Contatta PRIVACY POLICY

Contatta ("Contatta", "we", "us") is a contact management platform offered as a web and mobile application by Contatta!, Inc. This policy explains what information we collect, how we use it, and the choices you have. Questions: support@contatta.com.

1. Information we collect

Account information. Name, email address, and authentication details, managed through our sign-in provider (Clerk). Subscription and billing are handled by Clerk and its payment processor; we do not store your card details.

Contacts. Contact records you create in Contatta and contacts you choose to import or sync from connected accounts (Google, Microsoft, or device contacts), including names, email addresses, phone numbers, companies, titles, addresses, social profiles, photos, and custom fields you add.

Email. If you connect an email account, we sync message content (subjects, bodies, attachments, sender and recipient addresses, timestamps) so you can read, organize, and send email inside Contatta.

Calendar. If you connect a calendar, we sync event details (titles, times, participants) to show and schedule activities.

Content you create. Notes, timeline posts, activities, expenses and expense attachments, uploaded files, in-app chat messages, and voice recordings when you speak to the assistant.

Usage and diagnostics. Log data, device and browser information, and error reports (via Sentry) used to keep the service working.

2. Google user data

Contatta requests the following Google permissions. We only use Google data to provide the features described here.

• Basic profile (email, profile): your name, email address, and profile photo, used to identify your connected account in the app.
• Contacts: Contacts you import appear in Contatta, and contacts in Contatta are created or updated in your Google Contacts. Two-way sync is on by default for a connected account and can be turned off.
• Gmail (https://mail.google.com/): your Gmail messages, and sending on your behalf, used to read your email inside Contatta linked to the right contact, and send calendar invitations from your own address when you schedule with a contact.

Email sync runs through EmailEngine, software we host inside our own infrastructure; your mailbox is not shared with an outside email service.

Limited Use disclosure. Contatta's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

In line with that policy, we do not:

• use Google user data for advertising, or sell it to anyone;
• transfer Google user data except as needed to provide user-facing features you can see in the app, for security, to comply with law, or as part of a merger or acquisition with prior notice to you;
• allow humans to read your email, except with your explicit permission, where necessary for security or abuse investigation, to comply with law, or when the data is aggregated and anonymized for internal operations;
• use Google user data to train generalized artificial intelligence or machine learning models. AI features described below use it only to generate a response for you in the moment.

3. AI features

Some Contatta features are powered by third-party AI services (Anthropic and OpenAI). When you use them, the specific content described below is sent to the provider to generate the result, then returned to you:

• Assistant (Primo). When you ask the assistant something, it can look up your contacts, calendar, expenses, notes, and recent communication summaries (including email subjects and short summaries) to answer you. Powered by Anthropic's Claude.
• Voice input. When you speak to the assistant, your audio recording is sent to OpenAI to convert your speech to text.
• Contact AI profiles. When a contact briefing is generated, that contact's details are processed to write the summary. Powered by Anthropic's Claude.
• Inbound email screening. To sort real correspondence from automated noise, the subject line and a short preview (up to 256 characters) of messages from unknown senders are processed automatically. Powered by Anthropic's Claude.
• Group images. If you generate a cover image for a group, the description you type is sent to OpenAI to create it.

This processing is inference only. Neither we nor these providers use your data to train AI models, and it is not used for advertising.

4. Contact enrichment

If you use the enrich feature on a contact, we send that contact's identifiers (name, email, phone, company) to People Data Labs, a data provider, to find additional public professional information. This only happens for contacts you choose to enrich, and you review the results before they are saved.

5. How we share information

We never sell your personal information and never share it for advertising. We share data only with service providers that help us run Contatta:

• Amazon Web Services: hosting, storage, and infrastructure (all service data).
• Clerk: sign-in, account management, and billing (name, email, authentication and subscription data).
• Anthropic: AI features (the specific content described in Section 3).
• OpenAI: voice transcription and image generation (voice recordings you make and image descriptions you type).
• People Data Labs: contact enrichment you request (the contact identifiers you submit).
• SendGrid: service emails such as invitations and notifications (recipient names and email addresses).
• Cronofy: calendar connection and scheduling (calendar credentials and event data for calendars you connect).
• Sentry: error monitoring (diagnostic and device data from crashes and errors).
• Google / Microsoft: the accounts you connect (data synced to and from those accounts at your direction).
• 
  

We may also disclose information if required by law, to protect the safety and security of the service, or in connection with a merger or acquisition (with notice to you).

6. Storage and security

Your data is stored on Amazon Web Services infrastructure in the United States. Data is encrypted in transit using TLS. Access to production systems is restricted to authorized personnel. Contatta undergoes independent security assessment as part of Google's API verification program, repeated annually.

7. Retention and deletion

We keep your data while your account is active.

- Disconnect a provider. You can disconnect Google, Microsoft, or calendar accounts in Settings at any time, which stops all syncing. You can also revoke Contatta's access directly at https://myaccount.google.com/permissions.

• Delete your account. Deleting your account permanently deletes your data from our systems, including data obtained from Google.
• Export. You can export your data from Settings.

To request deletion or a copy of your data, you can also email support@contatta.com.

8. Your choices

You choose which accounts to connect, which contacts to import or push, which contacts to enrich, and whether to use AI features. Core features of Contatta work without connecting any external account.

9. Children

Contatta is not directed to children under 13, and we do not knowingly collect their information.

10. Changes to this policy

We will post any changes here and update the date above. For material changes we will notify you in the app or by email.

11. Contact us

Contatta!, Inc. | support@contatta.com