Privacy Policy

Version 1.3 · Last updated: October 12, 2026

We built Integrity to be a place where your ideas, notes, and projects can live safely — not a place that mines your data. This policy explains what we collect, why, and what choices you have. Questions? [email protected].

1. Who we are

Integrity is an AI-native workspace that combines documents, canvases, and AI chats into one connected thinking environment, operated by SHEM INTEGRITY, Inc. Your data is yours, and we handle it responsibly.

2. What we collect (and what we don't)

When you create an account:

• Email address and password (or authentication via Google/Apple)
• Name or username
• Profile photo (optional)
• Account and workspace settings

When you use Integrity:

• Content you create: documents, canvases, AI chats, notes, attachments (stored and synced across your devices)
• Usage data: error logs, performance metrics, and feature usage — to improve stability and UX
• Device and browser data: IP, user agent, and OS type — for security and analytics

When you use AI features:

• Your prompts and context are sent securely to our AI providers (see §4)
• We don't train models on your private content
• We don't sell, share, or re-use your prompts beyond what's required to generate a response

We do not collect or process:

• Special-category data (race, religion, sexual orientation, political beliefs, health data)
• Payment card data directly (handled by Stripe)
• Personal information from minors

3. How we use your information

• Run and improve the Integrity service (sync, backup, performance)
• Power AI features you explicitly use
• Communicate important updates (billing, security, major product changes)
• Send product tips and news by email — only if you opted in. Every such email has an unsubscribe link, and you can change this in Settings at any time
• Provide customer support
• Prevent abuse and maintain platform security
• Comply with legal obligations

We don't profile, sell, or share your data for advertising purposes. Ever.

4. How AI features handle your data

Integrity includes AI tools powered by trusted providers. Your prompt and context may be sent to OpenAI (GPT), Anthropic (Claude), Google (Gemini, via the paid Gemini API and Google Cloud Vertex AI), Nebius, Fireworks (open models such as DeepSeek), Gonka, xAI (Grok), fal.ai (image generation), Deepgram (speech-to-text) or TypeSafe (short yes/no decisions). The current, complete list — including each provider's region — is maintained on our Subprocessors page.

Some of this is not the model you picked. Choosing a model in the picker decides who answers you, but Integrity also makes smaller automatic calls to do its job — reading an uploaded document, transcribing a meeting or a voice message, describing an image, deciding whether a message in a group chat was meant for the assistant, and deciding whether something you said is worth remembering. Those go to the provider best suited to the task, which may not be the one you selected. The Subprocessors page says what each provider receives.

When you use them:

• Your message or context is sent to the relevant AI provider securely via API
• The provider generates a response and sends it back to your workspace
• We don't store those prompts longer than needed for functionality
• Your content is not used by these models for training or dataset enrichment

5. Google user data

This section covers data Integrity receives from Google APIs. Where it is stricter than the rest of this policy, it wins.

Google Sign-In. If you sign in with Google, we receive your name, email address and profile photo, and use them only to create your account and sign you in.

Google Workspace. If you connect Gmail, Google Calendar, Drive, Docs, Sheets or Slides in Settings → Connections, Integrity accesses that service through Google's official MCP server for it, with the access you choose when connecting. Each service is connected separately, and Read & write adds to Read-only:

• Gmail — read-only (gmail.readonly): search and read your messages, threads and labels. Read & write adds gmail.compose: create drafts. Nothing is sent without you: drafts wait in Gmail for you to review and send.
• Calendar — read-only (calendar.calendarlist.readonly, calendar.events.readonly, calendar.events.freebusy): list your calendars, read events and check free time. Read & write adds calendar.events: create, change, delete and answer events.
• Drive — read-only (drive.readonly): search and read your files. Read & write adds drive.file: create and copy files; this reaches only files Integrity created or you opened with it.
• Docs — read-only (documents.readonly, drive.readonly): find and read your documents. Read & write adds documents, drive.file: create and edit documents.
• Sheets — read-only (spreadsheets.readonly, drive.readonly): find and read your spreadsheets. Read & write adds spreadsheets, drive.file: create and edit spreadsheets.
• Slides — read-only (presentations.readonly, drive.readonly): find and read your presentations. Read & write adds presentations, drive.file: create and edit presentations.

How we use it. Only to do what you ask the Integrity assistant to do with the connected service — for example, find a message, summarize a document, check your calendar, or draft a reply — either in a chat or in a task you set up. We do not read your mailbox, calendar or files in the background, and we use this data for nothing else.

• The content the assistant retrieves is shown to you in the chat and saved as part of that chat in your workspace, like any other chat content. Deleting the chat deletes it.
• To answer your request, the retrieved content is sent to the AI model provider handling that request, for that request only — and only to a provider that does not train on it: Anthropic, OpenAI, Google (the paid Gemini API and Vertex AI), xAI or Fireworks. Integrity enforces this in code: other models (DeepSeek's own API, Nebius' and Gonka's) cannot use these Google services, and a chat that contains Google data cannot continue on them. DeepSeek models offered in Integrity run on Fireworks' own infrastructure; nothing is sent to DeepSeek.
• We do not use Google user data to develop, train or improve AI or machine-learning models — ours or any provider's.
• We do not use Google user data for advertising, retargeting, personalized ads, profiling, or credit decisions, and we never sell it.
• We do not transfer it to anyone except as needed to provide the feature you asked for (the AI provider and our hosting providers), to comply with law, or as part of a merger or acquisition with notice to you.
• No person at Integrity reads your Google data unless you ask us to (for example, in a support request), it is needed for security or abuse investigation, or the law requires it.

Storage and deletion. Google access tokens are stored encrypted at rest and sent only over TLS. Disconnecting a service in Settings → Connections deletes the stored tokens immediately; you can also revoke access at myaccount.google.com/permissions. Deleting your account deletes all remaining data as described in §6.

Integrity's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. How we store and protect your data

Your data may be processed or stored in the United States, Germany, and Finland, depending on the service. We follow GDPR and CCPA principles globally.

Retention:

• Deleted content is removed from active servers within 30 days
• Backups may persist for up to 90 days
• Logs and analytics are anonymized or aggregated after 12 months

7. How you can control your data

• Access your data
• Delete your account and all associated content
• Correct inaccurate information
• Object to specific types of processing (like analytics)
• Withdraw consent at any time
• Stop product tips and news by email: use the unsubscribe link in any such email, or Settings → Account
• Export / port your data

To exercise these rights, contact [email protected].

8. Data sharing

We only share data with:

• Service providers who help us run Integrity (hosting, storage, email, analytics, AI processing, payments, error monitoring) — see our Subprocessors page
• Law enforcement, if legally required and verified
• Your collaborators — when you explicitly share a project, note, canvas, or chat

All partners are contractually bound to handle data securely and only for the purposes we specify. We never sell or exchange personal data for marketing or tracking.

9. Cookies and tracking technologies

We use minimal, privacy-friendly cookies to keep you logged in, remember preferences, and measure performance. We use Google Analytics in privacy-enhanced mode (IP anonymization). You can opt out at tools.google.com/dlpage/gaoptout. In the Russian billing flow we also load Yandex Metrika, which sets its own analytics cookies (_ym_uid, _ym_d, _ym_isad). See the detailed overview in §16. We do not use cookies for advertising, behavioral tracking, or profiling.

10. Data location and international transfers

When you use Integrity from outside its hosting regions, your data may be transferred to servers in the U.S. or EU. We rely on secure transfer mechanisms such as Standard Contractual Clauses (SCCs) to stay compliant with GDPR and equivalent frameworks. By continuing to use Integrity, you consent to such transfers where necessary to provide the service.

11. Children's privacy

Integrity is not designed for children under 18. We do not knowingly collect data from minors. If we learn that a minor's data was submitted, we will delete it.

12. Data breaches

If we experience a breach affecting your information, we'll notify affected users via email within 72 hours, describe what happened and what data was involved, and help you protect your account.

13. Third-party services (subprocessors)

We integrate with third-party platforms essential to Integrity's operation, including hosting (Hetzner), object storage (Cloudflare R2), email (Amazon SES), payments (Stripe), error monitoring (Sentry), feedback (Userback), analytics (Google Analytics), and the AI providers listed in §4. The full, current list with purposes and regions is on our Subprocessors page. Each provider has its own privacy practices; we choose vendors that meet recognized security and data-protection standards.

14. Your rights under GDPR, CCPA, and similar laws

Depending on your location, you may have additional rights, including to know what personal data we hold, request deletion or correction, object to automated decision-making (we don't do it), and file a complaint with a data protection authority. We respond to verified requests within 30 days.

15. Updates to this policy

We may update this policy to reflect product or legal changes. For significant updates we'll notify you by email or in-app at least 7 days before they take effect. The latest version is always at integrity.sh/legal/privacy.html; previous versions are retained in our version history.

16. Cookies and tracking technologies (detailed overview)

We only use the cookies we need to make Integrity function, protect your account, and understand how the app is used. You can manage or disable cookies in your browser settings.

How we use cookies

• Essential cookies — keep you signed in, route requests securely, prevent abuse, and keep the app reliable.
• Functional cookies — remember preferences like theme, layout, or language.
• Analytics cookies — privacy-friendly analytics, aggregated and not linked to your private content. Google Analytics runs cookieless in the app; Yandex Metrika, loaded in the Russian billing flow, sets _ym_uid, _ym_d and _ym_isad.

We do not use cookies for advertising, behavioral tracking, or profiling.

Third-party services that may use cookies

• Stripe — secure payment processing and fraud prevention
• Google Analytics — aggregated usage analytics
• Yandex Metrica — usage analytics in the Russian billing flow
• Userback — in-app feedback and bug reports

These partners collect limited technical information and cannot access your private workspace data. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout. Disabling essential cookies may break features like staying logged in.

17. Contact us

SHEM INTEGRITY, Inc · 701 Tillery Street, Unit 12, #2457, Austin, TX 78702, United States · [email protected]. We typically reply within 3–5 business days.