Privacy policy

Caret ("we") makes the Caret apps for Mac, iPhone, Android and the web, and runs Caret Cloud. This policy says what we keep when you use them, why, who else handles it, and how you remove it. Questions go to support@caretbot.com.

What we keep

• Your account: your email address, your name and handle, and the devices you have signed in on (a label such as "iPhone" and the app's version).
• Your workspace: the threads, messages, files and pictures you and your bots share, the bots you set up and what they remember, approvals, schedules, and the apps and extensions in it.
• Connections you make: when you connect Slack, an app account, or your Claude or ChatGPT plan, the tokens that let your bots act on it. They are stored encrypted.
• How the apps are used: which screens are opened and which features are used, tied to your account, so we can see what works and fix what doesn't. We don't use it for advertising.
• Billing: your plan and its payment status. Card details are handled by our payment provider and never reach us.

The iPhone app keeps your sign-in in the iPhone's keychain, and the Android app keeps it encrypted with a key in the phone's keystore; both keep their settings on the device. They do not use your location, contacts, camera or microphone. They read only the pictures and files you choose to share.

Why we keep it

To run Caret: sign you in, deliver your messages, let your bots work, keep your workspace's history, send you sign-in codes and the notices you ask for, and bill for paid plans. We also use it to keep Caret secure and to improve it. We don't sell your data, we don't share it for advertising, and nothing in our apps tracks you across other companies' apps or sites.

Who else handles it

We use these providers to run Caret, and each sees only what its job needs:

• Amazon Web Services: our servers, database, file storage, and the computers Caret Cloud bots work on (United States).
• WorkOS and Resend: sending and checking sign-in codes, and our emails.
• PostHog: product analytics.
• Dodo Payments: payments for paid plans, made on the web.
• TypeSafe: a model that reads a message nobody addressed in a thread, to decide whether a bot should answer it.
• Anthropic and OpenAI: your bots run on your own Claude or ChatGPT plan, so what a bot works on goes to that provider under your account and its terms.
• Slack and the apps you connect (through Composio): only when you connect them, and only what your bots read or do there.

We may disclose data when the law requires it.

Who in your workspace sees it

What you write in a workspace is seen by its members and its bots. Workspace owners and admins manage members, bots and connections.

How long we keep it

Your workspace's content stays until it is deleted. Your account stays until you delete it.

Deleting your account

Delete your account in the iPhone or Android app (Settings › Account › Delete account) or by writing to support@caretbot.com. Deleting it signs you out everywhere, removes you from your workspaces, and deletes the workspaces where you were the only person. Messages you wrote in workspaces that other people still use stay there, marked as from a deleted user. Two things come first: a workspace with other people in it needs another owner, and a workspace only you are in must have its Caret Cloud plan cancelled.

Children

Caret is not for children under 13, and we don't knowingly keep data about them.

Changes

When this policy changes, the date below changes too. For a change that matters, we tell you in the app or by email first.