SEKTOGRAM / LEGAL
Privacy
Policy.
Effective October 1, 2026
Get in touchWho we are
Sektogram ("we", "our", or "us") operates the Sektogram desktop app, the Sektogram cloud service at api.sektogram.com, and this website. You can reach us at support@sektogram.com.
Account data
When you create an account, we store:
- • Your name and email address
- • Your Sektogram ID
- • Your password, stored only as a one-way hash
- • The sign-in methods you use (email and password, Google, Microsoft, passkeys, two-factor authentication)
- • Session and device identifiers
We use your IP address for security and rate limiting. For the free plan, we keep a one-way hash of network information to prevent abuse.
Your content
We store and process:
- • Workspaces, agents and their instructions, and routines
- • Calendar items, to-dos, and notes
- • Skills and packages you create
- • Files you add to the Company Brain (stored and indexed so your agents can search them)
- • Secrets you save in the vault (encrypted at rest)
Chat history from the desktop app is stored on your own computer, not our servers.
Connected apps
When you connect to Gmail, Google Calendar, Google Drive, Outlook, or other services:
- • Sign-in tokens are encrypted at rest
- • Tokens are used only to do what you or your agents ask (search, read mail, draft replies, list or create calendar events, etc.)
- • Disconnecting an app deletes its tokens
Google user data
What we access and why
- • Gmail (gmail.modify): search, read and draft messages, and send them when you approve
- • Google Calendar: read events and create the events you ask for
- • Google Drive: search and read files you ask about
- • Google Sign-In: your name and email
Use limits
- • Gmail content is not indexed into the Company Brain unless a workspace admin turns that on
- • We do not sell Google user data, do not use it for advertising, and do not use it to train generalized AI or machine-learning models
- • People at Sektogram do not read it, except with your permission, for security or abuse investigations, or when the law requires it
Sektogram's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
AI processing
To answer your request, the relevant text—including content from a connected app—is sent to the AI model provider that runs the model you chose. This is only for generating your response, under API terms that do not allow the provider to train on it.
Current providers: xAI, Google (Gemini), Mistral AI, NVIDIA, and DeepSeek through the Agentius gateway.
Service providers
We work with: Oracle Cloud Infrastructure (hosting in Zurich, Switzerland); Vercel (this website and sandboxes for scheduled cloud agent runs); Spacemail (account emails); Paddle (payments, when paid plans launch); the AI model providers above; and Google or Microsoft only when you connect their apps.
Data retention
- • Server logs: kept up to 30 days
- • Database backups: daily, each kept 14 days
- • Account data: kept while your account exists
Deletion and export
You can delete your account from the account page—an emailed code confirms the deletion. Your data is deleted, and backups roll off within 14 days. A minimal one-way hashed record of free-plan usage stays to prevent abuse.
You can ask for a copy of your data or a correction at support@sektogram.com.
Security
- • TLS encryption in transit
- • Tokens, vault secrets, and data-source logins encrypted at rest
- • Access limited to the people who run the service
Your rights
You have the right to access, correct, delete, object to, and export your data under the laws that apply to you (for example, the GDPR). Write to support@sektogram.com to exercise these rights.
International transfers
Our hosting is in Switzerland. Some providers (such as AI model providers and Vercel) may process data in other countries, including the United States, under their data protection terms.
Children
Sektogram is not for children under 16.
Changes to this policy
We post updates here with a new effective date. For material changes, we will notify account holders by email.