What we keep, and why. In plain words.
This notice covers this website (the list, pledges, the contact form, and what happens when you visit) and how the Paladin app handles your Google account when you connect Gmail, Google Calendar or Google Drive to it.
The short version
- We collect what you type into our forms and what a web host sees on any visit. Nothing else.
- Your email is used to write to you about Paladin, and to answer you if you wrote to us. Nothing more.
- We never sell it, never share it for advertising, and never add you to anyone else's list.
- Stripe takes pledges on its own page. Your card number never reaches us.
- Anything on this site beyond what it needs to work waits for your yes, and No works as well as Yes.
- You can see, correct or delete what we hold by asking once.
- In the app, your Gmail, Calendar and Drive stay on your computer. Our servers never store or read them, and Google data is never sold, used for ads or used to train AI models.
Who we are
Paladin is made by Paladin AIOS. In this notice “we” and “us” mean that company. For the law in the UK and EU, we are the controller of what you give us here.
Write to hello@paladinaios.com or use the contact form with Privacy request picked. Either reaches the same people.
What we collect, and why
Four things, each with what it is, why we have it, the legal basis we rely on, and how long it stays.
The list
- What
- Your email address, the page you joined from, when you joined, and a salted one-way hash of the internet address you joined from. The hash cannot be turned back into the address.
- Why
- To write to you when Paladin opens and, now and then, about how the build is going. The hash lets us spot one machine signing up hundreds of addresses without keeping the address itself.
- Basis
- Your consent, given when you join. You withdraw it with the unsubscribe link in any message.
- How long
- Until you leave. We then keep the address marked as unsubscribed, so it is never written to again by mistake. Ask, and we delete it outright.
Pledges
- What
- Stripe takes the payment on its own page. It tells us your name, email, billing country, the amount, and the card's brand and last four digits, as it does for every business it serves. The full card number stays with Stripe.
- Why
- To keep our accounts, to answer a question about a pledge, and to find you for the sixty free days when Paladin opens.
- Basis
- Keeping financial records is a legal obligation. The sixty days are our legitimate interest in keeping a promise we made you.
- How long
- As long as tax and accounting law requires, which is usually seven years.
The contact form
- What
- Your name, email, the topic you picked, your message, and the page you wrote from.
- Why
- To answer you. Paladin answers our inbox: it reads your message and writes the reply. It thinks with Claude, so the text of your message is sent to Anthropic, the company that makes Claude.
- Basis
- Our legitimate interest in answering someone who wrote to us. For a privacy request, the legal obligation to answer it.
- How long
- We delete it 30 days after the conversation ends.
Visiting the site
- What
- Cloudflare, which runs the site, sees your internet address and browser details to deliver each page and to stop attacks, as every web host does.
- Why
- To deliver the site and keep it up.
- Basis
- Our legitimate interest in running a working, safe website.
- How long
- Cloudflare keeps short-lived logs under its own policy. We do not keep a log of visits of our own.
The Paladin app and your Google account
Paladin is a desktop app for Windows and Mac. You can connect a Google account to it on its Integrations page, and choose which of Gmail, Google Calendar and Google Drive to connect. Nothing is connected until you sign in with Google and agree on Google's own screen, and you can disconnect at any time.
What the app accesses
- Gmail (
https://mail.google.com/): your email messages, drafts and labels, so Paladin's email screen can show your mail, send mail you write, and keep drafts, labels, read state and deletions the same in Paladin and in Gmail. Google's mail servers (IMAP and SMTP) accept only this scope. - Google Calendar (
.../auth/calendar): the calendars you choose to sync and their events, so they show in Paladin's calendar and so events you add, change or delete in Paladin, including a Google Meet link you add, go back to Google. - Google Drive (
.../auth/drive): your Drive files, so you can browse, search and open them from Paladin's Files screen and save documents you make in Paladin into your Drive. Paladin never deletes Drive files. - Your Google address (
openid,email), so the app knows which account each connection belongs to.
