Privacy

Privacy Policy.

What we collect, why we collect it, where it lives, and how you stay in control — including how AppDeen handles data from your Google account.

Contact us

Effective date: October 13, 2026

AppDeen ("AppDeen," "we," "us," or "our") builds AI employees and agents that act on your instructions inside your own workspace. This Privacy Policy explains what information we collect when you use appdeen.ai and the AppDeen product (together, the "Service"), why we collect it, how it is used, where it is stored, and the rights you have over it. By using the Service, you agree to the practices described here.

1. Information We Collect

We collect the following categories of information, only as needed to operate the Service:

  • Account information — your name, email address, password (hashed, never stored in plain text), and billing details, collected when you sign up and used to create and secure your account and to process payment.
  • Workspace information — the company or team you belong to, workspace settings, and membership, used to keep your organization's data and colleagues' access scoped to that workspace.
  • Conversations and files — the messages you exchange with your AI employees and any files you upload or they produce, used to carry out the tasks you ask for and to show you a history of what was done.
  • Long-term memory — facts and preferences an agent is told to remember about you or a project, used so an agent does not need to be re-briefed every session. You can view and delete any remembered fact at any time.
  • Connector credentials — OAuth tokens and, where a service has no OAuth flow, API keys or connection strings for third-party services you choose to connect (for example Notion, Slack, or Google), used solely to let an agent act on that service on your behalf and never for any other purpose.
  • Voice clips — audio you or an agent generates when you use voice features, used to provide speech input and spoken responses.
  • Audit logs — a record of tool calls and actions taken by you or an agent (what was called, when, and by whom), used for security, for showing you what an agent did, and for troubleshooting.

We also collect standard technical information — IP address, browser type, device identifiers, and usage logs — to operate, secure, and improve the Service.

2. How We Use Your Information

We use the information above to provide, maintain, and improve the Service; to operate the agents and tools you configure; to secure your account and workspace; to communicate with you about the Service; and to comply with legal obligations.

We do not sell your personal information. We do not use your data for advertising, and we do not run ads. We do not use your conversations, files, memory, or connector data to train AI models — not our own, and not on behalf of any third party. Your data and memory stay private to your workspace: they are never shared with other customers.

3. Where We Store Your Information, and For How Long

We use a small number of infrastructure and model providers to run the Service, each processing only what is needed for its role:

  • AI model providers — process your conversations to power the AI models that run your AI employees: Alibaba Cloud (Qwen models, the default) and OpenRouter (models from Anthropic, OpenAI, and others, when a workspace chooses one).
  • AWS — stores files, transcripts, and backups, holds operational logs, and hosts supporting infrastructure.
  • DigitalOcean — hosts application servers, runs agent sessions, and stores account, workspace, memory, and audit-log data in managed PostgreSQL databases.
  • Composio — holds the connections to third-party services you connect (such as Gmail, Shopify, or Notion) and runs their tools when an agent uses them on your behalf.
  • ElevenLabs — processes voice clips to provide speech generation and transcription.

Each provider is bound by its own data-processing terms and is only permitted to use your data to provide its service to us — not for its own purposes such as training its own models on your content, except where you have separately agreed to that with the provider directly.

We retain account and workspace data for as long as your account is active. Conversations, files, audit logs, and voice clips are retained for as long as needed to provide the Service and are deleted, or anonymized, within 90 days of account deletion, except where we are required to keep records for longer to meet a legal obligation. Long-term memory is retained until you delete it or your account is deleted. Connector credentials are deleted immediately when you disconnect a service or close your account. Operational logs are kept for 90 days.

4. Google User Data

With your explicit authorization, AppDeen can connect to the following Google services on your behalf: Gmail, Calendar, Drive, Docs, Sheets, Contacts, Google Ads, and Search Console.

We access Google user data only to perform the actions you specifically ask an AI employee to carry out — for example, reading an email you asked about, drafting a calendar invite, or pulling a report from Search Console. Google data is never used for advertising, is never used to train AI models, and is never sold or shared with any third party except as needed to perform the action you requested.

Your Google OAuth token is encrypted at rest and is used only to make the API calls your instructions require. You can revoke AppDeen's access at any time from your workspace's connector settings, or directly at myaccount.google.com/permissions. Revoking access deletes the stored token immediately.

AppDeen's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. AppDeen Inside AI Assistants (Claude and Others)

You can connect AppDeen to an AI assistant that supports the Model Context Protocol, such as Claude. The assistant then calls AppDeen on your behalf, signed in as you, in the one workspace you chose when you connected, and only for what you ask it to do.

  • What the assistant sends us — which agent you asked for and the task you gave it, so we can return that agent's profile (the instructions your organization wrote and the notes it kept); notes an agent proposes for its memory, which wait for a person in your workspace to approve them; searches and file paths in your groups; and, when an agent uses a service connected to it in AppDeen, the tool and its details (for example, the email to draft). We do not receive or read your conversations with the assistant, its memory, its chat history, or files you upload to it.
  • What we keep — the name and return address of the app you connected, until you disconnect it; sign-in tokens, stored only as one-way hashes (access tokens last one hour, refresh tokens 30 days, and expired ones are deleted daily); an action waiting for your approval, for 15 minutes; memory notes an agent proposed, until a person approves or rejects them; and a log line per request (workspace, person, tool, time taken, and any error), kept for 90 days.
  • Who else handles it — Composio runs the tools of services connected to an agent, with the account connected in AppDeen, and the service itself (such as Gmail or Shopify) receives what the tool sends it. The maker of the assistant (for Claude, Anthropic) receives what AppDeen returns to it, under its own privacy policy.
  • Your controls — disconnect any connected app in AppDeen under Use in Claude, Connected apps; its access ends immediately. Deletes, and messages sent outside your workspace when your workspace requires it, wait for your approval before they run.

6. Security

We encrypt data in transit (TLS) and at rest, encrypt connector credentials with a dedicated key-management service, and restrict internal access to production data to the personnel who need it to operate the Service. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we work to keep these protections current.

7. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these rights directly in your workspace settings — including deleting a remembered fact, disconnecting a connector, or exporting a conversation — or by writing to hello@appdeen.ai. We will respond within a reasonable time and in line with applicable law.

8. Children

The Service is not directed to, and may not be used by, anyone under 16 years old. We do not knowingly collect personal information from children under 16. If we learn that we have, we will delete it.

9. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before the change takes effect. The "Effective date" above reflects the version currently in force.

10. Contact Us

Questions about this policy or your data can be sent to hello@appdeen.ai.