Your data does your work.
Nothing else.

Who we are

Aldo (aldo.computer) runs cloud agents for you: an assistant you talk to, and threads that each work on a cloud machine of their own. This policy says what Aldo keeps, why, and what you can do about it. Questions or requests: logancsack@gmail.com.

What Aldo keeps

• Your account: your email address and sign-in, through our sign-in provider, Clerk.
• What you tell Aldo: what you type or say to it (transcripts of your voice, not recordings), images you give it, and the notes and profile it keeps to remember you, which you can see and edit in Settings → Memory.
• Your threads: each thread's machine holds its repositories, files and the agent's conversation. Aldo keeps copies of recent turns and of each machine's list of threads so you can see them while the machine sleeps.
• Sign-ins you connect: GitHub and other git hosts, and Claude, Codex and Grok, so agents can use your subscriptions. They're stored encrypted.
• Your vault: secrets and website logins you or your agents save, each sealed with its own key. Once saved, a value can't be read back in Aldo's app or API.
• Accounts you connect in Settings → Integrations (Google, Microsoft): the sign-in, stored encrypted, and which permissions you granted. See "Google and Microsoft data" below.
• Routines, policy, instructions and settings you set up, usage and billing records, and the devices you turned notifications on for.
• Logs of requests, kept by our hosting provider for operating and securing the service, with vault values taken out.

How Aldo uses it

Only to run Aldo for you: to answer you, start and run the threads you ask for, follow their work through, remind and notify you, and keep your account and billing working. Aldo doesn't sell your data, doesn't use it for advertising, and doesn't use it to train AI models.

Aldo acts on your instructions. What its tools read (an email, a web page, a thread's output) is treated as information, never as your instructions, and actions need your own words behind them.

Text messages and phone calls

Phone access is optional. Aldo keeps your verified phone number encrypted, a protected lookup value for routing, your channel choices, and a hash of your call PIN. SMS and call transcripts use the same assistant history as the app. Aldo does not store call audio recordings. Phone transport events and call audit records expire after 30 days; conversation history remains with your account.

Your mobile number and SMS opt-in consent are not sold or shared with third parties or affiliates for marketing or promotional purposes. Phone providers process your number, messages, and call audio only to deliver the phone service and ownership verification you request.

Disable texts or calls separately, text STOP to opt out of SMS, or disconnect your number in Settings → Integrations. Disconnecting removes the stored verified number, call PIN, and phone routing access. Work already started and existing conversation history remain in Aldo.

Google and Microsoft data

When you connect a Google account, Aldo can access the Gmail, Google Calendar, Google Drive (with Docs, Sheets and Slides) and Google Contacts data you allow on Google's consent screen. A Microsoft account works the same way for Outlook mail and calendar, contacts, OneDrive and SharePoint.

• Aldo uses this data only to provide the features you use: answering your questions about your mail and calendar, Aldo's heads-ups (while they're on, Aldo looks at your new mail and coming events every half hour of your day to tell you what's worth knowing; you can turn them off in Settings → Integrations), and the work you or your routines ask agents to do in your accounts, such as drafting a reply or adding an event.
• Agents draft rather than send, and leave accepting or declining invitations to you, unless you or a routine you set up asked them to.
• Your access token never sits on an agent's machine: the machine holds a stand-in, and the token is added to its requests to Google or Microsoft on the way out.
• This data isn't used for advertising, isn't sold, and isn't used to develop, improve or train generalized AI or machine-learning models.
• No person at Aldo reads it, except with your permission for a specific message, to investigate abuse or security incidents, or where the law requires.
• It's transferred to others only as needed to provide those features (the processors below), for security, to comply with the law, or as part of a merger or acquisition with notice to you.

Aldo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect an account at any time in Settings → Integrations: Aldo deletes its sign-in and every machine loses access at once. You can also remove Aldo's access from your Google account (myaccount.google.com/connections) or your Microsoft account.

Who processes it for Aldo

• Vercel: hosting, the cloud machines threads run on, and storage for demo recordings and screenshots.
• PlanetScale: Aldo's database.
• Clerk: sign-in.
• Telnyx, or Twilio when configured: phone ownership verification, SMS/MMS delivery, and speech recognition and synthesis for telephone calls.
• OpenAI: the models behind Aldo's voice, its written replies and its heads-ups, which receive what you say to Aldo and what its tools return to it, including mail and calendar content it reads to answer you, and your new mail and coming events when it looks for heads-ups.
• The AI providers you connect (Anthropic, OpenAI, xAI): your agents send them the work you give them, under your own accounts and those providers' terms.
• Microsoft Azure and Daytona: the Windows and GPU computers, when a thread asks for one and you agree.

Each processes data only to provide its part of the service to Aldo.

How long Aldo keeps it

For as long as your account exists, except: images you give Aldo are deleted after a month; a thread's machine and its disk are deleted when you delete the thread; a disconnected account's sign-in is deleted at once. Ask us to delete your account and Aldo deletes what it holds about you, apart from records the law requires us to keep.

Your choices

• See and edit what Aldo remembers about you in Settings → Memory, and your instructions in Settings → Instructions.
• Delete threads, routines and vault items, and disconnect accounts, at any time.
• Ask for a copy of your data, or for your account to be deleted: logancsack@gmail.com.

Security

How Aldo keeps your code, keys and accounts safe is on the Security page: a machine per thread, sealed secrets, and stand-ins in place of keys.

Changes

If this policy changes in a way that matters, we'll say so in Aldo before it takes effect. The date below is when it last changed.