Privacy Policy

The short version

• We collect what we need to run Dustav.com for your business — including the email it reads for you — and you can see most of it in the app.
• We don’t sell your data, show you ads, or train AI models on it.
• The AI itself is run by Anthropic (the makers of Claude) on our behalf; they don’t train on it either.
• We do store the emails Dustav.com reads, encrypted, so it can work your inbox over time — and you can delete it all, for real, whenever you like.

What we collect

• Account info — your email address and your preferences (such as theme and notification settings).
• Connected email — when you connect a Google (Gmail) account, we store an encrypted access credential and your connected email address so Dustav.com can work your inbox. See “Connecting your Gmail” below for exactly what we access and keep.
• The email Dustav.com reads — to draft replies that remember the last exchange, keep your books, and reconcile an order against its receipt, Dustav.com keeps the emails it reads: the message text, attachments, thread history, and the replies it drafts for you. This is stored encrypted at rest and is yours to read, export, and delete.
• What Dustav.com builds — your books (contacts, income, expenses, what shipped), the durable facts it keeps about your business, calendar entries, drafted replies, and your chat with it.
• Operational data — basic logs and counters needed to run and protect the service (security and error logs, and usage/cost accounting).
• Billing info — your prepaid balance and a customer reference from our payment processor. We do not store your card number — the payment processor handles that.

We don’t intentionally collect sensitive categories of personal data; please don’t connect an inbox or put information into Dustav.com that you don’t have the right to process.

How we use it

We use your data to run Dustav.com for you — read your inbox, draft your replies, keep your books, file your mail, remind you of dates, keep the service secure, and account for cost. That’s it. We don’t use it to train AI models, and we don’t sell or rent your personal data to anyone.

Connecting your Gmail (Google)

Connecting your Gmail is how Dustav.com works your inbox. When you connect it, you grant Dustav.com access to: read your mail and its attachments; file messages into your labels and archive them; send a reply — but only the one you review and hit send on; and read the display name on your account so replies go out as you. You can disconnect at any time from the app, which revokes our access.

What we read: the messages Dustav.com works — both incoming mail and the replies you send — and their attachments (a PDF invoice, an order, a schedule). What we keep: we store that email content, encrypted, so Dustav.com can do its job over time (draft a reply that remembers the thread, reconcile a payment against its order). What happens when you disconnect: revoking access stops Dustav.com from reading your inbox and removes the stored access token; the email content it already read stays with your account (so you can reconnect without starting over). To remove that content, delete your account — which erases everything — or ask us and we'll delete it.

You’re the one who acts. Dustav.com drafts, files, and books, but nothing is sent without you reviewing it and choosing to send, and filing is your reversible action.

Limited Use. Dustav.com’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use your Gmail data for advertising, we do not sell it, and we do not use it to train AI models. Humans do not read your mail except: where you ask us to or agree to it (for example, the hands-on onboarding and support described in “Human access” below); where necessary to investigate abuse or keep the service secure; where required by law; or in aggregated/anonymized form.

The AI provider (Anthropic)

Dustav.com runs on Claude, made by Anthropic. There’s no AI key for you to supply — we run the AI for you on our own account — so to generate a reply or read an email, the relevant content is sent to Anthropic to process on our behalf, under Anthropic’s commercial terms. Anthropic does not train its models on this content. We attach an opaque account identifier (never your name or email) to these requests so Anthropic can act on a specific tenant in the rare case of abuse. You don’t manage or pay Anthropic directly — that’s handled through your metered Dustav.com balance.

Human access

Dustav.com is invite-only, and we set up each business by hand. As part of onboarding, support, and keeping the service working correctly, a member of our team may access your account and the email-derived data Dustav.com holds — for example, to confirm it’s reading your inbox correctly, to diagnose a problem, or to improve how it handles your mail. By connecting your inbox you consent to this access for those purposes. We keep it to what’s needed, and we never sell it, use it for advertising, or train AI on it.

Service providers we share with

To run Dustav.com we rely on a few service providers, and share only what each needs:

• Anthropic — runs the AI (Claude) that reads your mail and drafts your replies, on our platform account and under Anthropic’s terms, as described above.
• Google — when you connect Gmail, Google serves your messages to us and applies the labels and sends you authorize, through the Gmail API under Google’s own terms.
• Payments — our payment processor (Stripe) handles your top-ups and card details to fund your balance, under its own terms. We don’t see or store your full card number.
• Email delivery — when Dustav.com emails you (a reminder, a heads-up), our email provider processes the message and your address to deliver it.
• Hosting and database — the application runs on DigitalOcean and the database is MongoDB Atlas; they store the data described above on our behalf, under their own terms.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights and safety of our users and the public.

Cookies

We use a small number of first-party cookies necessary to run the service — chiefly a session cookie to keep you logged in, plus a token that protects forms from cross-site request forgery. We don’t use third-party advertising or tracking cookies.

How we protect it

We build for security: a strict content-security policy, protection against cross-site request forgery, and encryption at rest of your most sensitive data — your Gmail access credential and the email content Dustav.com stores. No system is perfectly secure, but we build to reduce risk and keep our attack surface small.

Your choices and rights

• See it — the app shows you what Dustav.com did (your inbox, books, and drafts) and what it knows (the facts it keeps), any time.
• Change it — ask Dustav.com in chat to update or remove things it remembers, and it will.
• Disconnect — disconnect Gmail any time; this revokes our access and stops Dustav.com from reading your inbox (your data stays, so you can reconnect later).
• Delete it — delete your account from settings; this removes your data, including everything Dustav.com read and built. You can also email us to request deletion.
• Notifications — turn Dustav.com’s emails off any time from settings or the unsubscribe link in any email.

Depending on where you live, you may have additional rights to access, correct, export, or delete your personal data. To make a request, email hello@dustav.com and we’ll respond as required by applicable law.

Data retention

We keep your data for as long as your account is active or as needed to provide the service. Disconnecting Gmail stops the reading and drops the access token, but leaves the content in place so you can reconnect; when you delete your account — or ask us to delete your data — we remove your associated content, including the email content Dustav.com read. Some limited records may persist briefly in backups or where retention is required by law, after which they are deleted.

Children

Dustav.com is a business tool and is not directed to children under 13; we don’t knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us at hello@dustav.com and we’ll delete it.

Changes to this policy

We may update this policy as the service evolves. We’ll change the effective date above and, for material changes, give notice where appropriate.

Contact

Questions about your privacy? Email us at hello@dustav.com.