DigitalEgo Privacy Policy

Last updated: October 22, 2026

DigitalEgo is a private, single-owner assistant operated by Ivan Escalante. It learns how its owner writes and works and drafts replies for the owner to review. This policy explains what data the app accesses, how it is used, and the choices you have.

What we access

• Google account basics (name, email) to sign you in.
• Gmail: reads messages and your sent mail to learn your writing style, and creates or updates drafts in your Gmail Drafts folder. The app never sends email and never deletes or modifies messages.
• Microsoft Teams (optional, read-only): reads your chats to suggest replies you copy in yourself.
• Browser activity (optional Chrome extension): pages visited, time on page and the visible labels of links/buttons you click. It never records what you type. Banking, health and login pages are excluded by default, and logging can be paused at any time.
• Location (optional): live location while the app is open, and Google Timeline exports you upload.

How data is used

Data is used only to provide features to you: building your personal writing-style profile, generating draft replies, and showing your own activity history. Every capability is off until you turn it on in the Permissions Center, and every suggestion or action is recorded in an audit log you can read.

To generate drafts, relevant message text is sent to the AI provider you choose (Anthropic or OpenAI) under their API terms, which do not allow them to train on this data.

Google user data — Limited Use

DigitalEgo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, not used for advertising, not used to train general AI models, and not read by humans except with your explicit consent, for security purposes, or to comply with law.

Storage and security

Data is stored in a private Supabase (Postgres) database with row-level security, accessed only by the app's server. OAuth tokens are encrypted at rest with AES-256-GCM. The app is hosted on Vercel.

Sharing

We do not sell, rent or share your data with third parties, other than the infrastructure and AI providers listed above that process it on your behalf.

Your choices

• Pause all capture and actions instantly with the global pause switch.
• Turn off any individual permission in the Permissions Center.
• Revoke Google access at any time at myaccount.google.com/permissions.
• Request deletion of all your data by emailing the contact below.

Contact

Questions or deletion requests: ivan.escalante.m@gmail.com