Privacy Policy

SudoVault LLC ("we", "us") runs sudovault.app. This policy explains what we collect when you visit the site, join the waitlist, or use the app, and what we do with it. Questions go to privacy@sudovault.app.

• Waitlist. If you join the Founder's Circle, we store your email address, the date and time you signed up, and, if you arrived through one of our links, a short tag naming the post or ad it came from (such as "fb-t100"). The tag says which of our links you used, not anything about you, and we use it only to see which posts bring people in.
• Your account. We store your email address and, if you provide one, your name. Your password is stored only in hashed form by our authentication provider, so we never see it.
• Account status. We store your plan, your trial end date, whether you've finished onboarding, and whether you've asked to delete your account.
• Billing. If you subscribe, Stripe collects and processes your payment details. We never see your card number. We keep only your Stripe customer ID, subscription ID, and subscription status.
• Sudo requests. When you use Sudo's briefings, insights, suggestions, or chat, your browser sends our server a summary of the relevant parts of your vault (such as the names and status of your Nodes, tasks, and projects, and recent activity) along with your message. We pass it to our AI provider to generate the reply and don't store it. To keep usage fair, we count how many Sudo requests your account makes each hour and each day, and keep a running total of what your Sudo use has cost over the last 31 days. These are just numbers, never what was asked, and we delete them once they're older than that.
• Encrypted sync, if you turn it on. Your devices encrypt your vault and files before uploading them, with a key that only your vault passphrase or your recovery key can unlock. We never receive either, so we store the encrypted copy (and the locked key) without being able to read them. We can see how many items it holds, their sizes, and when they changed, but not what they say. If you lose both your passphrase and your recovery key, we can't recover your vault.
• Files you ask Sudo to read. Files you upload stay on your device (and, with sync on, in encrypted form on our servers). Only when you ask Sudo to read one does your browser send that file's contents, with the names of your Nodes and their connections, to our server, which passes them to our AI provider to produce Sudo's notes. We don't store the file, and Sudo's notes are saved only on your device.
• Voice questions. If you ask Sudo something by voice, your browser's built-in speech recognition turns it into text, and only that text is sent to us as your message. We never receive or store audio. Depending on your browser, the recording may be processed by the browser's maker (for example, Google for Chrome or Apple for Safari) under their privacy terms. The microphone is only on while you're asking.
• Technical data. Like most websites, our hosting provider keeps standard request logs (IP address, browser type, pages requested, and timestamps) to keep the service running and secure.

What we don't collect: the contents of your vault. Your Rooms, Nodes, notes, links, tasks, projects, goals, and uploaded files are kept in your browser's storage on your device and, if you turn on sync, as an encrypted copy we can't read. Apart from the summaries sent with Sudo requests and files you ask Sudo to read, we never see them.

• To create and secure your account, and to sign you in.
• To provide Sudo's features when you ask for them.
• To process your subscription and manage your plan.
• To send account emails you need, such as confirmations and password resets.
• To send Founder's Circle updates if you joined the waitlist. You can opt out at any time.
• To keep the service secure, prevent abuse, and fix problems.

We don't sell or rent your personal information. We share it only with the providers that run SudoVault for us:

• Supabase stores account information, the waitlist, and the encrypted copy of your vault if you use sync, and sends account emails.
• Vercel hosts the website and app.
• Anthropic generates Sudo's responses from the summaries and files described above. Under Anthropic's commercial terms, this data isn't used to train its models.
• Stripe processes payments and subscriptions.

We may also disclose information when the law requires it, or when necessary to protect the rights and safety of our users or the service. If SudoVault LLC is involved in a merger or acquisition, your information may be transferred as part of that transaction, and this policy will continue to apply to it.

We use only the cookies needed to keep you signed in. Your browser's local storage holds your vault and a short-lived copy of Sudo's daily briefing, so the briefing doesn't have to be regenerated on every visit. We don't use advertising or analytics cookies.

• Accounts are kept until you delete them. Deleting your account in Settings starts a 30-day grace period, during which you can cancel. After that, your sign-in and account record are permanently deleted.
• Your vault stays on your device until you clear it or clear your browser's data. The encrypted sync copy, if you turned sync on, is deleted along with your account. Deleting your account doesn't erase the copies on your devices, and you can export your vault from Settings at any time.
• Waitlist emails are kept until you ask us to remove yours, or until the waitlist is no longer needed.
• Billing records are kept as long as tax and accounting laws require.

In Settings, you can view and update your name, export your vault, and delete your account. To request a copy of the personal information we hold about you, have it corrected or deleted, or leave the waitlist, email privacy@sudovault.app. We'll respond within 30 days.

Depending on where you live (for example, the EU, the UK, or California), you may have additional rights, such as the right to object to or restrict certain processing, or to file a complaint with your local data protection authority. We don't sell or share personal information for targeted advertising.

You can delete your SudoVault account yourself, in the app or on the website: sign in, open Settings, choose Delete account, and confirm. You can also email privacy@sudovault.app from your account's address and we'll do it for you.

Deletion starts a 30-day grace period, during which you can cancel in Settings. After that we permanently delete your sign-in and account record (email, name, plan and subscription status), the encrypted copy of your vault and files if you used sync, and your Sudo usage counts. A record that your account used its free Sudo trial (just an account ID and a date) is kept for up to 30 days so trials can't be claimed twice. Stripe keeps its own records of past payments as the law requires.

The vault stored on each of your devices isn't on our servers, so deleting your account doesn't erase it. Remove it by clearing the app's or browser's data, or uninstalling the app. Export it first in Settings if you want a copy.

All data is encrypted in transit. Access to account data is restricted, and the app is protected by multiple layers of access controls. No system is perfectly secure, so if you believe you've found a security issue, please let us know at privacy@sudovault.app.

Our providers operate in the United States and other countries. If you use SudoVault from outside the US, your information will be transferred to, and processed in, the US.

SudoVault isn't intended for children under 13 (or under 16 where local law sets a higher age), and we don't knowingly collect their information. If you believe a child has given us personal information, contact us and we'll delete it.

If we change this policy, we'll update the date at the top. For significant changes, we'll notify account holders and waitlist members by email before the changes take effect.

Questions or requests about your privacy: privacy@sudovault.app.