Who we are
Dialogus operates Hayloft, a personal AI assistant available through the web, WhatsApp, and optional connections. This policy covers the hosted Hayloft service. Contact us at hans@dlgs.ai for privacy questions or requests.
Information we collect
- Account and setup: your sign-in identifier, name, email, verified phone number, timezone, preferences, invitation relationship, and connection status. Google sign-in requests identity information; access to Gmail or Calendar is a separate connection.
- Conversations and memory: messages you exchange with Hayloft, attachments and voice notes you submit, transcripts, summaries, remembered facts, people, tasks, and routines.
- Connected services: information needed for features you enable, such as emails, calendar events, documents, repository content, website sessions, or call transcripts and outcomes. Access depends on the permissions you grant and the tasks you request.
- Credentials and activity: authorization tokens, secrets or browser sessions you supply, tool requests and results, delivery receipts, and operational records used to run, troubleshoot, and secure your assistant.
- Website and device information: cookies and technical request information, such as IP addresses, browser information, timestamps, and error logs processed by our hosting and security services.
How we use information
We use this information to authenticate you, operate your assistant, remember context, carry out your instructions, run the routines you enable, deliver messages, manage connections, and provide support. We also use operational information to diagnose failures, prevent abuse, and maintain the service.
Background activity can continue while an enabled routine or connection is active. Summarizing a conversation does not delete its original messages. Disconnecting a service stops its ongoing access but does not automatically remove facts or content already saved in your assistant’s memory.
Where information is processed
Hosted assistants run on cloud infrastructure. Account records, connection credentials, message routing, operational logs, and memory exports may be stored separately from the assistant’s runtime. Information does not stay solely on your phone or on a single assistant machine.
Relevant messages, memory, files, and tool results are sent to the AI and other service providers needed to fulfill your requests. Hosting and processing may take place in the United States or other countries where those providers operate; their privacy laws may differ from those where you live.
When we share information
We share information with providers that help deliver Hayloft: AWS for infrastructure and storage, Vercel for the website, the configured AI provider (such as OpenAI, Anthropic, or Google), Raindrop for AI observability (the assistant’s conversation turns and tool calls, used to find and fix failures), and services used by enabled features, such as search, messaging, browser automation, or telephony. WhatsApp messages also pass through WhatsApp/Meta. Connected services receive the requests and content needed for the actions you authorize.
A shared Hayloft WhatsApp number routes verified users to separate assistant accounts. Sharing that number or an invitation link does not grant another user access to your conversation or memory. Messages must still be processed by Hayloft’s infrastructure to route them and generate a reply.
Authorized operators may access information when necessary to provide support, investigate a problem, protect the service, or meet a legal obligation. We may disclose information when legally required, to protect rights or safety, or as part of a business transfer subject to appropriate privacy protections. We do not sell your personal information or use your private conversations for targeted advertising.
Google account data
Connecting Google lets Hayloft use only the permissions you grant for the features you enable—for example, reading email to prepare a briefing or reading and creating calendar events. Google data may be included in the context sent to an AI provider to perform those features.
Hayloft’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data to train generalized AI models, target advertisements, or build advertising profiles. Human access to this data is limited to the circumstances permitted by that policy, including your affirmative agreement to view specific data for support, security investigations, and legal requirements.
You can revoke access in your Google account connections. Revocation prevents future authorized access; contact us or use the deletion controls below to remove data already stored by Hayloft.
Cookies
We use cookies for sign-in, session security, invitation access, and measuring onboarding visits. We record when an invitation signup page is opened and associate that visit with your account if you join. Invitation cookies expire after seven days unless replaced or cleared. Clearing cookies or signing out does not delete your account or assistant memory. Blocking required cookies may prevent sign-in.
Retention and deletion
We retain account information, conversation history, memory, and connection data while needed to provide your assistant and the features you keep enabled. Stopping the assistant or signing out preserves that information.
For a managed hosted assistant, Delete everything in Settings starts removal of the assistant’s machine, stored connection secrets, memory exports, and account records. Deletion is a process, not an instant operation. Some security records, infrastructure logs, or backup copies may remain for their operational retention period or where required by law. Information already sent to a recipient or another provider is subject to that recipient’s or provider’s retention and deletion practices.
For a self-hosted installation, you also control and must remove copies on your own infrastructure. Email us if you cannot access your account or need help with a deletion request.
Your choices and requests
You can change preferences, stop routines, disconnect available connections, revoke access with the original provider, and request account deletion. Depending on your location, you may also have rights to access, correct, export, delete, restrict, or object to use of your personal information, withdraw consent, or complain to a data protection authority.
Send requests to hans@dlgs.ai. We may need to verify your identity before providing information or changing an account. Do not send passwords or access tokens in a support email.
Security
Hayloft uses authenticated access, account separation, and restricted storage for connection credentials. These controls reduce risk but cannot guarantee that information will never be lost, misused, or accessed without authorization. Only connect accounts and share information you want the assistant to use.
Age requirement and changes
Hayloft is intended for adults aged 18 or older. If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate.
We may update this policy as Hayloft changes. We will publish the updated version and effective date here and provide additional notice of material changes where required. The Terms of Service describe the rules for using Hayloft.