What we store and what we don't.

We do not store your full emails or the photos and screenshots you send.

When something, an email, a photo or screenshot, or a typed note, looks like a commitment, we save:

• A short title and summary (written by our classifier, not copied from your original message)
• A short reference excerpt of the original text
• Any reusable key info the classifier pulled out, like a phone number, a payment link, or an address, so it's on the card later without you having to re-read the original
• Who it involves, when it's due, and its status (open, done, dismissed, etc.)

A photo or screenshot itself is never stored. It's processed in memory for its text and discarded immediately after. The rest of an email that we didn't flag is never copied anywhere either.

A best-effort filter strips obvious sensitive data (things that look like account numbers, IDs, or credentials) before it's ever saved. It catches common patterns, not everything, so it's one layer, not a guarantee.

Once a commitment has been resolved for 30 days, the verbatim excerpt is cleared automatically. The title, summary, key info, and status stay (that's the actual point of the app), but the original source text doesn't sit around indefinitely.

One narrower exception: to stop someone from deleting an account and immediately starting a fresh free trial on the same inbox, we keep a one-way cryptographic fingerprint of every mailbox that's ever started a trial for as long as BlindSpot offers free trials. It's not your email address, just an irreversible hash of it, it can't be turned back into an address, it's never seen by a person, and it's used for nothing except that one check at signup.

Your business data is never used to train OpenAI's models. It's read momentarily to classify a flagged message as a commitment, then forgotten. Not retained, not used for training, not shared onward.

No ad networks. No data brokers. Nothing about your account or your commitments is ever sold.

• Your email provider: BlindSpot only reads the mail you've specifically authorized it to access. We never send, reply to, edit, or delete anything in your inbox.
• OpenAI: receives the text of a flagged message to classify it. Per OpenAI's API terms, that data is never used to train their models — and BlindSpot never sells or shares it onward for anything else.
• Supabase: hosts BlindSpot's database and handles sign-in.
• OneSignal and Resend: deliver push and email alerts. Only see what's already been classified, never original content.
• Zapier: runs a small number of scheduled checks on already-classified data to decide whether to trigger an alert. Does not see raw email.

One mailbox: Settings → the mailbox's own disconnect control. BlindSpot stops reading it immediately. The underlying connection is deleted server-side, not just hidden in the UI. Commitments already captured from it stay in your list.

Everything: Settings → "Delete my account." Type DELETE to confirm, and in one step it removes every commitment, disconnects every mailbox, and deletes your login.

This is immediate and permanent. There's no grace period and no way to undo it once confirmed. If you're not certain, don't confirm yet. Ask first.