Privacy Policy
Effective September 24, 2026.
This policy explains what information Space Garage collects when you use the Space Garage Platform, why we collect it, how we share it, and the choices you have. We wrote it in plain words. If anything is unclear, write to greetings@spacegarage.tech.
Who we are and what this covers
Space Garage makes the Space Garage Platform, a to-do list that helps get things done. To do that, it has to hold the things you write in it. "We" and "us" means Space Garage, the people who run the Space Garage Platform and decide how your information is handled.
This policy applies to information we collect when you use the Space Garage Platform: its website, its applications, and the features available through them, which we call the "Services". It does not cover other companies' products that you may connect to the Services. Those have their own policies.
What we collect
Everything we hold about you is there for one of three reasons: to run the Services for you, to reach you when the Services need to, or to learn what is not working. It reaches us in three ways: you type it in, it is recorded as you use the product, or another service hands it to us because you asked it to.
What you give us. Before you have an account, you can try the product without signing up. What you type at that stage stays in your own browser, on your own device, apart from the sentence we use to sketch a starting plan, which is processed by our server and our AI model provider and stored by neither until you choose Save. When you create an account we keep your email address. We do not use passwords, so we do not store one. What you put in is yours: your projects, to-dos, notes, decisions, comments, dates and any files you attach. If you add other people to your lists, we keep what you enter about them: a name and, if you choose, an email address, phone number or picture. If you invite someone, we send them an email that shows your name, the project name and any note you wrote, so add someone's details only if they would be fine with it. If you ask for an early access invitation, we keep your email address, your name, what you hope to use the product for and how you heard about us, and use that only to decide on and send invitations. There is no marketing list.
What is recorded as you use it. Like every website, our servers see your internet address (IP address), your browser type and which pages were requested and when. We keep a history of changes in your account (who changed what, and when) so that you and the people you share with can see what happened and undo mistakes, along with your in-app notifications, your conversations with the assistant and a running count of how much assistant use your account has had. We measure which screens and buttons get used, which site sent you to us, what kind of device you are on and your rough location (country or city, worked out from your IP address), to find out where people get stuck. These measurements never include what you write, your name or your email address, and we do not record your screen.
Cookies. We use a sign-in cookie to keep you signed in, a small cookie that remembers how you like the screen laid out, a short-lived cookie while you approve an outside app, and a cookie our measurement tool uses to tell one visit from the next. We do not use advertising cookies. Some browsers can send a "Do Not Track" signal. We do not follow you across other websites, so the signal changes nothing here, and no other company collects information about what you do on other sites through the Services.
What other services hand us. If you sign in with Google, Google gives us your name, email address and profile picture. If you connect your Google mail, we receive the pieces of mail needed for the job you asked for; the section on Google below says exactly how that works. If you turn on notifications, your browser or phone gives us an address we can send them to, and the notification travels through the company that makes your browser or phone. You can turn them off at any time.
Why we use it
- To provide the Services: show you your lists, share them with the people you choose, and keep them safe.
- To do the jobs you hand to the assistant.
- To send the emails the Services need: sign-in links, confirmations and invitations. We do not send marketing email.
- To keep the Services secure, stop abuse and fix what breaks.
- To understand which parts of the product work and which do not.
- To follow the law and protect the rights and safety of you, us and other people.
Legal bases. If you are in the European Union or the United Kingdom, the law asks us to name our reasons. We handle your account and your content because we need to in order to provide the Services you asked for. We handle security, troubleshooting and usage measurement because we have a legitimate interest in a product that is safe and that works. Where we ask for your permission first, such as notifications or connecting your Google mail, we rely on that permission, and you can take it back at any time.
The assistant and AI
When you ask the assistant to do something, the text it needs for that job (for example the to-do you are working on and your conversation with the assistant) is sent to our AI model provider, which sends back the result. Our agreement with that provider forbids it from using your content to train its models, and we do not use your content to train AI models either. The assistant can be wrong. It is never used to make decisions about you that have legal or similarly serious effects.
