Privacy

This page says what AngelDrift collects, why, where it's kept, who else handles it, and how to get it out or have it deleted. It covers this site and the AngelDrift app.

The short version

• We keep what you give us and what running the service needs. Nothing else.
• No advertising, no analytics, no tracking across sites, and nothing sold or rented to anyone.
• The product runs no AI model on your work, and we don't use your work to train one.
• It's kept in Google Cloud, in the United States.
• To see, correct, export or delete what we hold about you, write to info@angeldrift.com.

What we collect, and why

When you ask for early access or write to us

Your email address, your name if you give it, and what you wrote. We use them to answer you and, for early access, to invite you. Your address isn't added to a mailing list. While AngelDrift is open by invitation, we also keep the list of addresses that may sign in. Each address put on it or taken off, and when, is kept for good.

When you're invited to an organization

The address you were invited at, who invited you, and the teams the invitation was for. An invitation runs out after seven days.

When you have an account

• Who you are: your name and email address, whether the address has been confirmed, and when your account was made and last changed. If your account was made by signing in with Google, where that's offered, your picture if you have one there, and the id of your Google account. We keep none of Google's keys to it.
• Your sign-ins: each time you sign in we keep a session, with the internet address and the browser it came from, so you stay signed in and can be signed out. A session ends no later than seven days after it was last used. When you ask for a sign-in link, the address and name you asked with are kept for five minutes. Signing in counts requests by internet address, so someone guessing can't keep trying, and that count is kept with the address. We also count the emails we send to an address, against a scrambled form of it, for a day.

What you and your organization put in AngelDrift

Areas, projects, tickets, checklists, comments, notes, links and files; who the organization's members are, the roles they hold and where. That's the service: we keep it so you can use it, and we don't read it except where fixing a fault needs it or the law requires it.

Agents

For each agent an organization adds: its name, who is responsible for it, the roles it holds, its keys, and when each key was last used. A key is kept only in a form that can check it, never as it was issued.

A record of what happened

Who did what in an organization, and when, with the names things had then: a ticket renamed, a comment written, access given or taken away. A description's, a note's or a comment's words aren't in it. Who wrote each comment, and who saved each of the last hundred versions of a description or a note. This is part of what AngelDrift is for: an organization can say who gave access and who wrote what. If you leave an organization, your name stays on what you did there.

What every website's server sees

Your internet address, your browser's type, the page asked for and the time. Our host logs these for every request, for about 30 days. The two forms on this site also count requests by address so they can't be flooded; the count is kept against a scrambled form of the address, not the address itself, and old counts are cleared as new forms arrive.

Cookies and your browser's storage

• One cookie, when you sign in. It's what keeps you signed in. Where signing in with Google is offered, a second lasts five minutes while Google answers. The public pages set none.
• No advertising or analytics cookies, ours or anyone else's.
• Unsaved text. The app keeps what you've typed and not yet saved in your browser's own storage, so reloading a page doesn't lose it. It stays on your device.

AI and agents

• The product doesn't run an AI model on your content, and we don't use your content to train one. The agents that help build and run AngelDrift are AI: what one of them may read, and when, is under "Who else handles your data".
• An agent is a member your organization adds. It reads and writes what its roles allow, and no more. Whoever runs the agent decides where it sends what it reads, for example to the company whose model it uses. That's between your organization and that company; AngelDrift isn't part of it.

Who else handles your data

These companies do work for us that touches personal data.

Stripe will take payments once paid plans exist. It isn't in use yet, and this page will say so before it is.

Where it's kept, and for how long

• Where: the app, its database and its files are in the United States. If you're elsewhere, your data travels there. The email we send goes through Resend, and Cloudflare answers for the domain's name from wherever is nearest you.
• Your account and your organization's content: until you delete it or ask us to. What's deleted is gone from our backups within about a week, and a deleted file within about two weeks.
• An organization's record of what happened: for as long as the organization chooses, 90 days unless it changes that, so a deleted thing's name stays in it that long. Changes to access, and what each ticket sat under, are kept for as long as the organization is.
• Early access requests and messages to us: until we've answered and no longer need them, or until you ask us to delete them.
• The host's request log: about 30 days.

How it's protected

• Between your browser and AngelDrift everything travels encrypted, and what we keep is encrypted where it's stored. Email we send is encrypted on its way wherever the receiving mail server accepts it.
• Each organization's content is held apart from every other's by the database itself, not only by the app's code.
• What a member can see or do is decided by their roles, or by being an owner, for people and agents alike, and checked on every request for the organization's content.
• The systems it runs on can be reached only by those who run AngelDrift: its founder, and the agents that work under the founder's direction.

Getting your data out, corrected or deleted

Wherever you live, you can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. An organization's owner can ask for the organization's content in a form they can take elsewhere, and for the organization to be deleted. Write to info@angeldrift.com from the address you use with AngelDrift. We answer within 30 days, and sooner when we can.

If you think we've handled your data wrongly, tell us and we'll put it right. You can also complain to the data protection authority where you live.

Children

AngelDrift is for people at work. It isn't meant for anyone under 16, and we don't knowingly keep their data.

Changes to this page

When what we collect or who handles it changes, this page changes first and the date at the top moves. If a change matters to people who have an account, we'll email them.

Reaching us

Who runs AngelDrift, in law, is written in the terms.

info@angeldrift.com, or the contact page.