Privacy Policy

Last updated: June 30, 2026

commissure is built local-first on purpose: your personal data stays on your device. This explains the little that does leave it, and why.

What stays on your device — and what leaves

The corpus commissure builds from your messages, email, browser history, notes, files, and other sources lives on your own device. We never upload it wholesale, and we cannot see it.

What the cloud sees

Using commissure.ai (accounts, the website, metered "ask") involves our cloud, which handles only:

• Account metadata — your email, plan tier, and usage counts, to run your account and meter usage.
• Query content, only when you use a cloud model — when you ask through our metered cloud, the question and the specific snippets needed to answer it are sent to the model provider to generate the answer. We don't store your corpus; only that request transits. Run a fully local model instead and nothing leaves your device at all.

Google Gmail & Calendar access

If you connect Gmail or Google Calendar, commissure uses Google OAuth in the local Mac app to request read-only access. The OAuth tokens are saved on your device, and Gmail messages plus Calendar events are ingested into your local corpus so you can search, summarize, and reason over your own context.

Google data is not uploaded wholesale to commissure.ai. It leaves your device only when you explicitly use a cloud AI feature that sends the question and the selected snippets needed to answer it. We do not sell Google user data, use it for advertising, or use it to train models.

commissure's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Who we share with

Only the providers needed to operate: Anthropic / OpenAI (model inference on the request you submit), Stripe (payments), Cloudflare (hosting), and Resend (sign-in emails). We do not sell your data, ever, and it is not used to train models.

Retention & deletion

Local data is yours to delete on your device anytime. For cloud account data, email nik@commissure.ai to access or delete your account and we'll remove it promptly.

Security

Accounts use passkeys (no passwords to leak), and cloud data is limited to the metadata above. No system is perfectly secure — but the local-first design means the sensitive part, your corpus, isn't ours to lose.

Changes & contact

We may update this policy; material changes are posted here with a new date. Questions or requests: nik@commissure.ai.