Who we are
Polytrope (polytrope.ai) runs this website and the Polytrope app. Polytrope is an invite-only beta. This policy explains what we collect, why, who else sees it and what you can ask us to do.
Questions or requests: write to abylay@polytrope.ai.
What we collect
Account. When you create an account we store:
- your email address;
- a name, which is taken from your email address by default;
- a hash of your password, made by our sign-in library. We never store the password itself;
- the invite code you used and who invited you;
- your time zone and language, which the app sends so that schedules and dates fit you.
Sign in with Google. If you sign in with Google we also store your Google account ID, email address, name and the web address of your profile picture. We ask Google only for the openid, email and profile scopes. See Google user data.
Guests. You can chat without an account. That starts an anonymous guest session. If you sign up afterwards, your guest chats move to your account. Guest use is limited per IP address per day, so we process IP addresses to apply those limits and to prevent abuse.
Your content. What you and your agents create or send us:
- chat messages and agent conversations;
- agent settings and the memory your agents keep;
- files, images and clips you upload or your agents make;
- approvals and what you decided;
- receipts: the steps of each run, with token counts and cost.
Connected services. When you connect a service such as Notion, GitHub, Slack, Linear, Stripe, Gmail or Google Calendar, we store the access tokens it gives us. They are encrypted at rest. We use them only to do what your agents do for you. Every send, post, payment or deletion asks you first, unless you have told that agent otherwise.
Devices. If you turn on notifications, we store your device’s push token, its platform and the device name it reports, so we can notify you of approvals and finished runs.
How we use it
- To run the service: sign you in, answer your chats, run your agents and show you receipts.
- To limit use fairly and to prevent abuse, including by IP address.
- To send you the notifications you turned on.
- To keep the service secure and working, and to restore it from backups.
We do not sell your data and we do not use it for advertising. We do not use your content or your Google data to train AI models.
Google user data
Polytrope’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Sign in with Google.
- We receive your Google account ID, email address, name and profile picture address, through the openid, email and profile scopes. We ask for nothing more to sign you in.
- We use them only to sign you in and to show your name and picture.
Gmail and Google Calendar. These are separate connections that you choose to make, and Google asks for your consent for each. Gmail lets your agents read your mail and write drafts. Google Calendar lets them read your calendar list, your events and when you are free or busy.
- We use what we receive only to do what you asked your agents to do, such as summarise your inbox, draft a reply or prepare a brief. That is the feature you see in the app.
- To do that, the part of your mail or calendar an agent is working on is sent to the AI model that runs the request. See Who receives your data.
- Nothing is sent from your mailbox without your approval, unless you have told that agent otherwise.
- You can disconnect Gmail or Google Calendar in the app, or remove Polytrope’s access in your Google account.
What we do not do with Google user data.
- We do not sell it.
- We do not use it for advertising, including retargeting or interest-based ads.
- We do not use it to develop, improve or train AI models.
- We do not allow people to read it, except with your consent, to investigate abuse or a security problem, or to follow the law.
- We do not transfer it to others, except to provide the features you asked for, to follow the law, or as part of a merger or sale where you are told first.
Cookies and browser storage
Polytrope sets only the cookies and storage it needs to work:
- Session cookie. Set on our api host to keep you signed in, including as a guest. It lasts up to 30 days and renews as you use the service.
- Signed-in hint cookie. It tells our pages that an account is signed in, so the site can show Open chat in place of Start free. It holds no personal data and expires when your session does.
- Browser storage. Your choice of Night or Day, and whether the sidebar is collapsed, are kept in your browser’s local storage. They never leave your device.
There are no analytics, advertising or tracking cookies, and no third-party cookies. Our pages load nothing from other sites: fonts and scripts come from polytrope.ai.
How long we keep it
- Account data and content are kept while your account exists.
- Database backups are kept for 14 days.
- To delete your account, email abylay@polytrope.ai. We delete the account and its content within 30 days, and the backups that held it age out 14 days after that.
Your rights
You can ask us to give you a copy of your data, to correct it, to delete it or to stop using it in a way you object to. Write to abylay@polytrope.ai from the email address on your account and we will answer.
Polytrope is not intended for anyone under 16. If you think a child has created an account, tell us and we will delete it.
Security
Tokens for connected services are encrypted at rest, and passwords are stored only as hashes. No system is perfectly secure, so we keep only what the service needs.
Changes to this policy
If we change this policy we will post the new version here and update the date at the top. If a change affects how we use your data, we will say so on the site before it takes effect.
Contact
abylay@polytrope.ai. Polytrope, polytrope.ai.