How it is used
Only to give you those features, in the app, on your instruction. Paladin includes AI assistants. When you ask one to work with your Google data, for example to summarise an email, draft a reply, or find and read a document in your Drive, the text it needs is sent to the AI provider you chose in Paladin's settings (such as Anthropic, OpenAI, Google or xAI) to answer that request, and for nothing else. If you run a model on your own computer, it does not leave your computer at all. An assistant sends an email only when you press Send or approve it.
Where it is kept, and who can see it
Your mail, events and files are downloaded straight from Google to your computer and stored there. Paladin AIOS's servers never store your Google data, and no one at Paladin AIOS can read it. If you open Paladin on your paired phone, or send something to a friend in Paladin, it passes through our relay encrypted end to end, so the relay carries it without being able to read it. The sign-in tokens Google issues are stored only on your computer, encrypted with your operating system's own key store, and are sent only to Google.
Sharing
We do not sell, rent or share Google user data. It is never used for advertising, never used to build a profile of you, and never used to train or improve generalised AI or machine-learning models, ours or anyone else's. It is passed to an AI provider only as described above: at your request, to give you the feature you asked for. The only other case is if the law requires it, and then only as much as it requires.
Keeping and deleting it
Your Google data stays on your computer until you remove it. Disconnecting a service on Paladin's Integrations page stops access at once; disconnecting the last one on an account also revokes Paladin's access with Google and deletes its sign-in tokens from your computer. Uninstalling Paladin and deleting its folder removes everything it downloaded. You can also remove Paladin's access at any time from your Google Account's permissions page.
Google's Limited Use requirements
Paladin's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What we never do
- Sell your information, or share it with anyone for advertising.
- Add you to another list, or pass your address to another company for its own use.
- Build a profile of you from what you read here.
- Write to you about anything but Paladin.
- Read, store, sell or advertise with the Google data the Paladin app reads, or use it to train AI models.
Who else handles it
We use services from a few other companies to run the site and the app. Each one sees only what its service needs.
- Cloudflare hosts the site, stores the list and the messages sent through the contact form, sends and receives our email, and keeps bots off the forms.
- Stripe takes pledges on its own page, under its own privacy policy.
- Anthropic makes Claude, the AI model Paladin thinks with. When you write to us, Claude reads your message and writes our reply.
- The AI provider you choose in the Paladin app receives the text you ask an assistant to work with, including Google data, only to answer that request. See the Paladin app and your Google account.
We would also hand information over if the law required it, and only as much as it required.
How long we keep it
No longer than the reason for having it. The list: until you leave. A contact message: deleted 30 days after the conversation ends. A pledge: as long as tax law requires. The exact rule for each is under what we collect.
Your rights
Wherever you live, you can ask us to:
- Show you what we hold about you, and give you a copy you can take elsewhere.
- Correct anything that is wrong.
- Delete it, unless the law makes us keep it, as it does for pledge records.
- Stop using it for something you object to, or take back a consent you gave.
Ask through the contact form or at hello@paladinaios.com. We answer within one month, and may write back to the address in question to check the request came from you. It costs nothing.
In the UK and the EU
You can also complain to your data protection authority, such as the ICO in the UK. We would rather hear from you first, but you do not have to.
In California and other US states
We do not sell or share personal information, in the sense those laws use the words. A browser that sends Global Privacy Control is treated as having said no to advertising, without being asked.
Where it is kept
We are based in the United States, and the companies above run services around the world. If you are outside the US, what you give us may be handled in another country. Where the law asks for it, those transfers rely on the safeguards the companies provide, such as standard contractual clauses.
Children
This site is not for anyone under 16, and we do not knowingly keep anything about them. If you think a child has given us their details, tell us and we will delete them.
Changes to this notice
If this notice changes, the date at the top changes with it. If the change is one you would want to hear about, such as a new use for your email, we will write to the list before it takes effect.