Legal

1. Introduction

Casson Technologies Inc d/b/a Adviserry ("Adviserry," "we," "us," or "our") operates the Adviserry Boards platform and Adviserry Labs service (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address, full name, and password. Your password is cryptographically hashed by our authentication provider (Supabase) and is never stored in plain text. We also store your timezone preference, subscription status, and onboarding state.

2.2 Gmail Data

If you connect your Gmail account, we request read-only access to your email using the following OAuth scopes:

• gmail.readonly — Read-only access to your Gmail messages
• userinfo.email — Access to your Gmail email address

We use this access to identify newsletter senders in your inbox and retrieve newsletter content. Specifically, we access email headers (sender, subject, date), email body content, and message metadata (message ID, labels, received timestamp). We cannot send, delete, or modify your emails.

From newsletter emails, we extract and store: the email subject, the raw HTML body, a processed markdown version of the content, an AI-generated summary, key topics, and a vector embedding (a numerical representation used for search). Your OAuth tokens (access token and refresh token) are encrypted using AES-256-GCM encryption before being stored in our database.

We do not access, read, or store personal emails, messages from contacts, or any non-newsletter content. Our scanning process identifies newsletter senders by analyzing email patterns and headers, and only processes messages from senders you approve.

2.3 User-Generated Content

You may upload documents (PDF, DOCX, DOC, TXT, MD, RTF; up to 10MB each) and create organizational boards. If you have a Pro plan, you may choose to allow Adviserry to store your AI chat messages and conversation history for the purpose of improving your chat experience. User-Generated Content is never accessible by anyone but the user it belongs to, including by Adviserry staff.

2.4 Payment Information

Payments are processed by Stripe. We store only your Stripe customer ID and subscription ID. We never store credit card numbers, bank account details, or other payment credentials. All payment data is handled directly by Stripe, which is PCI DSS compliant.

2.5 Waitlist & Labs Data

If you join our waitlist or apply to Adviserry Labs, we collect your email address and any additional information you provide (name, content types, subscriber count, referral source, etc.).

2.6 Demo Data

If you use our public demo, we collect a session token, your IP address, and user agent string for rate limiting and abuse prevention purposes.

2.7 Cookies

We use only essential cookies for authentication session management (set by our authentication provider, Supabase). These are HTTP-only cookies required for the Service to function. We do not use analytics cookies, advertising cookies, or any third-party tracking technologies.

3. Google API Services Limited Use Disclosure

Adviserry's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to the data necessary to provide and improve the Service (newsletter identification and content extraction).
• We do not use Google user data for advertising purposes.
• We do not allow humans to read your email content unless you provide explicit consent, it is necessary for security purposes, to comply with applicable law, or our use is limited to internal operations with aggregated and anonymized data.
• We do not transfer Google user data to third parties except as necessary to provide the Service (e.g., sending content to OpenAI for AI-generated summaries), with your consent, or as required by law.

4. How We Use Your Information

• To provide the Service: detecting newsletters, extracting content, generating summaries and embeddings, enabling search, and powering AI chat.
• To send you daily summary emails (if enabled in your settings).
• To process payments and manage your subscription.
• To provide the MCP server integration for Claude Desktop and other compatible clients.
• To maintain and improve the Service, including troubleshooting and security monitoring.
• To communicate with you about your account, service updates, or policy changes.
• To comply with legal obligations.

5. Third-Party Services

We share data with the following third-party services solely to provide the Service:

• Supabase — Database, authentication, and file storage infrastructure. All user data is stored in Supabase.
• Google Gmail API — Read-only access to your Gmail to fetch newsletter emails.
• OpenAI — Newsletter content is sent to OpenAI for content extraction, summarization, embedding generation, and AI chat responses. OpenAI's API data is not used for model training and is retained for up to 30 days for abuse monitoring per OpenAI's policy.
• Stripe — Processes all payments. Stripe is PCI DSS compliant. We never handle or store your payment card details.
• Resend — Delivers daily summary emails. Receives your email address, first name, and summary content.
• Cohere (optional) — May be used for search result re-ranking. Receives search queries and content snippets.
• Vercel — Hosts the application. Server-side logs may include request metadata.

We do not sell your data to third parties. We do not share data with advertising networks, data brokers, or any service not listed above.

