Skip to main content
setodSetod
DocsSign inBook a session

Privacy Policy

Last updated: October 30, 2026

This Privacy Policy explains what data this platform (the "Service") collects, how it is used, and the choices you have. By using the Service you consent to the practices described here.

1. What we collect

  • Account information. When you sign in with Google we receive your name, email address, and profile picture.
  • Connector credentials. API keys, OAuth tokens, and bot tokens for the services you connect. These are encrypted at rest and used only to perform the actions your agents request.
  • Agent configuration. The names, instructions, schedules, and settings of the agents you create.
  • Run history. A log of each agent run, including the messages exchanged with the AI model and the tool actions taken. This exists so you can audit what your agents did.
  • Managed phone — business information. If you obtain a Setod-managed phone number, we collect your business's legal name, business type, registration number (Canada Business Number or provincial equivalent), business address, website, and contact person details. This information is required by our telecommunications provider (Twilio) to comply with Canadian and US number registration rules; Canadian business numbers may be checked against the public federal corporations registry (Innovation, Science and Economic Development Canada). It is stored for the life of your phone number plus any applicable record-keeping period thereafter.
  • Managed phone — identity verification. To unlock outbound SMS and outbound calling, we require identity verification via Stripe Identity. Stripe collects and processes your government-issued ID and a selfie liveness check directly. Setod does not receive, store, or have access to your government ID image or biometric data. We receive only the verification outcome (pass or fail) and Stripe's verification reference ID, which we store on your account to record that verification was completed.
  • Usage data. For Managed Numbers, we record message and call counts, estimated costs, and daily spend totals per account. This data is used for billing, rate limiting, and abuse detection.

2. Content that passes through your agents

When an agent runs, content from your connected accounts (emails, chat messages, SMS, phone call audio and transcripts) is read by the agent and sent to an AI provider. If you connected your own API key, that is the provider you configured (such as OpenAI or Anthropic) under your account. If the agent uses Setod-managed models, the content is sent to OpenAI or Anthropic under Setod's API account, which is governed by their API terms (content is not used to train their models). Either way the content is processed under the AI provider's own terms and privacy policy - we do not control what those providers do with it. Review their policies before connecting an account.

3. How we use data

  • To operate the Service: run your agents, show run history, enforce your settings.
  • To secure the Service and debug failures.
  • We do not sell your data or use your content to train AI models.

4. Sharing

Data is shared with the third-party services you explicitly connect (your AI provider, your email/messaging/SMS providers) only as needed to execute your agents' instructions, and with the service providers we use to operate Setod: Stripe (billing and identity verification), Twilio (managed phone numbers, calls and SMS), Amazon Web Services (hosting of code skills), Resend (transactional email), OpenAI and ElevenLabs (voice on phone calls), and Tavily or DuckDuckGo (web search, when enabled). We do not share your data with advertisers or data brokers.

5. Retention and deletion

  • Run history is kept so you can audit your agents. Deleting an agent deletes its runs. You can also set a retention period in Settings → Data & Privacy; older runs are then deleted automatically, or, if you choose "scrub content only", their message content is removed while the run record is kept for usage reporting.
  • Removing a connector deletes its stored credentials. A managed phone connector can only be removed once its number has been released.
  • Account deletion is handled on request (see section 8) and removes your agents, connectors, credentials, and run history.
  • Managed phone business information (legal name, address, business number) is retained for the life of the phone number and for the period required by applicable telecommunications regulations thereafter. This data cannot be deleted on demand while the number is active, as it underpins our regulatory obligations.
  • Identity verification data is held by Stripe under their retention policy. Setod retains only the pass/fail outcome and Stripe's reference ID. Deleting your account removes Setod's copy of this reference; to request deletion of the underlying verification data, contact Stripe directly.

6. Security

Credentials are encrypted at rest and transmitted over TLS. No system is perfectly secure, and you use the Service at your own risk - see the Terms of Service for the full disclaimer of warranties.

7. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above. Continued use after changes constitutes acceptance.

8. Data deletion requests

You may request deletion of your personal data at any time. Full account deletion is processed by email; individual data can be removed from the app directly:

  • Self-service. You can delete individual agents (with their run history), connectors (with their stored credentials), knowledge files, notes and tables from the app at any time, and set an automatic retention period for run content in Settings → Data & Privacy.
  • Email request. Send an email to privacy@setod.com with the subject line "Data Deletion Request" and include the email address associated with your account. We will process your request within 30 days and confirm once complete.

If your data was accessed via a third-party integration (such as Instagram or WhatsApp), deletion from this Service does not affect data held by those third parties. Please contact them separately to exercise your rights under their platforms.

9. Contact

Questions about this policy can be sent to privacy@setod.com.