This Privacy Policy explains what information Stowdar ("Stowdar," "we," "us," or "our") receives, and what it does not receive, when you use the Stowdar software and related services (the "Service"). Read it together with our Terms of Service.
Stowdar is software that you deploy and run inside your own cloud account. Once deployed, it connects to your own Google account (such as Gmail, Google Drive, Google Docs, Google Sheets, Google Calendar, and Google Tasks), uses an artificial intelligence provider (currently Anthropic) through your own API key to read and organize your correspondence and files, and writes the results back into your own Google Drive.
Your content stays in your own accounts, and it never reaches us. Your email, attachments, documents, contacts, calendar entries, folder names, and document contents are processed inside your own cloud environment and written back into your own Google Drive. Stowdar never receives, stores, or has access to that content.
How the analysis works, stated here rather than buried: Stowdar runs on an AI provider key you supply. The reading is done by the provider you chose, under the agreement you hold directly with them, billed to your account. To analyze your content that provider must read it. We are not that provider, we are not a party to your agreement with them, and none of it passes through us. Section 4 sets out what that means for you.
The only information that reaches us is what is needed to run the business and maintain the software:
That is the complete list. We describe the usage data as content-free because it is, and we list the seat hashes and acceptance records here rather than calling the whole backend content-free, because those are records about people and about you even though neither contains your content. Of the four, only the Terms acceptance record names an individual, and it names them for one reason: it is the evidence that they agreed.
This is the one place your content is read by a party other than you. To do its work, the Service sends relevant content to the AI provider you configure (currently Anthropic), using your own API key. This includes information from your connected accounts and anything you type into the Service, such as a search containing a client's name, an address, or project details.
The provider must process that content in readable form, because a model cannot analyze what it cannot read. No amount of separation between requests changes that. It is an inherent and unavoidable part of how the Service works, and it happens even though Stowdar itself never receives, stores, or controls that content.
That content is governed by your own agreement with that provider, not by us. What the provider does with it, including whether it is retained at all and for how long, and whether it is excluded from model training, depends on that provider's then-current terms and on the plan you hold with them. Business and enterprise plans commonly carry stronger commitments than consumer ones. Those are the provider's commitments to give, and we do not make them on the provider's behalf. If you need a specific assurance, obtain it from the provider directly.
You are responsible for any rights, permissions, or consents needed to send information about your own clients, customers, employees, or other third parties to your AI provider, and for keeping out of your connected accounts any material you are not permitted to disclose to a third-party processor. Our Terms set out the categories of sensitive, regulated, and privileged material the Service is not built for.
Stowdar's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. The Service accesses your Google data solely to provide the features you use within your own environment. We do not sell your Google data, transfer it to third parties, or use it for advertising, retargeting, or credit or lending decisions. The connection is made through your own Google application registration and your own credentials, so that data flows between your accounts and never through our servers.
Some of what the Service does involves people who are not our customers and who never agreed to anything with us. We describe it here so it is not a surprise to anyone.
The Service can send estimates, invoices, and related documents from your own mailboxes, and can send notices to the account owner about their own business. These messages go out from your accounts, on your instruction, through your own Google connection. They do not pass through our systems, and we receive neither the messages nor the addresses they went to. The person sending them is the sender for every legal purpose.
When one of your people sends a customer-facing estimate or invoice through the Service, the recipient receives a link. When that link is opened, the installation running in your cloud records that the document was viewed, records the network address the request came from, and notifies the sender. Repeated opens in a short window count once. Views from a session signed in to your own installation are excluded and labeled as uncounted previews.
All of that is recorded inside the installation, which is yours. We do not receive the recipient's address, the network address, the document, or the fact that a view occurred. A network address is not a location: on a mobile, corporate, or virtual private network it identifies the network operator's exit point rather than a person or a place, and the Service says so rather than implying otherwise.
If you received a document link from a business that uses Stowdar and have a question about what that business recorded, please contact that business. They hold the record and can answer; we do not have it. The business using the Service is responsible for disclosing this tracking as its own jurisdiction and its customers' jurisdictions require.
An estimate can be accepted, and an invoice signed with a typed signature, from the document link. What was accepted or signed, when, and the network address it came from are recorded in the installation, in your own accounts. We do not receive any of it.
We do not sell your data, we do not share it with third parties for advertising, and we do not act as a data broker.
One flow runs from us to you. While your installation runs, it fetches wording and guidance text from our backend, so that phrasing can be improved without your having to redeploy the software. That flow is outbound only. It carries text from us, it carries no content of yours, and nothing about your content is returned in it. If it cannot be reached, the installation falls back to the wording it shipped with and keeps working.
The same rule governs what the software ships with in the first place. A template arrives as structure and plumbing, never information. The Construction template, for example, arrives with a Paymaster master log already wired up, as an empty document. The scaffolding is ours and is the same for everyone. Everything that ever goes into it, your pricing, your items, your clients, your documents, is yours, is created on your side, and stays there.
By accepting our Terms of Service and using the Service, you consent to our collection, storage, and use of the anonymized, content-free usage data described in Section 1. We use it solely to operate, maintain, secure, troubleshoot, and improve the Service, including refining the shared rules and templates that benefit all users. Because this data is anonymized and content-free, it does not identify you and does not include any content from your connected accounts.
The data in your own cloud account and Google Drive stays under your control and remains until you remove it or revoke Stowdar's access in your own account. We cannot delete it, because we never held it.
On our side, your license record, seat records, and Terms acceptance records are retained for the life of your license and for a reasonable period afterward, so that we can answer questions about a lapsed subscription, honor a reactivation, and meet our own tax and accounting obligations. Content-free usage data is retained in aggregate and is not linked to you. You may request deletion of your backend records at any time, subject to any record we are required to keep.
To exercise any of these, email hello@stowdar.com. We will ask enough to confirm the request comes from the license holder. If you are a customer, employee, or correspondent of a business that uses Stowdar and you want to reach the information that business holds about you, please contact that business. It sits in their accounts, they control it, and we have neither a copy nor a way to reach it.
This website does not use analytics, advertising, tracking pixels, or third-party cookies, and it does not build a profile of you. If you enter an email address to be contacted, we use it to reply to you and for nothing else.
The Service is a business tool. It is not directed to, or intended for use by, anyone under 18, and it has no consumer use case. We do not knowingly collect information from anyone under 13. The Service reads whatever is in the accounts a business connects, which is a further reason the accounts connected to it should be business accounts.
We may update this policy from time to time. When we do, we will revise the "Last updated" date above, and material changes will be reflected on this page. Where a change is material and affects what we receive, we will give reasonable notice.
Questions or data requests: hello@stowdar.com.