6. Data Retention & Deletion

We retain your data for as long as your account is active. You can delete specific data at any time:

• Disconnect Gmail — Removes your OAuth tokens and stops newsletter syncing.
• Delete boards — Removes boards and associated newsletters and issues.
• Delete uploads — Removes uploaded documents from storage.
• Delete account — Contact us at support@cassontech.com to request full account deletion. Your data will be permanently removed within 30 days of the request.

If your account is inactive for more than 2 years, we may delete your data after providing 30 days' notice via email.

7. Data Security

We implement industry-standard security measures to protect your data:

• Gmail OAuth tokens are encrypted at rest using AES-256-GCM encryption.
• Passwords are cryptographically hashed (never stored in plain text).
• All data transmitted between your browser and our servers is encrypted via HTTPS/TLS.
• Database access is protected by row-level security policies, ensuring users can only access their own data.
• Administrative access keys are never exposed to client-side code.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Your Rights

8.1 All Users

• Access your data via the dashboard at any time.
• Modify your profile and board settings.
• Disconnect Gmail access at any time.
• Opt out of daily summary emails in your settings.
• Request account deletion by contacting us.

8.2 European Economic Area (GDPR)

If you are located in the EEA, you have the right to:

• Access — Request a copy of your personal data.
• Rectification — Request correction of inaccurate data.
• Erasure — Request deletion of your personal data ("right to be forgotten").
• Restrict Processing — Request that we limit how we use your data.
• Data Portability — Request your data in a structured, machine-readable format.
• Object — Object to processing of your personal data.

To exercise any of these rights, contact us at support@cassontech.com. We will respond within 30 days.

8.3 California Residents (CCPA)

If you are a California resident, you have the right to:

• Know — Request what personal information we collect and how it is used.
• Delete — Request deletion of your personal information.
• Opt-Out of Sale — We do not sell personal information. There is nothing to opt out of.
• Non-Discrimination — We will not discriminate against you for exercising your privacy rights.

9. Children's Privacy

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided us with personal information, please contact us at support@cassontech.com and we will promptly delete such information.

10. International Data Transfers

Your data is stored and processed on servers located in the United States via our infrastructure providers (Supabase and Vercel). If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at:

Casson Technologies Inc d/b/a Adviserry
Email: support@cassontech.com

1. Acceptance of Terms

By creating an account or using any part of the Service operated by Casson Technologies Inc d/b/a Adviserry ("Adviserry," "we," "us," or "our"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Service.

You must be at least 13 years old to use the Service. If you are between 13 and 18, you must have the consent of a parent or legal guardian.

2. Description of Service

Adviserry provides an AI-powered platform for organizing, searching, and interacting with email newsletter content. The Service includes:

• Adviserry Boards — Dashboard for newsletter organization, AI-powered search and summaries, MCP server integration, document uploads, and daily email summaries.
• Adviserry Labs — A service for content creators to create AI-powered experiences from their content archives.

Features may vary by subscription plan. Some features are available only to Pro subscribers.

3. Account Registration & Security

• You must provide accurate and complete information when creating an account.
• You are responsible for maintaining the confidentiality of your account credentials.
• You must notify us immediately of any unauthorized access to your account.
• One account per individual. Account sharing is not permitted.
• We reserve the right to suspend or terminate accounts that violate these Terms or pose a security risk.

4. Subscription Plans & Billing

4.1 Adviserry Boards Plans

• Core Plan — Annual or monthly subscription. Includes dashboard, MCP server, document uploads, and daily summaries. A one-time lifetime access option is enabled for Founding members.
• Pro Plan — Annual or monthly subscription. Includes everything in Core plus built-in AI chat and additional features. A one-time discounted annual subscription option is enabled for Founding members.

4.2 Adviserry Labs Plans

• Archive — Annual or monthly subscription, with a one-time setup fee. Includes dashboard, MCP server, document uploads, and daily summaries.
• Full-Service — Annual or monthly subscription, with a one-time setup fee. Includes everything in Core plus built-in AI chat and additional features.

4.3 Payments

All payments are processed by Stripe. By purchasing a plan, you agree to Stripe's terms of service.

4.4 Refunds

We offer a 14-day money-back guarantee from the date of purchase. To request a refund, contact us at support@cassontech.com. Refunds after the 14-day period are not available.

4.5 Price Changes

Early access pricing is locked in for the duration of your subscription (lifetime for Core, one year for Pro). We may change prices for new customers with at least 30 days' notice.

