if that comes first. |
| Briefings and drafts | While your account is active, and until you delete your account or disconnect the mailbox |
| Assistant conversation history | While your account is active, and until you delete it. We do not expire chat history on a timer, because it exists only here and expiring it would destroy the only copy. |
| Assistant memory (contacts and notes) | Until you delete it |
| Activity log | For the life of the account, so the record of what we did stays auditable by you |
| Short-lived operational data | Expires automatically, typically within hours |
| Bookings made through your booking link | For the life of your account, or until the person who booked asks us to erase their record. See “If someone books time with you” above. |
| Billing records | Held by Stripe for as long as tax and accounting law requires |
| Website analytics (public pages, before you sign in) | Only as long as we need it to understand and improve our website. We delete it when it is no longer needed for that purpose. |
| Server monitoring data (JstVerify) | Only as long as we need it to find and fix problems with the service. We delete it when it is no longer needed for that purpose. |
How mail expiry works. The retention period for a mail thread is counted from the last activity on it, such as a new message arriving, so a conversation you are still having is not removed. When the period passes with no activity, the thread and its summary are deleted from our systems, usually within a few days; your mail in Gmail is not touched. A thread that is still waiting on you, or that has a draft in progress, is not deleted on this timer. Every new account starts on the Solo plan, so the 180-day period applies unless you are on Professional. If we cannot tell which plan applies to an account, we use the longer period.
Deleting your account erases your data across our systems. That is the guaranteed erasure path and it is available to you now.
How your data is protected
- All user data is encrypted in transit and at rest.
- Our databases are encrypted with a key we manage.
- The credentials that let Confidae reach your mailbox are encrypted under a key unique to your account, and are never stored or written to logs in plain text.
- Disconnecting a mailbox revokes the grant with Google and deletes the stored credential.
- Access to production systems is restricted and logged.
- We maintain an incident response process, and we will notify you and any regulator as the law requires if a breach affects your information.
No system is perfectly secure, and we cannot guarantee absolute security.
Your rights and controls
In the product, at any time, you can:
- Review the activity log of everything Confidae has done.
- See and delete what the assistant remembers about you and your contacts.
- Disconnect a mailbox, which revokes our access and deletes the credential.
- Delete your account, which erases your data.
Depending on where you live, you may also have the right to know what we hold and get a copy of it, to correct it, to delete it, to restrict or object to certain processing, to receive it in a portable format, to opt out of the sale or sharing of personal information (we do not sell it, and the one way we share it, ad measurement, is explained under “Who we share it with” with how to opt out), and to withdraw consent. We will not treat you differently for exercising any of these rights.
To exercise them, email support@confidae.com. We will verify your identity, usually by confirming control of the account email, and respond within the time the applicable law requires.
Cookies and browser storage
Inside the Confidae application we use only browser storage that is strictly necessary to operate the service: keeping you signed in, maintaining your session, and remembering local preferences such as your theme and whether you have dismissed a banner. We do not use advertising cookies, and we do not use third-party tracking cookies. The ad measurement described above uses no cookies or browser storage: the click identifier is held only by the open page, and is gone when you reload or close it.
On the public pages before you sign in, our website analytics (JstVerify, described under “What we collect”) keeps a few entries in your browser’s storage so that several page views count as one visit. It sets no cookies. In local storage: a random visit identifier (jstverify_session_id); the times of your last activity and of the last data sent (jstverify_last_activity, jstverify_last_send); a marker that your location has been looked up for this visit (jstverify_client_ip_sent); a list of open tabs, so that only the last one closed ends the visit (jstverify_tabs); and copies of the settings the service was given (jstverify_domain_status, jstverify_allowed_paths, jstverify_disallowed_paths, jstverify_visitor_tracking, jstverify_error_tracking, jstverify_sdk_debug). In session storage, which your browser clears when you close the tab: a random identifier for the tab (jstverify_tab_id). None of these holds anything about your account or your mail, and none is needed to show you the page. We remove them when you sign in.
Turning website analytics off. If your browser sends a Global Privacy Control signal, we never load JstVerify, so nothing is recorded or stored. You can also use the “Do not share my information” link at the foot of our home, sign-up, sign-in, password reset, email verification and booking pages: it stops JstVerify straight away, removes the entries above, and keeps it off for the rest of that visit (until you reload or close the page). Global Privacy Control is the way to keep it off for every visit.
Children
Confidae is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact support@confidae.com and we will delete it.
Changes to this policy
We will update this policy when our practices change, and we will change the date above. If a change is material, we will give you notice in the product or by email before it takes effect.
Contact
Questions about this policy or your data: support@confidae.com.