Privacy Policy

This Privacy Policy explains how Netcetera ("Company," "we," "us") collects, uses, and shares information when you use Pedro (the "Service"), and describes the rights you have over that information.

1. Who we are

Netcetera is the controller of your personal information for the purposes of European data protection law (the GDPR). You can reach us at hello@askpedro.app. We have not appointed a separate Data Protection Officer; privacy questions go to the same address.

2. Information we collect

Account information. Name, email address, and profile photo, from you directly or from a social sign-in provider (Google, Apple).

Phone number. If you link iMessage, the phone number you provide, used to route messages between iMessage and your account.

Conversation content. Messages you send the assistant and its responses, across web chat, iMessage, and Slack, so the assistant can carry on a conversation and (where you approve it) so we can save long-term memory you've asked us to remember.

Connected-account data. If you connect Google, Slack, Linear, or other apps via Composio, we (or Composio, on our behalf) store the resulting OAuth tokens and use them, strictly as directed by your requests to the assistant, to read or act on that account — for example, sending an email or reading a calendar event you asked about. We only access what a given request needs.

Usage data. Standard technical information (IP address, device/browser type, pages visited, timestamps) collected automatically when you use the Service.

No sensitive personal information. Please do not send the assistant sensitive personal information (health data, government ID numbers, biometric data, and similar) beyond what naturally appears in your own email or calendar content when you connect those accounts.

3. How we use your information

To provide and operate the Service; to process your requests, including by sending them to AI model providers for a response and, where you've connected an account, taking the action you asked for; to maintain the long-term memory you've explicitly approved saving; to communicate with you about your account; to maintain security and prevent abuse; and to comply with legal obligations. We do not use your information for targeted advertising and we do not sell your personal information.

Our legal bases for this processing are: performance of our contract with you (providing the Service you signed up for), our legitimate interests (security, improving the Service), and your consent (where you explicitly approve an action, such as saving a memory or connecting a third-party account).

4. Who we share it with

We share information with the service providers that make Pedro work, each acting as our processor and bound to use your data only to provide their service to us:

• Anthropic — processes your conversation content to generate the assistant's responses.
• Composio — brokers connections to third-party apps (Gmail, Google Calendar, Canvas, and others) you choose to connect.
• Google — if you sign in with Google or connect Gmail/Calendar.
• Slack and Linear — if you connect those integrations.
• Vercel — hosting, our AI request routing (AI Gateway), and application infrastructure.
• Turso — our hosted database.
• Resend — sends account-related emails (password setup, access requests).
• Cloudflare — DNS and email routing for our domains.
• Sendblue — routes messages if you use the Service over iMessage.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.

5. International transfers

Some of the providers listed above process data outside the European Economic Area (notably in the United States). Where we transfer personal information outside the EEA, we rely on those providers' standard contractual clauses or other lawful transfer mechanisms.

6. Data retention

We retain your account information and conversation history for as long as your account is active, so the assistant can keep the context and memory you've asked it to maintain. You can delete individual chats, edit or delete saved memory, or delete your account entirely from Settings; deleting your account removes this data except where we're required to keep it (for example, for legal or security reasons) or where it's already been shared as part of an action you asked the assistant to take (for example, an email it sent on your behalf).

7. Your rights

If you are in the European Economic Area or UK, you have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent at any time. If you are a resident of a US state with its own privacy law (such as California, Colorado, Connecticut, or Virginia), you may have similar rights, including the right to know what we collect and to request deletion. We do not sell or share personal information as those terms are defined under US state privacy laws, so there is nothing to opt out of in that respect.

To exercise any of these rights, email hello@askpedro.app. We may ask you to verify your identity before acting on a request. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

8. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls on our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

The Service is not directed to, and we do not knowingly collect personal information from, anyone under 18.

10. Cookies

See our Cookie Notice for details on the cookies and similar technologies we use.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with an updated date, and where required by law we will notify you directly.

12. Contact

Questions about this Privacy Policy can be sent to hello@askpedro.app.