Trust
Privacy notice
This notice explains the information Sendapuffin handles during its private beta. It will be reviewed and updated before general paid availability.
What we collect
We collect the email address used to sign in, mission instructions and links you choose to provide, mission timestamps and status, connected-provider account identifiers, encrypted provider access and refresh tokens, prepared action drafts and results, OAuth grants, and limited security and operational logs.
How we use it
We use this information to authenticate you, deliver missions, let ChatGPT or Claude use tools you approve, access connected providers on your behalf, show exact write previews, prevent abuse, troubleshoot failures, and improve service reliability.
Sharing, AI, and connected providers
Vercel hosts the application and Supabase provides authentication and database services. When you connect ChatGPT or Claude, that provider sends tool requests and receives the tool results you authorize under its own terms. Google receives Calendar API requests after you connect your account. Ticketmaster receives event searches when that integration is enabled. Airbnb searches are browser link-outs rather than background API access.
Retention and control
Mission links expire after the period selected by their creator, with expired or revoked records scheduled for deletion after seven days. OAuth states expire after 10 minutes, unapproved writes after 15 minutes, and integration audit records after 90 days. Provider connections remain until disconnect or account deletion. Signed-in users can export their data, revoke missions, disconnect providers, and delete their account.
Security
Mission links are capability links: anyone who has one can read the mission until it expires or is revoked. Do not include secrets, passwords, health records, financial account details, or other highly sensitive information.
Children
Sendapuffin is not directed to children under 13, and we do not knowingly collect their personal information.
Contact
A public privacy inbox is being provisioned. Private-beta participants should use the contact channel in their invitation. The operating legal entity and jurisdiction will be added before general paid availability.