5. Acceptable Use

You agree not to:

• Use the Service for any unlawful purpose or in violation of any applicable laws.
• Abuse the Service through excessive API requests, automated scraping, or attempts to overload our systems.
• Share, sell, or transfer access to your account to third parties.
• Reverse engineer, decompile, or attempt to extract the source code of the Service.
• Use the Service or its data to train competing AI models.
• Impersonate another person or entity, or misrepresent your affiliation.
• Upload content that is illegal, harmful, or infringes on third-party rights.

Violations may result in immediate account suspension or termination without refund.

6. Content & Intellectual Property

6.1 Your Content

You retain ownership of all content you upload or create within the Service (boards, uploaded documents, chat messages). By using the Service, you grant us a limited, non-exclusive license to process, store, and display your content solely to provide the Service to you.

6.2 Newsletter Content

Newsletter content is subject to the intellectual property rights of the original creators. The Service processes newsletter content for your personal knowledge management purposes. You are responsible for respecting the rights of newsletter creators.

6.3 Adviserry IP

The platform, its code, algorithms, designs, and branding are the property of Casson Technologies Inc d/b/a Adviserry. Your subscription grants you a limited, non-transferable license to access and use the Service. It does not transfer any ownership rights.

7. Third-Party Dependencies

The Service relies on third-party providers including Google (Gmail API), OpenAI (AI processing), and Stripe (payments). The availability and functionality of the Service may be affected by these third-party services. We are not liable for interruptions caused by third-party service outages or changes.

Your use of the Gmail integration is also subject to Google's Terms of Service.

8. Service Availability & Changes

We strive to maintain high availability but do not guarantee uninterrupted service. We may perform scheduled maintenance, and unscheduled downtime may occur due to infrastructure issues.

We reserve the right to add, modify, or discontinue features at any time. Material changes to paid features will be communicated via email. Beta or experimental features (including Adviserry Labs) may be modified or removed without notice.

9. Limitation of Liability

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR ACCURACY OF AI-GENERATED CONTENT.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING FROM OR RELATED TO THE SERVICE IS LIMITED TO THE AMOUNT YOU PAID US IN THE 12 MONTHS PRECEDING THE CLAIM, OR $100, WHICHEVER IS GREATER.

WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF DATA, LOST PROFITS, OR BUSINESS INTERRUPTION.

AI-generated content (summaries, chat responses, and search results) may contain inaccuracies. You should not rely on AI-generated content as a sole source of truth for important decisions.

10. Indemnification

You agree to indemnify and hold harmless Casson Technologies Inc d/b/a Adviserry, its officers, employees, and agents from any claims, damages, losses, or expenses (including reasonable attorney's fees) arising from your violation of these Terms, your misuse of the Service, or your violation of any third-party rights.

11. Account Termination

11.1 By You

You may cancel your subscription at any time from the Billing page. For Core plans, lifetime access remains active. For Pro plans, access continues until the end of your current billing period. To fully delete your account and data, contact us at support@cassontech.com.

11.2 By Adviserry

We may suspend or terminate your account if you violate these Terms, engage in abusive behavior, fail to make required payments (Pro plans), or if required by law. We will provide notice when possible. Accounts terminated for violations are not eligible for refunds.

12. Dispute Resolution & Governing Law

These Terms are governed by the laws of the United States and the State of Delaware, without regard to conflict of law provisions.

Before pursuing formal legal action, both parties agree to attempt to resolve disputes informally by contacting support@cassontech.com. If a dispute cannot be resolved informally within 30 days, either party may pursue resolution through the courts of Delaware.

13. Changes to These Terms

We may update these Terms from time to time. Material changes will be communicated via email and by updating the "Last updated" date at the top of this page. Your continued use of the Service after such changes constitutes acceptance of the updated Terms. If you disagree with any changes, you should discontinue use and cancel your account.

14. General Provisions

• Entire Agreement — These Terms, together with our Privacy Policy, constitute the entire agreement between you and Adviserry.
• Severability — If any provision of these Terms is found to be unenforceable, the remaining provisions remain in full force and effect.
• No Waiver — Our failure to enforce any provision of these Terms does not constitute a waiver of that provision.
• Assignment — You may not transfer or assign your account. We may assign these Terms to a successor company in the event of a merger, acquisition, or sale of assets.

15. Contact Us

If you have any questions about these Terms, contact us at:

Casson Technologies Inc d/b/a Adviserry
Email: support@cassontech.com