Privacy Policy

Effective date: October 11, 2026

This policy explains what MyTeam (run by Vivander Advisors LLC, "we", "us") collects, why, where it is kept, who can see it, who else handles it, the risks you should understand, and what you can do about it. It is part of our Terms of Service.

The short version

• Your workspace is private. We do not look at what you put in it in the normal course of running the Service, and our admin tools do not show it.
• You decide what goes in and what you connect. Online services carry real risk, so be careful with sensitive information.
• You can download everything, or delete everything, at any time, in Settings or by asking us.
• We never sell your information and never use your content to train AI models.

Who it is for

MyTeam is offered only to people in the United States who are 18 or older. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, email us and we will delete it.

What we collect, and why

• Account details. Your name, email address and, if you sign in with Google or Apple, the profile details they share (for Apple, possibly a private relay address). Used to sign you in and contact you about your account.
• Sign-up record. The version of these documents you accepted, the time, your confirmations (that you live in the United States, are 18 or older, and understand the risks described in our Terms), and the IP address of the request. Kept as the record of your agreement.
• Your workspace content. Commitments, time entries, notes, ideas, clients, contacts, transcripts, files, chats with your coach and team, and anything else you add ("Your Content"). Used only to provide the Service to you.
• Services you choose to connect. If you connect mail, calendar, files, a call recorder, a CRM or another service, we read it, and write to it only where you approve, solely to power the features you use. We never send email or change your calendar without your approval in the product.
• Billing. Stripe handles payments. We receive your billing name, billing address and subscription status, never your full card number.
• Basic usage and security logs. Which pages are used, sign-in events, and technical details such as IP address and browser, to run, secure and improve the Service. No advertising trackers.

Who can see your workspace

• You, and people you add to your workspace.
• Not us, in the normal course. Each workspace has its own separate database. Our administration tools show account, plan and billing details, not the contents of your workspace.
• Only in limited cases may we, or the companies that host the Service for us, access Your Content: when you ask us to (for example for support), to investigate or prevent a security problem, fraud or abuse, to keep the Service running (for example restoring a backup), or when the law or a valid legal order requires it. Where the law allows, we tell you when we have done so.
• Automated processing. Parts of Your Content are processed by machines, including the AI providers below, so the Service can answer your requests. No person at those providers reviews it on our behalf.

Where it is kept

Our servers are run by Hetzner in Germany, so your information is stored outside the United States. Nightly backups protect against loss and are deleted as they expire, normally within 30 days.

Who else handles it

We use a small set of companies to run MyTeam. Each receives only what it needs and handles it under its own terms:

• Hetzner: hosting, storage and backups.
• Stripe: payments.
• Google and Apple: sign-in, and the mail, calendar and file connections you choose.
• OpenRouter and the AI model providers it routes to: they receive the content of a request only so your coach and team can answer it.
• AgentMail: the emails MyTeam sends you, such as sign-in links and notices.
• Services you connect yourself, which handle your information under their own terms.

We may also disclose information when the law requires it, to protect anyone's safety or our rights, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.

What we never do

• We never sell your personal information or share it for cross-context advertising.
• We never let one customer see another's workspace.
• We never use Your Content to train AI models. Requests we route through OpenRouter go only to providers that do not store or train on them. If you use your own AI provider key, that provider handles your requests under its own terms.

Risks you should understand

• No online service is perfectly secure. Despite reasonable precautions, information can be accessed without permission, intercepted, altered or lost, including through hacking, malware or a failure at one of the companies above. By using the Service you accept this risk, as set out in our Terms.
• Be careful what you add. Do not put Social Security or other government ID numbers, bank or card numbers, passwords, health or medical records, information about children, or other highly sensitive information into the Service. It is not designed for regulated data such as information covered by HIPAA.
• Be careful what you connect. A connected account gives the Service access to what is in it. Grant only the access you are comfortable with, and disconnect anything you no longer need.
• Information about other people (clients, contacts, meeting attendees, call recordings) is your responsibility; make sure you have the right to add it and any consent the law requires.

How long we keep it

We keep your workspace while your account is open. When you delete your workspace, or ask us to, its database is deleted straight away and copies in backups are deleted as those backups expire. We keep billing records as long as tax law requires, security logs for a limited period, and the sign-up record for as long as it may be needed to show what you agreed to.

Security

Separate databases per customer, encrypted connections, sign-in sessions that expire and can be ended, and a fresh sign-in required for sensitive actions such as billing, connecting accounts and deleting data. If a security incident affects your personal information, we will notify you as the law requires.

Your choices and rights

• Download. Settings, then Your data, then "Download my data" gives you a complete copy of your workspace at any time. You can also ask us by email.
• Delete. Settings, then Your data, then "Delete this workspace" permanently deletes your workspace and its database, or email us from the address on your account and we will do it. Download first: deletion cannot be undone.
• Access and correction. Email us to ask what we hold about you or to correct it.
• State privacy rights. Depending on the state you live in, you may have rights to know, access, correct, delete or obtain a copy of your personal information, and to opt out of its sale, sharing for targeted advertising, or profiling (we do none of these). To use any of these rights, email support@vivander.ai. We will verify your request using the email on your account, respond within the time the law requires, and will not treat you differently for using them. If we deny a request, you may appeal by replying to our answer.

Cookies

We use cookies only to keep you signed in and secure. No advertising or cross-site tracking cookies.

Changes

If we change this policy materially, we will email the address on your account or show a notice in the Service before the change takes effect, and ask you to accept the new version the next time you sign in.

Contact

support@vivander.ai. A person reads it.