Privacy policy
What the website and the app do with information, in plain words.
Contents
Who is responsible
ManyHats, LLC of 600 N Broad St, Suite 5 #3334, Middletown, DE 19709 is responsible for the information described here. Contact support@
What the app keeps in your browser
The app keeps a working copy of what you enter in your browser's own storage: tasks, notes, events, client notes, job setups and settings. It also keeps the first save of each day for seven days and an emergency copy that is removed after the next successful save.
Clearing your browser's site data, or Erase everything in Settings, removes the working copy and these copies from that browser.
Sync and backup
The app syncs what you enter to your account. Synced information is encrypted in transit and at rest. Many Hats holds the key and can access the information, and uses that access to provide the service and support.
Backup files and calendar exports you download, and the Brainstorm message you paste into an assistant, leave the device only when you choose. We do not receive them.
This website
The hosting provider, Cloudflare, Inc., receives your IP address, the page you asked for and details your browser sends with each request, to serve the page and keep the site secure. The website does not track you across other sites and does not act on Do Not Track signals.
When you contact us
If you email support@
Accounts
For each account we keep:
- Your email address and an optional name.
- Your plan and its dates.
- Your devices, with the time each last synced.
- Your settings.
AI-written ideas
Where AI-written ideas are available to your account, they are off until you turn them on for a job. When you ask for ideas, the app sends the job name, your responsibilities and a few project and idea titles to an AI service through our server.
Who receives information
- Cloudflare, Inc. provides hosting and storage for the website and the app.
- Paddle is the merchant of record for subscriptions. It collects payment details and shares your email address, plan and its dates with us. Its own privacy notice applies.
- Resend sends the sign-in and account emails.
- Amazon Web Services keeps the encryption keys for synced information, and the nightly backups of account details and synced copies.
- OpenRouter, and the model provider that serves a request, receive the excerpt when you ask for AI-written ideas.
Information is disclosed when the law requires it and moves with the business if it is transferred to another owner.
Where information is processed
Information is processed in the United States and in other countries where these providers operate. Transfers from the European Economic Area, the United Kingdom and Switzerland rely on the safeguards the law provides, such as standard contractual clauses.
How long we keep information
Website logs are kept for a period the host sets. Support email is kept for 12 months. Account details are kept while the account exists. After a subscription ends, synced copies are kept until the account is deleted. After a trial lapses without a subscription, they are kept for 90 days and then deleted. A deleted account is removed after a 7 day grace period, apart from the transaction records Paddle must keep. An account that has never had a paid subscription and has not been signed in to or synced for 365 days is deleted the same way. We email the account 30 days and again 7 days before, and signing in keeps it. Records of account actions, such as sign-ins and plan changes, hold no email address and are kept for 730 days. When you change your email address, the earlier address is kept for 7 days. During that time a link sent to it can undo the change. The record of the change is deleted 30 days later. Nightly backups, kept so information can be restored after a fault, hold a deleted item for up to 40 days before it is removed from them.
Why we use information
- To answer your messages, as part of providing support.
- To serve the website and keep it secure, as a legitimate interest in running a safe site.
- To provide the app and your subscription, as part of the contract with you.
Children
The service is not directed to children under 13, and we do not knowingly collect information from them.
Your rights
Depending on where you live, you may have the right to ask for access to your information, for a correction, for deletion, to restrict or object to its use, to move it to another service and to withdraw consent you gave.
Residents of California and other US states with privacy laws have the right to know what information we hold, to delete or correct it and to opt out of its sale or sharing. Using these rights does not change how you are treated. We do not sell or share personal information as those laws define the terms.
To use these rights, contact support@
Changes to this policy
We may update this policy, and the date at the top shows the latest version.
Complaints
You can complain to the data protection authority where you live.