Information we collect
We collect information you provide directly, information created while you use Aubrey, and information made available by services you connect or message through Aubrey.
- Account and workspace information, including email address, authentication details, invitation codes, workspace names, plan or role metadata, and settings.
- Agent content, including prompts, messages, uploaded or forwarded content, generated responses, agent configuration, onboarding answers, memory, learned skills, lists, schedules, and conversation history.
- Email and messaging information, including messages sent to an Aubrey agent address, sender and recipient metadata, forwarding setup events, authorized collaboration-thread participants, Telegram or WhatsApp pairing details, and delivery status.
- Calendar and reminder information, including managed calendar events, reminders, recurring check-ins, private calendar feed links, timezone preferences, and schedule instructions.
- Integration information, including OAuth connection status, encrypted access credentials, API-key based configuration where supported, provider metadata, and data returned by connected services at your direction.
- Usage, device, log, and support information, including browser data, request metadata, error logs, run events, safety/audit records, and communications you send to us.
How we use information
- Provide, operate, secure, and improve Aubrey.
- Authenticate users, resolve tenants, enforce workspace access, and keep tenant-owned data scoped to the correct tenant.
- Process instructions, route messages, run agent tasks, generate responses, maintain conversation state, and carry out scheduled work.
- Store user-approved memory, preferences, skills, calendar items, lists, and other durable agent context.
- Send and receive email, Telegram, WhatsApp, calendar, and integration messages when you ask Aubrey to use those channels.
- Monitor reliability, prevent abuse, debug failures, enforce tool policies, and maintain safety/audit records.
- Communicate with you about your account, product updates, support, security, and policy changes.
- Comply with law, protect rights, and respond to lawful requests.
AI and model processing
Aubrey uses AI models and hosted runtime infrastructure to generate responses and perform tasks. To do that, Aubrey may send relevant prompts, conversation history, retrieved context, tool results, and task metadata to model providers or hosted execution services.
We aim to send only the context needed for the task and keep high-risk local tools disabled in hosted SaaS mode unless an audited sandbox or connector path is enabled. AI output can still be inaccurate, incomplete, or inappropriate for a decision without human review.
How we share information
We do not sell your personal information or use private agent content for third-party advertising. We share information only as needed to provide Aubrey, follow your instructions, operate the business, or comply with law.
- Service providers that host infrastructure, authentication, databases, object storage, email delivery, messaging gateways, analytics or reliability tooling, and AI model processing.
- Third-party services you connect or message through Aubrey, such as email, calendar, messaging, or integration providers.
- People you invite to shared agents, shared lists, shared conversations, or collaboration threads, according to the permissions and context of that shared surface.
- Legal, safety, and compliance recipients when we believe disclosure is required by law or needed to protect Aubrey, users, or the public.
- Successors in a merger, acquisition, financing, reorganization, or sale of assets, subject to this policy or a policy that provides materially similar protections.
Your choices and controls
- You can edit or delete agents, messages, memories, skills, lists, schedules, reminders, and calendar feed links where the product exposes those controls.
- You can revoke or rotate integration connections, disable private calendar feed links, remove invited contacts, and stop forwarding messages to Aubrey.
- You can request access, correction, export, or deletion of account data by contacting support@helloaubrey.com.
- Some data may remain in backups, audit logs, abuse-prevention records, legal records, or already-delivered messages for a limited period when retention is necessary.
Retention
We keep information for as long as needed to provide Aubrey, maintain security and auditability, comply with legal obligations, resolve disputes, and enforce agreements. When data is deleted, we remove it from active systems according to product behavior and let backup copies expire on their normal cycle unless we need to retain limited records for legal, security, or abuse-prevention reasons.
Security and tenant isolation
Aubrey is designed for hosted SaaS tenant isolation. Tenant-owned records are scoped by tenant, object storage keys include tenant and agent identifiers, credential material is not exposed to the frontend, and hosted tool access is routed through controlled provider and policy boundaries.
No online service can guarantee perfect security. You should avoid sending secrets or highly sensitive information unless you understand the risk and need Aubrey to process it for the task.
Children
Aubrey is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information to Aubrey, contact us so we can take appropriate action.
Changes to this policy
We may update this Privacy Policy as Aubrey changes. If we make material changes, we will provide notice through the product, by email, or by another reasonable method. The updated policy applies after the effective date shown on this page.
Contact
For privacy questions or requests, contact support@helloaubrey.com.