Sartel (“Sartel,” “we,” “us,” or “our”) is a personal-operations and “second brain” productivity application that helps you organize tasks, notes, documents, calendar events, code context, and knowledge, and delegate work to AI assistants. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the Sartel web application at sartel.ai and to the Sartel mobile app, which loads the same web application.
By creating an account or using Sartel, you agree to this Policy. If you do not agree, please do not use Sartel.
1. Who we are
Sartel is operated by an independent developer. For any privacy question or request, contact us at ofiryieldchain@gmail.com. We act as the controller of the account and content data you store in Sartel.
2. Information we collect
Account & identity information
When you create an account we collect your name and email address. If you sign in with Google, GitHub, or Apple, we receive your name, email address, a provider account identifier, and (where available) your profile picture URL from that provider. If you register with email and password, we store a securely hashed version of your password — we never store your password in plain text.
Content you create or connect
Sartel is a place to store your work, so most of the data we hold is content you choose to put in. This includes:
- Tasks, notes, documents, code snippets, bug reports, whiteboards, and their tags, comments, and attachments (files you upload).
- Calendar events you create, and events synced from your Google Calendar if you connect it.
- Messages you send to the AI assistant and its responses, including any content the assistant reads to answer you.
- A knowledge graph and “memory” built from your content (text chunks and their vector embeddings) so the assistant can recall context.
- Public booking-link settings and, if someone books time with you, the guest’s name, email, and any notes they provide.
- Your settings and preferences (theme, working hours, notification and scheduling preferences).
Connected integrations
If you choose to connect a third-party service, we store the access tokens needed to keep that connection working: Google Calendar (access and refresh tokens, to read and write your calendar) and GitHub (an access token, your login and avatar, to index repositories and development activity you select). You can disconnect these at any time from Settings.
Device & technical information
- Push notification token & platform. If you enable notifications on mobile, we store a device push token (from Firebase Cloud Messaging) and whether the device is iOS or Android, so we can deliver alerts.
- Session & security data. We store hashed session tokens and their expiry to keep you signed in and to secure your account.
- Usage & activity logs. We record an internal activity log of actions in the app (for example, AI actions taken, tasks created) and AI token-usage metrics used to estimate cost. This is operational data, not advertising or third-party analytics.
Voice input (optional)
If you use the voice feature, audio you record is sent through our server to our voice provider (ElevenLabs) to transcribe your speech to text, and text of the assistant’s reply is sent to generate spoken audio. We do not retain your raw voice recordings; the resulting transcript is treated like any other chat message.
What we do NOT collect
- We do not collect your precise or approximate location.
- We do not use advertising identifiers and we do not serve ads.
- We do not use third-party advertising or analytics/tracking SDKs (no Google Analytics, no ad networks, no cross-app tracking).
- We do not sell your personal information, and we do not share it with third parties for advertising.
- Sartel does not process payments in the app, so we do not collect payment card numbers.
3. How we use your information
- To provide the app’s core functionality: store and organize your content, run the AI assistant, sync your calendar, index your selected repositories, and power search and memory.
- To authenticate you and keep your account secure.
- To send notifications you have enabled.
- To operate, maintain, debug, and improve the service, including estimating AI usage cost.
- To communicate with you about your account or support requests.
We do not use your content to train our own foundation models. Your content is sent to AI providers only to generate the responses and features you request (see below).
4. Service providers we share data with
Sartel relies on a small number of third-party service providers (“sub-processors”) to deliver functionality. Data is shared with them only to provide the feature you are using, and only the data needed for that feature. We do not share your data with third parties for their own marketing or advertising.
| Provider | What is shared | Why |
|---|---|---|
| Anthropic (Claude) | Your chat messages and the content the assistant needs to answer (e.g. relevant tasks, notes, memory) | To generate AI assistant and agent responses |
| OpenAI | Text excerpts of your content to be turned into vector embeddings | To power knowledge-graph search and memory recall |
| ElevenLabs | Recorded voice audio (for transcription) and reply text (for speech) | Voice input and spoken responses |
| OAuth sign-in profile (name, email, ID); calendar event data if you connect Google Calendar | Sign-in and two-way calendar sync | |
| GitHub | OAuth sign-in profile; repository and development activity you connect | Sign-in and code/development integration |
| Apple | Sign in with Apple identifier and email | Sign-in |
| Firebase Cloud Messaging (Google) / ntfy | Device push token and notification content (title, message, link) | To deliver push notifications you enable |
We may also disclose information if required by law, to protect the rights, safety, and security of our users or the service, or in connection with a business transfer. Our own infrastructure (databases and the vector/graph stores that hold your content) is operated on our behalf by our hosting provider and is not shared with the third parties above except as described.
