Privacy Policy

This Privacy Policy explains how StartStrong ("StartStrong," "we," "us," or "our") collects, uses, discloses, and protects information when you use startstrongai.com and the StartStrong service (collectively, the "Service").

Our Data-Minimization Promise

StartStrong does not create or maintain a permanent archive of the contents of your Gmail messages, Google Calendar events, Canvas calendar events, AI prompts, generated daily briefs, or text-message bodies. We process that source content only for the time needed to create and deliver the brief you request. We retain only the minimum operational information needed to run, secure, and deliver the Service, as described below.

1. Information We Collect

Information you provide

• Account information, including your email address and password.
• Your preferred delivery email, reminder time, and time zone.
• Your Canvas iCal feed URL when you choose to connect Canvas.
• Your mobile phone number and messaging preferences if you choose to use text reminders when that feature is available.
• Messages and other information you send to us for support.

Information from connected services

You may authorize StartStrong to access information from third-party services. For Google, this can include your account email, Gmail message sender, subject, date, and snippet or content needed to identify relevant tasks; Google Calendar event details; and permission to send a brief through your Gmail account. For Canvas, we retrieve upcoming calendar events available through the private iCal feed URL you provide. This source content is retrieved when needed, processed temporarily, and is not saved by StartStrong as a permanent copy or searchable content history.

Information collected automatically

We may collect basic technical and usage information such as IP address, browser and device information, request dates and times, session data, and error or security logs. Waitlist entries currently include the email address or phone number submitted, submission timestamps, IP address, browser user agent, and repeat-submission count to operate the list and limit abuse.

2. How We Use Information

We use information to:

• Create and secure your account and keep you signed in.
• Retrieve relevant email, calendar, and course information and organize it into Today, Tomorrow, and This Week.
• Generate and display your personalized StartStrong brief.
• Deliver briefs by email and, after you opt in, by text message at the time you choose.
• Operate the waitlist, respond to support, and improve reliability.
• Prevent fraud, misuse, and security incidents and comply with law.

3. Google User Data

StartStrong uses Google user data only to provide the user-facing features you request: connecting your account, identifying relevant Gmail and Calendar information, generating your brief, and sending it through Gmail. We do not use Google user data for advertising, sell it, or permit humans to read it except with your explicit permission, when necessary for security, or when required by law. StartStrong does not permanently store Gmail message content or Google Calendar event content.

StartStrong's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. AI Processing

To generate a brief, StartStrong sends relevant event details, Canvas calendar items, and limited Gmail details to OpenAI through its API. This processing is performed only to create the brief you requested. We do not use your Google Workspace data to train a general-purpose AI model, and we do not authorize our AI provider to use it for advertising. StartStrong does not save the AI prompt or generated brief as a permanent content history after the request is completed. OpenAI processes API data under its own business data terms and data retention controls, which may include temporary provider-side retention.

5. How We Disclose Information

We may disclose information in these limited circumstances:

• To service providers that help us host the Service, generate briefs, send email or text messages, monitor security, and provide support. They may process information only to perform services for us.
• When you direct us to send a brief or otherwise authorize a disclosure.
• To comply with law, protect rights and safety, or investigate abuse.
• As part of a merger, financing, acquisition, or sale of assets, subject to applicable law and required notice or consent.

We do not sell personal information. We do not sell or share mobile phone numbers, SMS opt-in information, or messaging consent with third parties or affiliates for their marketing or promotional purposes.

6. Email and Text Messages

We send account and brief emails as part of the Service. If text reminders become available, we will send them only after you provide a phone number and affirmatively opt in. You may withdraw text-message consent at any time by replying STOP. Reply HELP for assistance. Message frequency depends on your settings, and message and data rates may apply.

7. Storage, Retention, and Security

Passwords are stored as salted hashes. Google credentials and Canvas feed URLs are encrypted at rest. To keep automation working, we may retain your account email, password hash, encrypted connection credentials, delivery destination, reminder time, time zone, session records, SMS consent status, and limited delivery records such as date, recipient, and success or failure status. Delivery records do not contain the body of your brief.

We do not retain the underlying contents of your emails, Google Calendar events, Canvas calendar events, AI prompts, generated briefs, or text messages as a StartStrong content history. Disconnecting an integration removes its stored credential from StartStrong. Deleting an account will remove its retained account and integration information, subject to any limited records we must keep for security, legal, or consent-compliance purposes.

We retain information only as long as reasonably needed for the purposes described here, legal obligations, dispute resolution, and security. No system is completely secure, and we cannot guarantee absolute security.

8. Your Choices and Rights

• You can disconnect Google or Canvas from the Connections page.
• You can disable scheduled delivery in Settings.
• You can revoke Google access through your Google Account settings.
• You can reply STOP to opt out of future StartStrong texts.
• You may ask to access, correct, or delete your account or waitlist information by contacting us. We may need to verify your identity.

9. Cookies

We use essential cookies to keep you signed in, protect the beta, and maintain OAuth security. We do not currently use third-party advertising cookies.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under the age of majority where you live, use the Service only with permission from a parent or legal guardian. Contact us if you believe a child under 13 has provided information to us.

11. International Use

StartStrong is operated in the United States. If you use the Service from another country, your information may be processed in the United States and other locations where our service providers operate.

12. Changes to This Policy

We may update this policy as the Service changes. We will post the new version here and update the date above. If a change materially affects how we use connected Google data or other personal information, we will provide additional notice or request consent when required.

13. Contact Us

For privacy questions or requests, email support@startstrongai.com.