Privacy Policy
Effective Date: February 7, 2026 · Last Updated: February 7, 2026
1. Introduction
This Privacy Policy describes how StageKeep Inc. (“we,” “us,” or “our”) collects, uses, and shares information when you use Lisa, our AI-powered executive assistant service (the “Service”). Lisa operates through SMS/WhatsApp and integrates with your Google services to help manage relationships and communications.
Company Information:
- Legal Name: StageKeep Inc.
- Address: 541 Jefferson Ave, Suite 100, Redwood City, CA 94063
- Contact: [email protected]
By using Lisa, you agree to the collection and use of information in accordance with this Privacy Policy.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, phone number
- Communications: Messages you send to Lisa via SMS/WhatsApp
- Contacts: Contact information you share with Lisa for relationship management
- Preferences: Settings and preferences you configure
2.2 Information from Google Services
When you connect your Google account to Lisa, we access:
- Gmail: Read and send emails on your behalf
- Google Calendar: Access and manage calendar events
- Google Contacts: Access contact information
How We Use Google Data: Lisa uses this information solely to organize and retrieve data for your personalized assistance through Retrieval-Augmented Generation (RAG). We do not share your Google data with third parties except as necessary to provide the Service.
2.3 Automatically Collected Information
- Usage Data: How you interact with Lisa, features used, frequency of use
- Device Information: Phone number, carrier information (from SMS/WhatsApp)
- Log Data: Timestamps, error logs, system events
2.4 Information from Third-Party Services
- SMS/WhatsApp Data: Message delivery status, phone number verification (via Twilio)
- Email Data: Email delivery status (via SendGrid)
- Authentication Data: Login verification data (via Firebase)
3. How We Use Your Information
We use the collected information to:
- Provide the Service: Operate Lisa as your AI executive assistant
- Process Requests: Understand and respond to your commands and questions
- Manage Communications: Send and organize emails, manage calendar events, organize contacts
- Improve the Service: Analyze usage patterns to enhance Lisa's capabilities
- Authenticate Users: Verify your identity through SMS-based authentication
- Send Notifications: Deliver important updates about your account or the Service
- Comply with Legal Obligations: Respond to legal requests and prevent fraud
4. How We Share Your Information
We do not sell your personal information. We share information only in these circumstances:
4.1 Service Providers
We share data with third-party service providers who help us operate Lisa:
- OpenAI: AI processing for natural language understanding and generation
- Twilio: SMS/WhatsApp message delivery
- SendGrid: Email forwarding and delivery
- Firebase: Authentication services
- MongoDB Atlas (US-Ohio): Secure data storage
These providers are contractually obligated to protect your data and use it only for providing services to us.
4.2 Google API Services
Lisa's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only request access to Google data necessary for Lisa's core functionality
- We do not use Google data for advertising purposes
- We do not allow humans to read Google user data except when necessary for security, compliance, or with your explicit consent
- We do not transfer Google data to third parties except as necessary to provide Lisa's services
4.3 Legal Requirements
We may disclose your information if required by law or in response to:
- Court orders or legal processes
- Government requests
- Protection of our rights, property, or safety
- Investigation of fraud or security issues
4.4 Business Transfers
If StageKeep Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: Data encrypted in transit (TLS/SSL) and at rest
- Authentication: JWT tokens with httpOnly cookies; SMS-based verification
- Access Controls: Strict employee access limitations
- Secure Infrastructure: Data stored in MongoDB Atlas (US-Ohio region) with enterprise security
- Regular Audits: Security reviews and vulnerability assessments
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your information as follows:
- Active Accounts: Data retained indefinitely while your account is active
- Deleted Accounts: 30-day grace period for account recovery, then permanent deletion
- Backup Systems: Encrypted backups retained for 90 days for disaster recovery
- Legal Requirements: Some data may be retained longer if required by law
You can request account deletion at any time by contacting [email protected].
7. Your Rights and Choices
7.1 Access and Correction
You can access and update your information through Lisa or by contacting us at [email protected].
7.2 Data Deletion
You can request deletion of your account and associated data. After the 30-day grace period, we will permanently delete your information.
7.3 Google Account Disconnection
You can revoke Lisa's access to your Google account at any time through your Google Account permissions page.
7.4 Opt-Out of Communications
You can opt out of non-essential communications, though some service-related messages are necessary for Lisa to function.
7.5 California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect
- Right to request deletion of your information
- Right to opt-out of sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your rights
To exercise these rights, contact [email protected].
7.6 European Privacy Rights
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
To exercise these rights, contact [email protected].
8. Children’s Privacy
Lisa is not intended for users under 18 years of age. We do not knowingly collect information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately at [email protected].
9. International Data Transfers
Your information may be transferred to and processed in the United States. By using Lisa, you consent to the transfer of your information to the United States and other countries where our service providers operate.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Posting the new Privacy Policy on our website
- Sending an email to your registered email address
- Providing notice through Lisa
Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.
11. Third-Party Links
Lisa may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
12. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us:
13. Google Limited Use Disclosure
Lisa's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, Lisa will only use access to read, compose, send, and permanently delete all your email from Gmail, manage your calendars, and see and download contact info automatically saved in your “Other Contacts” to provide Lisa's AI executive assistant services. We will not transfer this data to others except as necessary to provide or improve Lisa's services, comply with applicable law, or as part of a merger, acquisition, or sale of assets with your consent.
End of Privacy Policy