5. The Sartel Chrome extension
Sartel publishes a browser extension, Sartel, on the Chrome Web Store. It is optional: Sartel works without it. Installing it lets the Sartel assistant operate your own Chrome — opening pages, clicking, filling forms, reading page content, and taking screenshots — in the browser you are already signed in to. This section describes it specifically, and takes precedence over the rest of this Policy where the two differ.
What the extension can access
To do its job the extension is granted broad access to your browsing: every site you visit, your cookies, your clipboard, your open tabs, and Chrome’s debugger interface. The debugger permission is what lets it produce real, trusted clicks and keystrokes. Many modern sites reject the simulated kind, so without it the assistant could see a page but not reliably act on one. It is not used for remote debugging, and it connects to no remote endpoint.
Where that data goes: nowhere
The extension sends nothing to us or to anyone else. Its only network connection is a local WebSocket to 127.0.0.1 on your own machine, where the Sartel connector is running. Page content, cookies, clipboard contents and screenshots travel from your browser to that local process and no further. The extension contains no analytics, no tracking, and no telemetry, and we declare no data collection for it on the Chrome Web Store.
The connection is refused unless it comes from the Sartel extension itself, so a web page you visit cannot reach the local connector and drive your browser.
What happens after that is ordinary Sartel behaviour, covered by the sections above: if you ask the assistant to read a page, that page’s content becomes part of your chat and is sent to the AI provider like any other message. The extension does not decide this — your request does.
Actions that ask first
Reading or writing cookies, running script on a page, extracting an authentication token, and uploading a file each require your explicit approval at the moment they happen. Navigating and clicking do not, because an approval prompt on every click is one you would stop reading.
Removing it
Uninstall the extension from chrome://extensions at any time. It stores nothing beyond its own connection settings, which are removed with it, and nothing to delete remains on our servers — we never received any of it. The extension is open source and MIT-licensed; you can read exactly what it does.
6. Data retention and deletion
We keep your account and content for as long as your account is active. You can delete individual items at any time within the app. You can also permanently delete your entire account and all associated data yourself: go to Settings → Account → Danger Zone and choose to delete your account. This permanently removes your profile, content, calendar events, chat history, memory and knowledge embeddings, connected-integration tokens, device tokens, sessions, and booking data from our systems.
You may also request deletion by emailing ofiryieldchain@gmail.com. When you disconnect an integration (such as Google Calendar or GitHub), we delete the stored access tokens for that integration. Residual copies may persist briefly in backups before being overwritten.
7. Security
We protect your data with industry-standard measures: encryption in transit (HTTPS/TLS), hashed passwords and session tokens, access controls that scope your data to your account, and server-side handling of sensitive keys (for example, the voice provider key never reaches your browser). No method of transmission or storage is perfectly secure, but we work to protect your information and continually improve our safeguards.
8. Children’s privacy
Sartel is a productivity tool intended for adults and is not directed at children. We do not knowingly collect personal information from children under 13 (or the minimum age required in your jurisdiction). If you believe a child has provided us personal information, contact us at ofiryieldchain@gmail.com and we will delete it.
9. Your rights and choices
- Access, correct, or export your content directly within the app.
- Delete individual items, disconnect integrations, or delete your entire account at any time.
- Turn notifications on or off in your device and app settings.
- Depending on your location (e.g. the EEA, UK, or California), you may have additional rights to access, correct, delete, or restrict processing of your personal data. Contact us to exercise them.
10. International data transfers
Sartel and its service providers may process and store data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for such transfers.
11. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of Sartel after an update means you accept the revised Policy.
12. Contact us
If you have questions, requests, or concerns about this Policy or your data, email us at ofiryieldchain@gmail.com.
© 2026 Sartel. All rights reserved.