Privacy Policy
Last updated: November 2024
Carstairs is a service operated by truelog OÜ ("we", "our", or "us"), a company registered in Estonia. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI assistant service.
Data Controller
The data controller responsible for your personal data is:
truelog OÜ
Sepapaja 6
15551 Tallinn
Estonia
Phone: +420 733 11 33 32
Email: privacy@carstairs.ai
1. Information We Collect
When you use Carstairs, we collect:
- Message Content: Emails, WhatsApp messages, and SMS you send to Carstairs
- Contact Information: Your email address, phone number, and name
- Usage Data: How you interact with our service across all channels
- Conversation History: Context from previous conversations to provide better assistance
2. How We Use Your Information
We use your information to:
- Provide AI-powered assistance via email, WhatsApp, and SMS
- Process your requests (reminders, research, calendar, drafts, etc.)
- Maintain context across conversations for personalised assistance
- Communicate with you about your account and our service
- Improve our service quality
3. Data Storage and Security
Your data is stored securely using industry-standard encryption. We use:
- Encrypted databases for all stored information
- Secure HTTPS connections for all communications
- Access controls limiting who can view your data
Email content is retained for 90 days to provide context for future replies, after which it is automatically deleted.
4. Third-Party Services
We use the following third-party services to provide our service:
- OpenAI: For AI-powered responses and assistance
- Mailgun: For email sending and receiving
- Twilio: For WhatsApp and SMS messaging
- Microsoft: For calendar integration (with your explicit consent)
- Cloud hosting providers: For secure data storage
These providers process data on our behalf under strict confidentiality agreements and in compliance with applicable data protection laws.
5. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request deletion of your data
- Opt out of our service at any time
- Request a copy of your data in a portable format
To exercise these rights, contact us at privacy@carstairs.ai.
6. WhatsApp & SMS Messaging
When you communicate with Carstairs via WhatsApp or SMS:
- Opt-in: By initiating a conversation with Carstairs, you consent to receive messages from us on that channel
- Message Content: Your messages are processed to provide assistance and stored to maintain conversation context
- Opt-out: You can stop receiving messages at any time by sending "STOP" or by contacting us at privacy@carstairs.ai
- Data Retention: Message history is retained for 90 days to provide contextual assistance, then automatically deleted
- No Marketing: We do not send unsolicited marketing messages. All communications are in response to your requests
WhatsApp messages are transmitted via Twilio's infrastructure in compliance with WhatsApp's Business Policy and applicable data protection regulations.
7. Data Sharing
We do not sell your personal information. We only share data with third-party service providers necessary to operate our service, and they are bound by confidentiality agreements.
8. Cookies
Our website uses minimal cookies for essential functionality only. We do not use tracking or advertising cookies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through our service.
10. GDPR Rights (European Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Right to access - Request a copy of your personal data
- Right to rectification - Request correction of inaccurate data
- Right to erasure - Request deletion of your data ("right to be forgotten")
- Right to restrict processing - Request limitation of how we use your data
- Right to data portability - Receive your data in a structured, machine-readable format
- Right to object - Object to processing based on legitimate interests
- Right to withdraw consent - Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at privacy@carstairs.ai. We will respond to your request within 30 days.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at:
truelog OÜ
Sepapaja 6, 15551 Tallinn, Estonia
Email: privacy@carstairs.ai
Phone: +420 733 11 33 32