Privacy Policy
Last updated: 29 June 2026 · Singapore (PDPA)
Plain-English summary: you own your data, you can export or delete all of it any time, we hold as little as possible, and we never see your card details. We can’t run an AI assistant without processing what you send it — so here’s exactly what that means.
What we collect
Only what you give us: the notes, voice, and messages you capture; messages from the WhatsApp chats you choose to connect; emails you forward to your private capture address; your account email; and items you ask the butler to track (tasks, watchlist). If you upload a chat export to teach the butler your writing style, we keep only a small sample of your own messages, short snippets of the messages you were replying to, and the style summary — the export itself is read once and discarded. If you record a conversation with the meeting recorder, the audio is transcribed and discarded — only the transcript and summary are kept, and you can delete them anytime. If you connect optional integrations (bank, email, calendar), only what those features need.
How we use it & who processes it
To run the assistant: we send relevant content to AI providers to triage, summarise, draft, and answer — Anthropic (Claude) and OpenAI (search embeddings). Other processors, only for the feature you use: Groq (voice transcription), Apify (shopping prices), data.gov.sg (public property prices), Resend (login emails), Stripe (payments, once paid plans launch — they’ll handle your card; we never see it). Hosting: Supabase (database) and Fly.io (servers). We do not sell your data or use it to train models.
What we keep, and for how long
We keep as little as possible. One-off lookups (shopping, flights, contractors, renovation) are processed and not stored. Your captures stay until you delete them. WhatsApp message history is auto-purged after a short retention window. You can wipe everything at any moment (below).
Your rights
Access & export: download everything we hold from Settings. Deletion: erase your account and all data from the same page — it’s immediate and irreversible. Under Singapore’s PDPA you may also withdraw consent and request correction.
Security
Data is encrypted in transit and at rest, and isolated per user with row-level security so one account can never see another’s. No system is perfectly secure, but we minimise what we hold so there’s little to lose.
Contact
Questions or requests: hello@aibutler.site.
We keep this policy in plain English on purpose. If anything is unclear, email us and we’ll explain.