Privacy Policy

Last updated: September 15, 2026

ChatCal Inc. ("we", "us", "our") operates Sotto and the website at heysotto.com. This policy describes how we handle information for the website, Sotto Cloud private pilot, and Sotto Bridge, the companion Mac application.

1. Information we collect

Website and waitlist

When you join the waitlist, we collect your email address and signup time. The waitlist is hosted on Railway. Email addresses may also appear in signup and error logs. Our hosting providers process ordinary request information to serve the website and operate the service. This website does not load a product analytics or advertising script.

Connected sources

Information available to Sotto depends on the sources you connect and the permissions you grant:

• Google: Gmail messages and metadata, calendar events and attendees, and contacts. Depending on the permissions granted, Sotto can also create drafts and perform approved email, calendar, or contact actions. Google may bundle draft access with permission to send email.
• Mac sources: selected local data supplied by Sotto Bridge, including iMessage and WhatsApp messages. Other sources shown in Bridge can include contacts, notes, reminders, call history, and activity metadata. You can review and change your source selections. Reading these sources requires granting Sotto Bridge Full Disk Access in System Settings on your Mac.
• Optional integrations: information from services you connect, such as Granola meeting notes.
• Your conversation with Sotto: messages, attachments, instructions, feedback, and requests sent through your connected chat channel.

Sotto also creates briefs, meeting preparation, drafts, open-loop records, and learned facts with source references from this information.

2. Cloud and self-hosting

Sotto Cloud: selected context leaves your Mac and is processed and stored on infrastructure we operate. This can include message content, connected Google data, chat history, learned context, and drafts. Sotto Cloud is not an operator-blind or local-only service.

Self-hosted Sotto: you operate the runtime and storage using your own infrastructure and provider credentials. Data processing depends on that configuration. Your chosen model, hosting, and messaging providers may still receive data. Sotto Cloud is not required in the self-hosted processing path.

Removing Bridge from your Mac does not delete information already stored by a Cloud instance or an instance you host elsewhere.

3. How we use information

• Waitlist information: to contact you about access and product updates. Contact us to leave the waitlist.
• Connected context: to prepare briefs, research meetings, track commitments, suggest replies, answer your questions, and perform actions you approve.
• Feedback and observed replies: to improve relevance, remember corrections, and adapt drafts to how you write. These observations do not give Sotto permission to send messages for you.
• Operational information: to authenticate connections, deliver messages, recover interrupted work, control usage, and investigate problems.

We do not sell your personal information.

4. Service providers

Sotto uses outside services to operate. Which providers receive context depends on your hosting mode, enabled integrations, configured models, and requests.

• Hosting: Vercel serves this website. Railway hosts the waitlist and current Cloud services.
• Models: the Cloud brief pipeline uses Google Gemini. Prompts may include connected message content, email, calendar information, meeting notes, and learned context. Other configured model providers may process interactive conversations or other tasks.
• Messaging: Photon carries the current Cloud iMessage conversation, including messages and attachments sent between you and Sotto.
• Connected and research services: Google, Granola, and enabled research providers process the information needed for their functions. Research requests can include the names and companies of people you are meeting.

The providers’ own policies also apply to their processing, including Google’s Privacy Policy, Vercel’s Privacy Policy, and Railway’s Privacy Policy. Contact us for the providers used by your Cloud pilot configuration.

5. Storage and security

Cloud stores source snapshots, generated content, memory, delivery records, and connection credentials on hosted storage. Source selections control what Bridge sends. Network connections to Cloud services use HTTPS or TLS. Cloud credentials are not stored exclusively in your Mac’s Keychain.

Access controls and filesystem permissions protect hosted state. No system can guarantee absolute security. Self-hosted security and backups also depend on how you configure and maintain your infrastructure.

6. Retention and deletion

Different records have different retention periods. Some temporary artifacts expire automatically; durable memory, the latest source snapshot, and conversation records can remain until removed. Disconnecting a source stops future access but does not necessarily erase previously learned context or stored records.

During the private Cloud pilot, contact hello@heysotto.com to request access, correction, or deletion of your Cloud data or waitlist information. We will explain the scope of deletion and any records that must be retained. Self-hosted users manage their instance data and backups directly.

You can also revoke Google access in Google Account Permissions, disconnect other integrations, or stop sharing sources in Bridge. Revoking a connection does not automatically delete data already received.

7. Your rights

You may request access to, correction of, or deletion of your personal information by contacting us. You may also ask us to remove you from the waitlist or stop product updates.

California residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email below.

8. Children’s privacy

Sotto is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child under 13, please contact us and we will promptly delete it.

9. Changes to this policy

We may update this policy as Sotto changes. We will post the updated policy here and update the date above. We will notify you of material changes as required.

10. Contact

ChatCal Inc.
hello@heysotto.com