Privacy notice.

Chief of Staff stores your account details, organization memberships, connected source snapshots, preferences, and action history to provide its work automation service. OAuth tokens are encrypted by the application. Passwords are stored as one-way hashes.

Live agent runs send source content and preferences from the current organization to the operator’s configured AI model provider: Amazon Bedrock or Anthropic. Connected APIs receive approved actions and routine actions permitted by the organization’s settings.

Members of your organization can see its source context and activity according to their role. Only owners and administrators manage connections. Source data stays in that organization until its owner deletes it; account deletion does not erase team-owned history.

Deleting an organization removes its source data and local connection credentials. Disconnecting locally does not revoke an external provider’s grant; revoke access in that provider’s settings as well. Provider-side records and backups follow their own retention policies.

The deployment operator must supply its identity, contact details, and any additional applicable policies before public launch. This is the application’s operational notice, not a claim of regulatory certification.