Information from Google
Signing in with Google. We receive your name, email address and profile picture. We use them only to create your account, sign you in, and show your name and picture to the people you share with.
Connecting your Google mail. This is not yet offered to everyone. When it is, it will be your choice, made on Google's own permission screen, and it will work like this: the Space Garage Platform reads your mail only to do the jobs you ask for, such as finding the guests for an event or finding a confirmation. It does not change or delete your mail. We store the key Google gives us in encrypted form, and we store only the pieces of mail needed for the job you asked for. You can disconnect at any time, in the Space Garage Platform or in your Google account, and when you do we delete the key and any pieces of mail we stored.
The Space Garage Platform's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain words:
- We use information from your Google account only to provide or improve features you can see and use in the product.
- We do not sell it, and we do not use it for advertising.
- We do not use it to build or train general AI models. When the assistant needs part of a message to do a job you asked for, that part is sent to our own AI model provider for that job only, under terms that forbid training on it. It is never sent to a provider you added with your own key.
- No person at our company reads it, unless you ask us to and agree to it for a specific message, or it is needed for security or to follow the law.
- We do not pass it to anyone else, except as needed to provide the feature, to keep the Services secure, or to follow the law.
How long we keep it
Nothing is kept longer than the reason for keeping it, unless a law says otherwise. The usual periods:
| What | How long |
|---|---|
| Your account and everything in it | For as long as your account is open |
| Things you put in the Trash | 30 days, then they are permanently deleted, files included |
| A sign-up that was never confirmed | 30 days, then the email address is deleted |
| An early access request | Until you are invited or ask us to remove it, and no longer than 12 months |
| Your account after you ask us to close it | Deleted within 30 days of your request; we do not keep separate backup copies beyond that |
| Server logs | A short period: days, not months |
| Usage measurements | As long as we use them for this purpose, with no names or content in them |
Security
Everything travels over an encrypted connection, your content and files are encrypted where they are stored, each account's information is kept apart from every other account's, and the keys for services you connect get a second layer of encryption. We do not look at what you write, unless you ask us for help and agree to it, or we need to in order to investigate abuse or a security problem, or the law requires it. No system is perfectly secure. If something goes wrong that affects your information, we will tell you promptly.
Choices
- Limit what you give us. You can use the product without an account, without Google, and without connecting anything. Some features will not work without the information they need.
- Turn things off. Turn off notifications, disconnect Google or any other service you connected, or remove an outside app's access, at any time.
- Control cookies. Your browser lets you block or delete cookies. Blocking the sign-in cookie will sign you out.
- Delete things yourself. Put anything in the Trash, or ask us to close your whole account.
Your rights
Wherever you live, you can ask us to:
- show you a copy of the information we hold about you;
- correct it, if you cannot change it yourself in the product;
- delete it, including closing your whole account;
- give you a copy of your content in a common file format;
- stop or limit how we use your information, including measuring your use.
Write to greetings@spacegarage.tech from the email address on your account. We answer within 30 days, and there is no charge. We will never treat you worse for using these rights. If we cannot honour a request, we will say why, and you can ask us to look at it again. If you live in the European Union or the United Kingdom, you can also complain to your local data protection authority. If you live in California or another US state with a privacy law: we do not sell your personal information, we do not share it for advertising, and the rights above are yours too.
If someone added your name or contact details to their list and you would like them removed, write to us and we will take care of it.
Where your information lives
The Services are run from the United States. If you use them from another country, your information is sent to and stored in the United States, where privacy laws may differ from yours, and by using the Services you agree to that transfer.
Children
The Space Garage Platform is for adults. You must be at least 18 to have an account. We do not knowingly collect information from children. If you believe a child has given us information, write to greetings@spacegarage.tech and we will delete it.
Changes to this policy
The Space Garage Platform is in early access. When we change this policy we post the new version here and update the date at the top. If a change affects how we handle your information in a way that matters, we will tell you by email or in the product before it takes effect.
Contact
Questions, requests or complaints: greetings@spacegarage.tech.