Privacy Policy

We use your information to:

• Provide, maintain, and improve the Service
• Authenticate your identity and secure your account
• Execute tasks and actions you request
• Connect with third-party services you authorize
• Send you notifications related to your tasks and approvals
• Diagnose technical issues and improve reliability
• Understand usage patterns in aggregate to improve the product

We do not use your personal information for advertising. We do not build advertising profiles. We do not sell or rent your personal information to anyone.

Demi uses artificial intelligence to help you manage tasks, draft communications, and plan your day. When you use these features, your task descriptions and relevant context are processed by AI models to generate responses and take actions on your behalf.

We use third-party AI providers (such as Anthropic) to power these features. When your content is sent to an AI provider for processing, it is transmitted securely and is subject to the provider's data processing terms. These providers do not use your data to train their models.

We do not use your personal content to train AI models. Your tasks, files, and communications remain your own and are not used as training data.

We share your information only in the following limited circumstances:

• Service providers — We work with trusted third-party providers who help us operate the Service (cloud hosting, authentication, error monitoring). These providers are contractually bound to use your data only to provide services to us and to protect your information.
• Connected services — When you connect third-party services (such as Google), your data is shared with those services as needed to perform the actions you request, subject to their own privacy policies.
• Legal requirements — We may disclose your information if required by law, legal process, or a valid government request. We will notify you of such requests when legally permitted to do so.
• Business transfers — If the Company is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

We do not sell your personal information. We do not share your personal information with third parties for their marketing purposes.

Your data is stored on secure, managed infrastructure. We use encryption in transit (TLS) and implement access controls, monitoring, and audit logging to protect your information. Connected service credentials (such as OAuth tokens) are stored in encrypted form.

While we take reasonable measures to protect your data, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security, but we are committed to protecting your information using industry-standard practices.

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data — Retained while your account is active, deleted within 30 days of account closure
• Tasks and files — Retained while your account is active, deleted within 30 days of account closure or upon your request
• Voice recordings — Processed for transcription and not retained after the transcription is complete
• Usage analytics — Retained in aggregate form for up to 90 days
• Audit logs — Retained for up to 12 months for security and compliance purposes

You can request deletion of your data at any time by contacting us. We will process deletion requests within 30 days, except where retention is required by law.

You have the following rights regarding your personal information:

• Access — You can request a copy of the personal information we hold about you
• Correction — You can update your account information at any time through the Service
• Deletion — You can request deletion of your account and associated data
• Portability — You can request an export of your data in a standard format
• Revoke permissions — You can disconnect third-party services and revoke agent permissions at any time from your account settings
• Opt out of analytics — You can opt out of Google Analytics across all sites using the Google Analytics Opt-out Browser Add-on. You can also request that we stop collecting usage analytics for your Demi account by contacting us.

To exercise any of these rights, contact us at the address below. We will respond to your request within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale of your personal information — we do not sell your personal information
• The right to non-discrimination for exercising your privacy rights

The Service is operated from the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure that your data receives an adequate level of protection regardless of where it is processed.

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete that information. If you believe a child has provided us with personal information, please contact us.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means at least 30 days before the changes take effect. Your continued use of the Service after the changes take effect constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us at: