Privacy policy

Information the app handles

• Google account identity, including your name, email address, profile image, granted permissions, and access and refresh tokens that support continued synchronization.
• Connected Gmail content, including senders, recipients, subjects, message bodies, labels, threads, and the decisions and drafts associated with them; calendar details and events used to understand commitments and availability.
• Tasks from the Google task lists you select and full text from the Google Docs journal you connect. Journal imports can retain earlier versions as historical evidence when a document changes.
• Information you provide in Montrago: goals, notes, feedback, conversations, progress, energy and availability, recurring-event context, and agent instructions. The app stores generated recommendations, learned preferences, evidence, and model revisions.
• If you use Siri capture, the submitted text, request identifier, delivery status, and source references. If you enable SMS, your phone number, verification and consent state, and message delivery records.
• If you grant browser location access, coordinates and related location context; places you save can include names, addresses, and coordinates.

How information is used

Montrago uses this context to identify obligations, recommend achievable work or rest, prepare replies and research, interpret calendar availability, suggest goal updates, and assess progress. It records decisions and feedback to improve later recommendations. Accepted life goals and proposed changes are stored separately.

Google permissions also support actions you choose in the app, such as changing Gmail labels, preparing drafts, creating calendar holds, and synchronizing completion of imported tasks. Manual Siri task captures create Google Tasks; journal captures append to your connected document. Email obligations and AI task suggestions are not exported as new tasks to your Google list.

Services that process information

• Google provides sign-in, Gmail, Calendar, Tasks, and Docs/Drive access. The app requests optional Tasks and file-access permissions when you connect those features.
• OpenRouter and the selected AI provider process relevant app context, which can include connected email and journal text, to generate interpretations and suggestions. The app requires provider routes marked for zero data retention and disallowing data collection; it does not use community or free model routes. Depending on the configured model, providers include Anthropic, OpenAI, or Google and their supported cloud hosts. When configured, Voyage AI receives short descriptions of obligations to help identify related tasks.
• Vercel and Turso provide app hosting, server execution, and database storage. Managed research uses Vercel Sandbox to visit public websites; those websites and Google Search receive the requested URLs or search queries. Results and execution events are stored in Montrago.
• Twilio receives your phone number and verification or reminder messages when the SMS feature is used.
• OpenStreetMap Nominatim, the default address lookup service, receives coordinates when Montrago resolves a location to an address.

These services process information under their own terms and privacy policies. App records are associated with your account, but the app operator can access the stored data; this is not an end-to-end encrypted personal vault.

Storage and retention

Montrago keeps server-side copies of connected content and derived records so it can work across sessions and synchronize in the background. There is no single automatic retention deadline for connected accounts. Changing or disconnecting a source does not by itself erase every earlier imported copy, generated interpretation, or history record.

The browser uses a signed sign-in cookie, session storage for cached app views, and local storage for interface preferences. The server also records processing status, errors, and AI usage information. Demo sandboxes have a 48-hour access window and are scheduled for cleanup afterward; a keyed hash of the requesting IP address is used to limit demo creation. Demo deletion can retain an empty rate-limit record until cleanup.

Your controls and deletion

You can change connected sources, revoke Siri capture credentials, disable SMS, and remove location permission in your browser. You can revoke Montrago's Google access through your Google Account's connected-app controls; revocation stops future access but does not delete information already stored by Montrago.

Invited accounts can use Delete my data & disconnect to remove their app database records and end their session. The app also attempts to revoke the Google grant, although a provider or network failure can prevent that step. Protected owner and template accounts require operator-managed deletion. Deleting app data does not delete the original messages, tasks, or documents in Google, and does not itself erase copies held in provider logs or backups.

For privacy questions or a deletion request, contact the person who provided your Montrago access.