Privacy Policy

1. What this policy covers

This policy applies to the Notifications website, MCP integrations, bots, and any mobile apps or additional notification channels we make available. Features that are not yet available are described only where relevant to how they will work if you choose to enable them.

2. Information we process

• Account information. Clerk and the sign-in provider you choose process information such as your user ID, name, and email address so we can authenticate and secure your account. The service uses your Clerk user ID to associate your connections and notifications with your account.
• Connected-channel information. When you connect Telegram, we store the Telegram account and chat identifiers needed to deliver messages and, when available, your Telegram username. If you later enable another channel, we will store the identifiers and settings needed for that channel.
• Notification information. We process the message content an agent asks us to deliver, its destination channel, idempotency key, delivery status, provider message ID, errors, and timestamps.
• Setup and security information. We process short-lived pairing records, authentication records, necessary cookies, and technical logs used to operate and protect the service. Telegram setup tokens are stored in hashed form.
• Mobile notification information. If you enable a mobile notification channel, we process a push token, notification permission and delivery settings, and limited device or app information needed to deliver and diagnose notifications. The iPhone app's Recent activity also stores a short plain-text preview and any verified task link for each mobile notification.

Notification messages may contain information supplied by you or an agent acting for you. Avoid asking an agent to send highly sensitive information unless it is necessary.

3. How we use information

We use this information to:

• authenticate you and protect your account;
• connect, verify, and disconnect notification channels;
• deliver notifications and prevent duplicate sends;
• show connection and delivery status;
• maintain, troubleshoot, and secure the service; and
• comply with legal obligations and enforce our Terms.

We do not sell personal information, use notification content for advertising, or use third-party advertising trackers.

4. Services that help us operate

We share information only as needed to operate the service, follow your instructions, protect our rights, or comply with law. Current service providers include Clerk for authentication, Google for Google sign-in, Telegram for Telegram delivery, and Railway for hosting and database infrastructure.

To deliver a notification, we send its message body and destination identifier to the channel provider you selected. For example, Telegram receives the message and Telegram chat ID. If you enable mobile push later, Apple may receive the device push token and the notification content needed for delivery through its push service.

If you choose Apple sign-in, mobile push notifications, or another notification channel, the information required for that feature will also be processed by Apple, Expo, or the channel provider you select. Their own privacy terms apply to their services.

5. Retention and deletion

We retain account, connection, notification, and operational records for as long as reasonably needed to provide and secure the service, resolve disputes, and meet legal obligations. We have not set a fixed deletion period for notification records. Pairing links expire after ten minutes, and completed pairing sessions are removed after a successful connection.

Mobile Recent activity is available for up to 30 days. You can clear its message previews and task links at any time from the iPhone app; limited delivery records remain to prevent duplicate sends and protect the service. You can also disconnect Telegram from the app. This removes the active Telegram connection and pending pairing sessions, but does not automatically remove prior notification delivery records. To request deletion of your account and associated information, email us at sad.xprod@gmail.com. We may retain limited information where required by law or needed for security and fraud prevention.

6. Security

We use reasonable technical and organizational safeguards, including authenticated access, restricted channel details, hashed pairing tokens, and encrypted network connections. No service can guarantee absolute security, so please protect your sign-in account and tell us promptly if you suspect unauthorized access.

7. Your choices and rights

You can choose which notification channels to connect, revoke an agent's authorization from the relevant client or account controls, and disconnect a channel in the app. Depending on where you live, you may also have rights to access, correct, export, object to, restrict, or delete personal information. Email us to exercise a right or ask a privacy question.

8. International processing

We and our service providers may process information in countries other than the one where you live. Their locations and handling of information are also described in their respective privacy policies.

9. Children

Notifications is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information to us.

10. Changes and contact

We may update this policy as the service evolves. We will update the effective date and provide additional notice when a change materially affects your rights or how we use information.

Questions or requests: sad.xprod@gmail.com