Privacy Policy

Who we are

Lighthouse is the internal workspace of Sapelo AI, Inc. (“Sapelo”, “we”, “us”). It is used by Sapelo’s founders, employees, contractors and interns, who join by invitation or through a company email domain we have approved. This policy explains what we collect when you use Lighthouse on the web, iOS or macOS, and what we do with it.

What we collect

• Account details — your name, email address, profile photo, role and the organization you belong to.
• Sign in with Google — if you choose it, Google shares your name, email address, whether that address is verified, and your profile photo (the openid, email and profile scopes). We use these only to create or match your account and sign you in. Signing in with Google does not give us access to your Gmail, Drive, Calendar or any other Google data.
• What you put in — messages, documents, tasks, files, outreach records, meeting audio and transcripts, and anything you ask the Lighthouse agent.
• Security and usage records — sign-in events and method, sessions, devices, IP address, request logs, and an audit trail of actions, used to keep accounts secure and the service working.
• Device details — on iOS and macOS, a push notification token and app version so we can send the notifications you have turned on.

How we use it

• To run Lighthouse: sign you in, show your work to the people you share it with, and send the notifications you choose.
• To keep it secure: detect abuse, enforce permissions, and investigate incidents.
• To answer your requests to the Lighthouse agent, which sends the relevant content to the AI model providers listed below.
• To fix bugs and understand how features are used.

We do not sell personal information, and we do not use it for advertising.

Google user data

Lighthouse’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google sign-in data is used only to authenticate you, is not shared with third parties except as needed to run the service, and is never used to train AI models.

Who processes it for us

We share data only with providers that help us run Lighthouse, under contracts that limit their use of it:

• Hetzner — servers and databases (Germany).
• Cloudflare — DNS, network and file storage.
• Resend — sign-in and notification email.
• Apple — push notifications to iOS and macOS.
• Google — Sign in with Google.
• AI model providers (such as Anthropic, OpenAI and Google), reached through our own model gateway — only the content needed to answer a request you make to the agent.

We may also disclose information when the law requires it, or to protect the rights and safety of people or of Sapelo.

How long we keep it

We keep account and workspace data while your account is active. When you leave Sapelo or your account is removed, we delete or anonymize your personal information within 90 days, except records we must keep for legal, security or accounting reasons. Work you created for Sapelo, such as documents and tasks, stays with the company.

Security

Data is encrypted in transit, access is limited by role and permission, sessions can be revoked from any device, and administrative actions are logged. No system is perfectly secure, and we will tell affected people promptly if a breach involves their information.

Your choices and rights

You can see and edit your profile in Lighthouse, sign out of any device, turn notifications off, and disconnect Sign in with Google from your Google Account settings. To ask for a copy of your data, a correction, or deletion, email alex@sapeloai.com. Depending on where you live, you may have further rights under local law, and we will honor them.

Children

Lighthouse is not meant for anyone under 16, and we do not knowingly collect their information.

Changes

If we change this policy, we will update the date above and, for meaningful changes, tell you in Lighthouse before they take effect.

Contact

Sapelo AI, Inc. — alex@sapeloai.com