Privacy Policy

The short version

• We collect what we need to run Dustav.com for your business — including the email it reads for you — and you can see most of it in the app.
• We don’t sell your data, show you ads, or train AI models on it.
• The AI itself is run by Anthropic (the makers of Claude) on our behalf; they don’t train on it either.
• We do store the emails Dustav.com reads, encrypted, so it can work your inbox over time — and you can delete it all, for real, whenever you like.

What we collect

• Account info — your email address and your preferences (such as theme and notification settings).
• Connected Google account — when you connect Google (Gmail, and optionally Google Calendar), we store an encrypted access credential and your connected email address so Dustav.com can work your inbox and show your schedule. See “Connecting your Google account” below for exactly what we access and keep.
• The email Dustav.com reads — to draft replies that remember the last exchange, keep your books, and reconcile an order against its receipt, Dustav.com keeps the emails it reads: the message text, attachments, thread history, and the replies it drafts for you. This is stored encrypted at rest and is yours to read, export, and delete.
• What Dustav.com builds — your contacts, the workflow tables you set up (rows collected from your mail — orders, sign-ups, whatever you’ve defined), the durable facts it keeps about your business, your filed documents and files, calendar entries and proposals, drafted replies, and your chat with it.
• Calendar data — if you connect Google Calendar, a copy of the events on the calendars you choose to show, so your schedule renders beside your mail. See “Connecting your Google account” below.
• Operational data — basic logs and counters needed to run and protect the service (security and error logs, and usage/cost accounting).
• Billing info — your prepaid balance and a customer reference from our payment processor. We do not store your card number — the payment processor handles that.

We don’t intentionally collect sensitive categories of personal data; please don’t connect an inbox or put information into Dustav.com that you don’t have the right to process.

How we use it

We use your data to run Dustav.com for you — read your inbox, draft your replies, keep your books, file your mail, remind you of dates, keep the service secure, and account for cost. That’s it. We don’t use it to train AI models, and we don’t sell or rent your personal data to anyone.

Connecting your Google account (Gmail and Calendar)

Connecting your Gmail is how Dustav.com works your inbox. When you connect it, you grant Dustav.com access to: read your mail and its attachments; file messages into your labels and archive them; send a reply — but only the one you review and hit send on; and read the display name on your account so replies go out as you. You can disconnect at any time from the app, which revokes our access.

What we read: the messages Dustav.com works — both incoming mail and the replies you send — and their attachments (a PDF invoice, an order sheet, a schedule). What we keep: we store that email content, encrypted — including a plain-text extraction of readable document attachments (a spreadsheet’s rows, a Word document’s text) — so Dustav.com can do its job over time (draft a reply that remembers the thread, reconcile a payment against its order, show you what it read). What happens when you disconnect: revoking access stops Dustav.com from reading your inbox and removes the stored access token; the email content it already read stays with your account (so you can reconnect without starting over). To remove that content, delete your account — which erases everything — or ask us and we'll delete it.

Google Calendar (optional). If you also grant calendar access, Dustav.com lists your calendars so you can choose which to show, and keeps a copy of the events on the calendars you tick so your schedule renders inside the app and stays current with your real calendar. Writing works like sending: when Dustav.com finds a date in your mail it proposes the event, and it lands on your calendar only when you explicitly confirm it — an event is created, moved, or removed by your own action, never by Dustav.com on its own. When a meeting is agreed in your email, Dustav.com can prepare a calendar invitation — the event with that person on it — but the same rule applies: your explicit confirmation is what creates the event and sends the invitation, and Dustav.com never invites anyone on its own. It will only ever propose inviting an address that appears in that email thread or that you gave it yourself. Unticking a calendar removes its events from the app; disconnecting works the same way as Gmail above.

You’re the one who acts. Dustav.com drafts, files, and proposes, but nothing is sent — and nothing lands on your calendar — without you reviewing it and choosing to commit it, and filing is your reversible action.

