Privacy Policy

1. Who we are

Addys is operated by Renaissance AI Labs Ltd ("Rena Labs", "Addys", "we", "us"). For privacy questions or requests, contact us at help@addys.ai. We are the controller of the personal data described in this policy, except where we act as a processor on behalf of an organization that provides Addys to its members (see "Organization accounts" below).

2. Information we collect

Account information

When you create an account we collect your name, email address, and authentication details provided through our sign-in provider. If you join through an organization, we also collect the organization and role assigned to you.

We use Clerk to sign you in with Apple, Google, or a code sent to your email. Clerk receives your name, email address, and IP address, along with information about your device and an identifier specific to Addys on your iPhone, to keep your session secure. If you use Sign in with Apple with Hide My Email, we see only the relay address Apple gives us.

You can also add a phone number and choose your country in your profile in Settings. Both are optional, and we keep them with your account.

Meeting content

To do its job, Addys processes the audio, transcripts, and notes from meetings you ask it to join or record, along with the participants, titles, and times of those meetings.

Recordings you make on iPhone

When you tap Record, the Addys iPhone app records audio from your iPhone's microphone until you stop it, including while you use other apps; a Live Activity on your Lock Screen and in the Dynamic Island shows that it is recording. It also stops on its own after 150 minutes, after 60 minutes paused, or when your iPhone is running out of storage. Addys asks for microphone access during setup, or the first time you record if you haven't answered yet. The recording is kept on your iPhone until it has uploaded, and is then removed from the device. We transcribe it and use the audio and transcript to write your notes and tasks. You are responsible for telling the people you record and getting their consent where the law requires it (see our Terms).

Camera and photos

The iPhone app uses your camera and photo library only when you choose to take or attach an image, for example to a task. Only the images you pick are uploaded.

Tasks, chats, and routines

We keep what you type to Addys, such as the tasks you give it and your chats with it, the routines you set up, and the documents and images you attach, so Addys can do the work and show you its history.

Connected-tool content

When you connect a tool — such as email, calendar, messaging, or task systems — Addys reads the context it needs to act on your behalf (for example, message threads, events, and contacts) and prepares actions such as drafts. We only access the scopes you grant when you connect the tool, and only while the connection is active.

Addys remembers the people you work with, such as their names and email addresses, from the tools you connect, such as email and LinkedIn, so it can draft to the right person. The iPhone app does not access the contacts stored on your device.

Payments

When you buy a plan, you pay on a checkout page hosted by Stripe. Stripe collects your card and billing details; we never see or store your card number. We keep your plan, your subscription status, your invoices, and the history of the credits you use. On iPhone, buying a plan opens Stripe's checkout page in Safari; nothing is bought inside the app.

Notifications

If you allow notifications in the iPhone app, we store your device's Apple push token with the app version, iOS version, device model, and time zone, so we can tell you when drafts or notes are ready and when a task needs you or finishes. Reminders before a calendar meeting starts are scheduled on your iPhone and do not use this token. You can turn notifications off in iOS Settings at any time. Signing out or deleting your account removes the token.

Support, team, and affiliate requests

If you contact support, ask about a team plan, or apply to our affiliate program, we keep what you send — such as your name, email address, message, team size, and social media profiles — to reply to you.

Usage and technical data

We collect logs and device, browser, and diagnostic information needed to operate, secure, and improve the service. We use strictly-necessary cookies to keep you signed in, and the analytics and advertising cookies and local storage described below.

The apps send us error reports, such as a failed connection, how long it took, and the task it happened in, so we can fix problems. These are linked to your account and kept in our logs.

Product analytics and session recording

We use PostHog, a product analytics provider hosted in the United States, to understand how Addys is used on our website, in the web app, and in the desktop app. It records the pages and screens you open, the buttons and controls you click, and the actions you take, such as connecting a tool or sending a draft. It records that an action happened, not the content it acted on. In the apps this activity is linked to your account ID, email address, and plan. On our website it is not linked to an account, and we record the source that first brought you to Addys, such as a referring site or campaign.

PostHog receives your IP address with each event, and we keep it. On our website and in the web and desktop apps, PostHog also uses it to estimate your location — city, region, country, postal code, and approximate coordinates — and stores that location with your activity.

Our iPhone app. The Addys app for iPhone also uses PostHog. It records named product events, such as creating a task or sending a draft, and the names of the screens you open, linked to your account ID, email address, and plan. It does not make session recordings, record your taps automatically, or capture what is on your screen. Each event also carries your device model, iOS version, app version, language, time zone, screen size, and network type. The iPhone app turns off PostHog's location lookup, so its events carry your IP address but no location estimated from it. PostHog also gives each installation of the app a random identifier, which links its events together.

PostHog also makes session recordings: a reconstruction of the screen layout and your cursor movement, clicks, and scrolling, which we watch to find confusing or broken parts of the product. In the web and desktop apps, recordings do not contain your content. All on-screen text, everything you type, all images, and the labels and link addresses attached to on-screen elements are masked on your device before anything is sent, so meeting titles, transcripts, notes, drafts, names, and email addresses never reach PostHog. We do not capture browser console output or network activity in recordings. On our public website, recordings show the page text, which is the same for every visitor, and mask anything you type into a form. The iPhone app does not make session recordings.

We also use advertising pixels from Meta, X, Reddit, and TikTok on our public website, which set cookies to measure whether our ads led to a visit or a sign-up. These pixels do not run inside the web, desktop, or iPhone apps and never receive your meeting or connected-tool content. When you first sign in to the web or desktop app with a new account, our servers also report the sign-up to Meta and TikTok so they can measure our ads. The report contains a hashed (scrambled) copy of your email address and of your account ID, your IP address, your browser's user agent, and the identifiers their website cookies set in your browser, if any. The iPhone app never sends this report. The iPhone app contains no advertising SDKs, does not access your device's advertising identifier, and does not track you across other companies' apps or websites.

On our public website we also use Google Analytics, which sets cookies to count visits and to see which pages, sources, and campaigns bring visitors to Addys. It does not run inside the web, desktop, or iPhone apps.

3. How we use your information

We use the information above to:

• Provide the core features you ask for — joining and recording meetings, transcribing, summarizing, and drafting and taking actions across your connected tools.
• Process payments for the plan you choose and show you your billing history.
• Send you notifications you have allowed.
• Authenticate you, secure your account, and prevent abuse.
• Provide support and respond to your requests.
• Maintain, debug, and improve the service.
• Understand how Addys is used, through product analytics and masked session recordings, so we can find and fix what is confusing or broken.
• Measure the performance of our advertising, through the pixels on our public website and the sign-up reports from the web and desktop apps described above.
• Send you marketing emails: a welcome email when you create an account and, about three days later, an email asking how Addys is working for you, which also points you to our product updates. These emails do not have an unsubscribe link yet; to stop them, email help@addys.ai.
• Comply with legal obligations and enforce our Terms and Usage Policies.

We do not sell your personal data, and we do not use your meeting or connected-tool content to serve advertising.

4. AI models and your content

Addys uses large language models to understand meetings and generate drafts. To produce a result, your relevant content is sent to the AI providers that power those features.

• We do not use your content to train AI models.
• Our AI providers process your content only to return a result to Addys, under contractual terms that prohibit them from using it to train their own models.

5. Human access to your content

No person at Renaissance AI Labs Ltd reviews your meeting or connected-tool content as a matter of routine. A limited number of authorized staff may access it only when you ask us to (for example, to resolve a support issue), when strictly necessary to protect the security and integrity of the service, or when required by law. Our team does watch session recordings of the web and desktop apps, but because your content is masked on your device before a recording is made, those recordings show how the product was used and not what your meetings, messages, or drafts say.

6. Who we share it with

We share your information only in these cases:

• Service providers (sub-processors) who host, secure, and operate Addys on our behalf — such as our cloud hosting, authentication (Clerk), payments (Stripe), email (Resend), push notification (Apple), AI model, integration, product analytics (PostHog), and website analytics (Google Analytics) providers — under contracts that limit their use of the data to providing services to us.
• Advertising partners (Meta, X, Reddit, and TikTok), which receive information about visits to our public website through the pixels described above. Meta and TikTok also receive the sign-up reports from the web and desktop apps described above. They receive nothing else from inside the apps, and nothing from the iPhone app.
• The tools you connect, when you direct Addys to take an action (such as sending a drafted reply).
• Your organization, if you use Addys through an organization account, which may have access to content created under its workspace.
• Legal and safety, where we believe disclosure is required by law or necessary to protect rights, safety, or the integrity of the service.
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this policy.

7. Retention and deletion

We keep your information for as long as your account is active and as needed to provide the service, then delete or de-identify it within a reasonable period — typically within 90 days — after you delete it or close your account, unless a longer period is required by law. You can delete specific content, disconnect a tool, or request deletion of your account and associated data at any time using the in-app controls or by emailing help@addys.ai.

Meeting audio recordings and transcript files are kept until you delete your account. Deleting a meeting removes it, its notes, and its tasks and drafts from Addys, but not its audio recording or transcript file. A file you attach is kept for up to 40 days; what Addys writes about it stays in the task.

To delete your account in the iPhone app, open Settings, tap your profile, then tap Delete account. You are signed out on every device straight away. Your meetings, recordings, transcripts, tasks, drafts, and routines are then deleted, your connected tools are disconnected, your plan is cancelled, and your push tokens are removed.

Session recordings are deleted automatically no later than 90 days after they are made. Product analytics events are kept by PostHog for up to one year. Deleting your account also deletes the analytics profile linked to it from PostHog, with its events and session recordings; PostHog removes the events in a later scheduled clean-up rather than straight away. You can also email help@addys.ai at any time and we will delete the analytics profile and events linked to your account.

8. How we protect your information

We use technical and organizational measures designed to protect your data, including encryption in transit and at rest, access controls, and least-privilege practices. No system is perfectly secure, but we work to safeguard your content and to notify you of incidents where required by law.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to withdraw consent. You can exercise these by contacting help@addys.ai, and you can manage connected tools and remove Addys from a meeting directly in the app. We will not discriminate against you for exercising these rights. If you are in the EEA or the UK, you may also have the right to lodge a complaint with your local data protection authority. If you are a California resident, you may exercise the rights provided under the CCPA/CPRA.

10. International data transfers

We may process and store your information in countries other than the one you live in, including the United States. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

11. Organization accounts

If you use Addys through an organization (for example, your employer), that organization administers your account and may access, export, or delete content created under its workspace. In that case the organization is the controller of your data and its own privacy policy governs; we process the data on its behalf. Direct questions about your data to your organization first.

12. Children

Addys is not intended for, and may not be used by, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy as Addys evolves. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you. Your continued use of Addys after an update means you accept the revised policy.

14. Contact us

Questions about this policy or your data? Email help@addys.ai.