Privacy Policy

We collect the following categories of information:

• Account information. Your name, email address, and authentication identifiers when you sign in (including via Google).
• Workspace and engine content. The brand voice, audiences, positioning, writing rules, documents, Briefs, drafts, comments, and other materials you create or upload.
• Connected accounts. Access tokens and credentials you provide to connect third-party data sources, destinations, and Slack. These are encrypted at rest and never shown back to you or written to logs.
• Customer conversation data. When a workspace manager connects a customer data source (for example a CRM such as HubSpot, a call recording tool such as Gong, or a support desk such as Intercom or Zendesk), we read the records that source makes available under the scopes you grant: deals, companies, calls, transcripts, notes, conversations and tickets, for the backfill window you choose. See “Customer conversation data” below.
• Payment information. Billing is handled by Stripe; we do not store full card numbers. We retain subscription status and plan details.
• Usage and device data. Log data, IP address, browser type, and actions taken in the Service, used for security and to operate the product.

Customer conversation data is processed to produce marketing intelligence for your workspace: counted evidence about what customers say (problems, desired outcomes, language, buying triggers, objections, alternatives, win and loss reasons, feature requests, proof and praise, why customers cancelled and renewal risks), the Insights clustered from it, and the positioning and Brief items that read from those Insights.

• Minimum scopes. Each source is connected with read-only scopes limited to the records above. We do not write to a connected data source. A destination you connect separately (for example Notion, Google Docs, Guru, or notes in Attio) receives only the Briefs you choose to send to it.
• No contact profiles. Participants in a conversation are stored as keyed, one-way references scoped to your workspace, not as names, email addresses or provider person identifiers. We do not build profiles of your customers.
• Redaction and bounds. Stored text is bounded in length and passed through automated redaction of email addresses, phone numbers, long digit runs and URL query strings before storage.
• Paraphrase by default. Drafts, Briefs, emails, Slack messages, MCP replies and assistant answers receive paraphrases and counts, never a stored excerpt. Stored excerpts are shown only on an access-controlled receipt page to members permitted to read that source.
• Recording consent is yours. You are responsible for having the consents and lawful basis required to record, store and process the conversations you connect, including call recording consent in the jurisdictions where your participants are located, and for choosing a backfill window consistent with them.
• Retention. You choose a retention window per source (90, 180 or 365 days). Records beyond it are deleted automatically.
• Deletion. A record deleted at the source is deleted here with the evidence derived from it. Disconnecting a source deletes its corpus. A request to forget a specific person is handled by our operators with tooling that never logs the identifier; contact us with the workspace and the source.

We use information to provide, maintain, secure, and improve the Service; to produce the Briefs and drafts you request; to process payments; to communicate with you about your account; to enforce our terms; and to comply with legal obligations.

We use AI providers to write drafts and Briefs at your direction and to extract and synthesize evidence from connected sources. Inputs sent to those providers are used solely to return results to you and are not used by us to train models.

We do not sell your personal information. We share information only with service providers ("subprocessors") that help us run the Service, and with third-party platforms you choose to connect. Our subprocessors include, among others:

• Anthropic:AI text generation and analysis.
• OpenAI:AI text generation and analysis.
• Stripe:payment processing and subscription billing.
• Railway:application and database hosting.
• Cloudflare R2:file storage.
• Resend:transactional and authentication email.
• Destinations you connect:for example Notion, Google Docs, Guru, Attio, and Slack. Data flows to these only when you send a Brief or ask for an answer there.
• Customer data sources you connect:for example HubSpot, Gong, Intercom and Zendesk. Data flows from these to Viewfield only under the scopes you grant and is processed as described under “Customer conversation data”. These providers act on your instructions under their own terms.

We may also disclose information to comply with law, enforce our agreements, or protect the rights, safety, and property of Viewfield, our users, or others, and in connection with a merger, acquisition, or sale of assets.

We retain your information for as long as your account is active or as needed to provide the Service. You may delete content at any time, and you may request deletion of your account and associated data by contacting us. Customer conversation data follows the per-source retention window you choose and the deletion rules above; deleting a workspace deletes its connected corpora. We may retain limited information as required for legal, accounting, or security purposes.

We use industry-standard measures to protect your information, including encryption in transit and encryption at rest for connected-account credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can access and edit most data directly in the app, or contact us to exercise these rights. You may also disconnect any customer data source or destination at any time from Integrations. Where you process your customers’ data through the Service, you are the controller of that data and we act on your instructions; requests from your customers should be directed to you, and we will assist you in honouring them.

We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use third-party advertising cookies.

We may process and store information in the United States and other countries where we or our subprocessors operate. Where required, we rely on appropriate safeguards for cross-border transfers.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance.

Questions about this Privacy Policy or your data can be sent to Reactor LLC at privacy@viewfield.ai.