Privacy Policy

Who we are

DigestOS is operated by Colin Moore, an individual based in Ontario, Canada. This policy explains how DigestOS handles your personal information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Questions or concerns: privacy@digestos.ai

What DigestOS does

DigestOS connects to your Gmail account, identifies emails from senders you specify, summarizes them using AI, and delivers a weekly digest to your inbox. You configure which senders to monitor and when to receive your digest.

What information we collect

Information you provide

• Your name and email address (via Google sign-in)
• The email sender addresses you want monitored
• The email addresses of anyone you add as a digest recipient
• Your delivery preferences (day, time, timezone)

Information from Google

• Your Google account ID (used to identify your account)
• A Gmail access token (used to read your email on your behalf)

Information we do not collect

We do not store your email content. Emails are fetched, summarized, and the content is immediately discarded. No email subjects, bodies, or attachments are ever written to our database.

How we use your information

• To authenticate you and maintain your account
• To access your Gmail and identify emails from your configured senders
• To generate your weekly digest
• To deliver your digest to your specified recipients
• To send your digest on the schedule you configure

We do not use your information for advertising. We do not sell your data to anyone.

Third parties we work with

When your digest is generated, email content is sent to Anthropic's API for summarization. This is subject to Anthropic's data retention policy. Anthropic does not use API data to train its models.

Data retention

• Your account data and configuration are retained for as long as your account is active
• Email content is never stored — it is processed in memory and discarded after each digest run
• If you delete your account, all stored data is permanently deleted

Your rights under PIPEDA

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Withdraw consent and delete your account at any time
• Disconnect DigestOS from your Google account at any time via your Google account settings (Security → Third-party apps)

To exercise any of these rights, contact privacy@digestos.ai.

Security

Your Gmail access token is encrypted using AES-256-GCM before being stored. All data is transmitted over HTTPS. Access to your data is restricted to the systems required to run your digest.

Children's privacy

DigestOS is not directed at children under 13 and does not knowingly collect information from children.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of DigestOS after changes constitutes acceptance of the updated policy.

Contact

Colin Moore
privacy@digestos.ai
Ontario, Canada