Privacy Policy

Friday respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use and safeguard your data when you use Friday: Email Agent (“Friday”).

Definitions and Key Terms

Whenever one of the following terms is used, it has the specific meaning given below.

• Cookie: A small piece of data stored by your browser that identifies your session or preferences.
• Company: ByteStock LLC (4249 Stratford Way, Jacksonville, FL 32225), the controller of your information for the purposes of this Privacy Policy.
• Service: The mobile and web applications, APIs and other products provided by Friday: Email Agent.
• Voice Data: Audio you record through the app or devices that integrate with it, plus any transcripts we generate.
• Email Data: Message headers, bodies and metadata from email accounts you explicitly connect (e.g. Gmail) under OAuth consent.

What Information Do We Collect?

We collect the following categories of data when you use Friday:

• Account Information —your name and Google email address obtained during Sign‑in‑With‑Google. We do notstore passwords. Your Google OAuth access / refresh tokens are encrypted at rest with an AWS KMS symmetric key.
• Voice Data —phone‑call audio is hosted by Twilio. We store only the Twilio Recording SID in our database so we can retrieve the file on your request. Transcripts may be stored to provide you with a summary of the call.
• Email Data —messages you permit us to read via OAuth (currently Gmail). We store message identifiers and AI‑generated summaries; full content may be cached ephemerally to fulfil your request and then discarded.
• Usage analytics (pages visited, features used) collected through PostHog.

How Do We Use Your Information?

• Provide conversational summaries of your inbox on demand.
• Generate to‑dos or draft replies based on your spoken commands.
• Send essential account‑related emails (verification, billing, product updates). Marketing emails are opt‑in and include an unsubscribe link.

End‑User Information From Third Parties

Friday accesses your email only through official provider APIs. For Gmail accounts we comply with the Google API Services User Data Policy and your data is never used to target ads.

Voice recordings are processed by OpenAI Whisper (or a comparable transcription engine) under strict data‑processing agreements; neither raw audio nor transcripts are used to train models without your consent.

Do We Share Your Information?

We never sell your personal information. We only share it with:

• Cloud infrastructure providers (AWS, Google Cloud)…
• Payment processors…
• Analytics vendor (PostHog)…
• Law‑enforcement if required…

Cookies & Online Advertising

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

How Do We Use Your Email Address?

We use your email for authentication, essential notifications and optional newsletters. You may unsubscribe at any time via the link included in each message.

SMS Text Notifications

Friday lets you receive real‑time SMS alerts about specific topics you choose (“Keywords”). This feature is strictly opt‑in and works as follows:

• Opt‑In Flow —Inside the app you tick a checkbox and supply one or more Keywords (for example “UPS shipping” or “calendar invites”). Your consent is logged with timestamp and IP address.
• Purpose —When new mail that matches your Keywords arrives, Friday sends you an automated SMS summarising that email. Frequency depends on your inbox activity but is typically fewer than 10 messages per day.
• Carrier Compliance —Messages originate from +1 (888) 378‑4175. Reply STOP  to cancel or HELP for help at any time. Message and data rates may apply. Consent to receive texts is not a condition of using the rest of the Service.
• Data Shared —Your phone number, the SMS body and routing metadata are shared with our SMS provider (Twilio) solely to deliver the message.
• Opt‑Out / Changes —You can disable texting or edit your Keywords in the app or by sending  STOP via SMS. We honor opt‑out requests immediately.

How Long Do We Keep Data?

Voice and email summaries are retained until you delete them or your account. Raw audio is held for a maximum of 30 days to allow you to download it, after which it is permanently deleted. SMS consent logs are retained for 5 years to comply with carrier audits.

How Do We Protect Your Information?

All data in transit is encrypted with TLS 1.2+; at rest we use AES‑256 server‑side encryption. Access is limited to least‑privilege, audited IAM roles.

International Transfers

Friday is operated from the United States. By using the Service you consent to processing and storage of your information in the U.S. and other countries where we or our providers operate.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct or delete personal data we hold about you, or object to certain processing. To exercise these rights email privacy@secretaryai.me.

Children’s Privacy

Friday is not directed to children under 13 and we do not knowingly collect their data.

Changes to This Policy

We will notify you of any material changes via the app or email. The “Last Updated” date at the top reflects the current version.

Contact Us

Questions? Reach our privacy team any time at privacy@secretaryai.me.