Privacy Policy

Effective October 8, 2026

What super does

super is a personal assistant you talk to by text message. You sign in with your mobile phone number and can connect your Google account: Gmail first, read-only, then Calendar, Drive and sending, each as a separate choice. You can also connect a Notion workspace, limited to the pages and databases you pick in Notion; super reads them, and edits, adds to or creates pages there only after you confirm in chat, or when you have told it in chat that that kind of change may go ahead without asking. super reads your mail to track conversations, notice replies you owe or are owed, and send you reminders and short summaries. It can save a draft reply in your Gmail drafts, where only you can see it. It sends, archives or labels email, adds, changes, deletes or responds to calendar events, or places a phone call only after you confirm that action in chat, or when you have told it in chat that a specific kind of action may go ahead without asking. You can list and revoke those by text. If you store a login for another website, super can sign in there as you in a browser we run, only for errands you confirm in chat, or that you have told it in chat may go ahead without asking, to read what you asked for; it is instructed not to change anything, and it cannot buy, pay or book.

What we store

• Your mobile phone number, which is your account.
• The email address of the Google account you connect.
• Encrypted OAuth tokens that let super reach the Gmail, Calendar and Drive access you granted.
• For a Notion workspace you connect, an encrypted access token and its owner's email address or the workspace name. Notion pages are read when you ask and are not stored; changes are made in Notion itself.
• If you choose to add one, a username and password for another website you ask super to use on your behalf, encrypted, plus a record of each time it was used and why.
• Message metadata and content from your connected mailbox.
• Notes super derives about your contacts and conversations.
• The text messages exchanged between you and the assistant.
• Events from a Google Calendar you connect, and details of Drive files it reads when you ask.
• Reminders and routines you set, and summaries and transcripts of phone calls it places for you.
• If you are on the waitlist, your number, whether you joined it on the web or by text, and when you joined and last tried to sign up.

Website analytics

We count visits to this website ourselves. When you arrive, we set a first-party cookie holding a random identifier for your browser, and a second one recording which printed flyer or link you came from, so we can tell which ones work. We store the page you viewed, the site that referred you, and whether you are on a phone or a computer. There is no third-party analytics service, no advertising network, and no cross-site tracking. Nothing in these records identifies you personally, and they are never combined with the contents of your mailbox.

How we use it

We use this information only to provide super to you: reading and organising your mail, producing summaries and reminders, and carrying out the actions you confirm. To decide what to improve, we also keep short labels of what you ask super for, such as "scheduling" or "could not book a restaurant", written by the AI model; these never include the content of your messages or your mail, and they are deleted with your chat history. We do not sell your data and we do not use it for advertising.

Google API data

super's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your Gmail, Calendar and Drive data is never sold, never used for advertising, and never read by a human except with your permission, for support or security purposes.

Who else processes your data

• Google provides the Gmail, Calendar and Drive APIs.
• Notion provides the Notion API, if you connect it.
• Anthropic provides the AI model that reads your messages to produce summaries and draft replies. Under Anthropic's API terms, data sent to the model is not used to train models.
• Twilio delivers the text messages between you and super and places the phone calls you approve.
• 17TRACK receives a tracking number when you ask about a package.
• Hosting providers run the website, the service, its database and the browser super uses for website errands.

We share only what each provider needs to do its job.

Group texts

If someone adds super to a group text, we store that group's messages so super can answer when a message is marked with © and chime in when it can help. Group replies use only the group's own messages and web search; nothing from any member's connected accounts is used or shared in a group. Anyone in the group can text "© only when tagged" to stop it chiming in, or "© mute" to pause it.

SMS messages and mobile information

Signing in sends one text: the six-digit code you asked for by entering your number and tapping "Text me a code". Recurring texts (reminders about your own email and replies to what you ask) are a separate, optional choice: an unchecked box on the sign-in page, or the "Turn texts on" button in your account. Consent to those texts is not a condition of signing up or using super; without it you use the assistant in the web workspace. We record when you turned texts on, and you can turn them off in your account or by replying STOP at any time. If you text our number yourself, we treat that as turning texts on. If you text our number without having signed up, we reply once pointing you to the sign-up page and send nothing further until you have signed up there. The program is described in full at app.superlabs.io/messaging. Messages are one-to-one assistant replies and reminders about your own email. We never send marketing by SMS. Message frequency varies with your email activity, typically a few messages a week. Message and data rates may apply.

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. All the categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Your number is used only to deliver the messages you asked for, through our SMS delivery provider.

Reply STOP at any time to cancel. Reply START to re-subscribe. Reply HELP for help. Because your number is your account, cancelling texts pauses the assistant. Your account and data stay until you delete them: tap "Delete account" under Data privacy in your workspace, or email maxwellvolz@gmail.com. Carriers are not liable for delayed or undelivered messages.

Retention and deletion

We keep your data while your account exists. Disconnecting Gmail immediately deletes the tokens and everything we stored from your mailbox (messages, threads, contacts, the open loops and observations built from them). Your chat history and memory stay until you delete them under External data or delete your account. Telling super to forget a stored login deletes it when you confirm; the record of when it was used stays. "External data" under Data privacy in your account deletes everything imported from your connected services and everything built from it (stored mail, calendar events, contacts, memory, chat history, reminders, routines, call transcripts and anything you allowed it to do without asking) and disconnects them, immediately, while keeping your account, your number, your texts setting, your stored logins and their browser sessions, and the rules you set (like "never send without asking"). "Delete account" there, or texting super "delete everything you have on me" and confirming, deletes your account and all of it, immediately and permanently; group-chat transcripts you took part in keep their messages but no longer link to you. You can also ask by emailing maxwellvolz@gmail.com.

Security

OAuth tokens, stored website logins, and the browser sessions they create are encrypted at rest, each under its own key. All data moves between you, super and our providers over TLS. No system is perfectly secure, but we take reasonable steps to protect what you entrust to us.

Changes

If we change this policy in a meaningful way, we will update the effective date above and let you know within the service.

Contact

Questions about privacy: maxwellvolz@gmail.com.