Privacy Policy

Last updated: February 15, 2026

Salty Panda ("we", "us", "our") operates the saltypanda.com website and the Salty Panda AI assistant service. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service.

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and profile photo provided through Google or Apple sign-in.
• Conversation Data: Messages you send to and receive from the AI assistant, stored to provide conversation history and memory features.
• Connected Services Data: When you connect Google Calendar, Gmail, or Google Tasks, we access data from those services on your behalf to fulfill your requests. We do not store copies of your emails or calendar events beyond what is needed for active conversations.
• Usage Data: We collect anonymized data about how you use the Service, including feature usage, response times, and error rates, to improve the product.
• Payment Information: Payment details are processed by Stripe. We do not store your credit card numbers.
• Phone Number: If you enable SMS features, we store your phone number to deliver notifications via Twilio.

2. How We Use Your Information

• To provide and maintain the AI assistant service
• To personalize your experience through memory and learned preferences
• To connect with your Google Calendar, Gmail, and Tasks at your request
• To send reminders and notifications you have configured
• To process payments and manage your subscription
• To improve the Service based on anonymized usage patterns
• To communicate important updates about the Service

3. AI Processing

Your messages are processed by third-party AI models (via OpenRouter) to generate responses. We send only the context necessary for each conversation. AI providers may process your data according to their own privacy policies. We do not use your conversations to train AI models.

4. Data Storage & Security

Your data is stored in encrypted databases hosted by Supabase. Sensitive credentials (such as OAuth tokens for connected services) are encrypted using AES-256-GCM before storage. We use industry-standard security practices to protect your information.

5. Third-Party Services

We use the following third-party services to operate Salty Panda:

• Clerk: Authentication and user management
• Supabase: Database and data storage
• OpenRouter: AI model routing and processing
• Stripe: Payment processing
• Twilio: SMS delivery
• Brave Search: Web search functionality
• Google APIs: Calendar, Gmail, and Tasks integration
• Cloudflare: DNS, CDN, and security

6. Data Retention

We retain your conversation data and memories for as long as your account is active. You can delete individual memories or conversations at any time through the assistant. When you delete your account, all associated data is permanently removed within 30 days.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Disconnect any connected services at any time
• Opt out of SMS notifications

8. Children's Privacy

Salty Panda is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@saltypanda.com.