Limited Use. Dustav.com’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use your Gmail data for advertising, we do not sell it, and we do not use it to train AI models. Humans do not read your mail except: where you ask us to or agree to it (for example, the hands-on onboarding and support described in “Human access” below); where necessary to investigate abuse or keep the service secure; where required by law; or in aggregated/anonymized form.

The AI provider (Anthropic)

Dustav.com runs on Claude, made by Anthropic. There’s no AI key for you to supply — we run the AI for you on our own account — so to generate a reply or read an email, the relevant content is sent to Anthropic to process on our behalf, under Anthropic’s commercial terms. Anthropic does not train its models on this content. We attach an opaque account identifier (never your name or email) to these requests so Anthropic can act on a specific tenant in the rare case of abuse. You don’t manage or pay Anthropic directly — that’s handled through your metered Dustav.com balance.

Human access

Dustav.com is invite-only, and we set up each business by hand. As part of onboarding, support, and keeping the service working correctly, a member of our team may access your account and the email-derived data Dustav.com holds — for example, to confirm it’s reading your inbox correctly, to diagnose a problem, or to improve how it handles your mail. By connecting your inbox you consent to this access for those purposes. We keep it to what’s needed, and we never sell it, use it for advertising, or train AI on it.

Service providers we share with

To run Dustav.com we rely on a few service providers, and share only what each needs:

• Anthropic — runs the AI (Claude) that reads your mail and drafts your replies, on our platform account and under Anthropic’s terms, as described above.
• Google — when you connect your Google account, Google serves your messages and calendar events to us and applies the labels, sends, and calendar changes you authorize, through the Gmail and Google Calendar APIs under Google’s own terms.
• Payments — our payment processor (Stripe) handles your top-ups and card details to fund your balance, under its own terms. We don’t see or store your full card number.
• Email delivery — when Dustav.com emails you (a reminder, a heads-up), our email provider processes the message and your address to deliver it.
• Hosting and database — the application runs on DigitalOcean and the database is MongoDB Atlas; they store the data described above on our behalf, under their own terms.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights and safety of our users and the public.

Cookies

We use a small number of first-party cookies necessary to run the service — chiefly a session cookie to keep you logged in, a token that protects forms from cross-site request forgery, and a few preference cookies that remember small choices on your device (your theme, a sort order, which tab you had open). We don’t use third-party advertising or tracking cookies.

How we protect it

We build for security: a strict content-security policy, protection against cross-site request forgery, and encryption at rest of your most sensitive data — your Gmail access credential and the email content Dustav.com stores. No system is perfectly secure, but we build to reduce risk and keep our attack surface small.

Your choices and rights

• See it — the app shows you what Dustav.com did (your inbox, books, and drafts) and what it knows (the facts it keeps), any time.
• Change it — ask Dustav.com in chat to update or remove things it remembers, and it will.
• Disconnect — disconnect Gmail any time; this revokes our access and stops Dustav.com from reading your inbox (your data stays, so you can reconnect later).
• Delete it — delete your account from settings; this removes your data, including everything Dustav.com read and built. You can also email us to request deletion.
• Notifications — turn Dustav.com’s emails off any time from settings or the unsubscribe link in any email.

Depending on where you live, you may have additional rights to access, correct, export, or delete your personal data. To make a request, email hello@dustav.com and we’ll respond as required by applicable law.

Data retention

We keep your data for as long as your account is active or as needed to provide the service. Disconnecting Gmail stops the reading and drops the access token, but leaves the content in place so you can reconnect; when you delete your account — or ask us to delete your data — we remove your associated content, including the email content Dustav.com read. Some limited records may persist briefly in backups or where retention is required by law, after which they are deleted.

Children

Dustav.com is a business tool and is not directed to children under 13; we don’t knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us at hello@dustav.com and we’ll delete it.

Changes to this policy

We may update this policy as the service evolves. We’ll change the effective date above and, for material changes, give notice where appropriate.

Contact

Questions about your privacy? Email us at hello@dustav.com.