Privacy Policy

1. Who we are

Blair is AI staff for project work, offered by Blair Apps LLC (“Blair”, “we”, “us”). This policy covers blair.app, the web app at ask.blair.app, the Mac and iPhone apps, the Chrome extension, and Blair’s connector for other AI assistants (together, the “Service”). For questions or requests about your information, write to info@blair.app.

For your own account, we decide how your information is used. When a company or firm sets up a team workspace, that organization decides who can see the workspace’s content, and we handle that content on its behalf.

2. What we collect

Account information

Your email address, your name, and how you sign in (email and password, or Apple, Google or Microsoft; Sign in with Apple shares only your email, which may be a private relay address). We also keep your settings, such as time zone and preferred AI model, any avatar photo you upload, and your setup answers about your work.

Content you give us or connect

• Chats, files and projects: messages to Blair and your agents, files you upload, and the projects, Boards, pages, lists, panels and decisions you create.
• Memory: facts Blair remembers at the company, project or personal level. Blair doesn’t automatically save dates of birth, passport, frequent-flyer or card numbers to memory.
• Meetings: audio, and video if you turn it on, from meetings you record, plus the transcripts, notes, slide snapshots and action items made from them.
• Voice: what you say on a call with Blair or in voice chat.
• Connected apps: when you connect Google, Microsoft 365, Slack, Notion, GitHub, Dropbox or another app, Blair reads and acts in it for you. Unless you switch “Keep Blair up to date” off, it also keeps short, private summaries of recent items (title, who, when, up to 280 characters and a link; never a whole email body).
• Saved logins: website usernames, passwords and authenticator keys you save for your agents, stored encrypted.
• Messaging and devices: messages you exchange with Blair by text, iMessage, Telegram or Slack and your number or handle; Mac folders you choose to share; the one iPhone Reminders list you choose.

Device and usage data

An activity log of account and workspace actions, with the IP address they came from (removed after 90 days); usage records (which AI features ran and their cost); notification device tokens; and a log of notifications and emails sent. We use no third-party analytics, advertising or crash-reporting tools. The web app uses one sign-in cookie it needs to work; blair.app sets no cookies.

Beta signups

If you join the beta on our website, we keep the email address, name, firm and description of your work that you give us, to contact you about the beta and invite you. We don’t add you to marketing lists or share it. Ask us at info@blair.app and we’ll delete it.

Payments

Billing isn’t switched on yet. When it is, Stripe will process payments and we will keep only Stripe’s customer and subscription identifiers. When an agent pays for something you approved, your Stripe Link wallet issues a one-time card that Blair holds only in memory for that checkout. We never store full card numbers.

3. How we use it

• To provide the Service: answer you, run your agents, transcribe and summarize meetings, keep your projects and memory, sync connected apps, and send the notifications and emails you asked for (such as invites, meeting notes, your daily brief and approval requests).
• To keep the Service secure: authenticate you, prevent abuse and fraud, enforce limits, and keep an activity log.
• To support you and to communicate about the Service, including changes to it or to this policy.
• To understand and improve reliability and cost, using usage records and diagnostics, not the content of your work.
• To comply with law and enforce our Terms.

We don’t sell your information, use it for advertising, or use your content to train AI models.

4. AI processing

To do a task, Blair sends what it needs (your message, relevant project context and memory, file excerpts, tool results, images you attach) to an AI model:

• Your own subscription. If you connect your Claude or ChatGPT subscription, Blair runs Claude Code or Codex with your sign-in, in an isolated cloud sandbox whose outbound access is limited to the AI provider. Anthropic or OpenAI then processes that content under your own agreement with them.
• Blair’s included AI. If you turn it on (paid in credits), chats go through OpenRouter to the model providers it routes to. It gets a random conversation identifier, not your name or email, and image metadata (such as location) is removed first.
• Other AI features. Live calls, the search index (numeric “embeddings” of your files and memory, deleted with them), and transcription, spoken replies or images when they run on a provider other than OpenRouter, use the providers listed in Sharing, under their own data-use terms.

No training through OpenRouter. Every request Blair sends through OpenRouter (chats and agents, and transcription, spoken replies, image and video generation) tells OpenRouter to route it only to providers that don’t store or train on it, as OpenRouter classifies their published policies (its “deny data collection” setting). This is not zero data retention: a provider may still keep a request for a limited time under its own policy, for example to monitor for abuse.

If you connect Claude, ChatGPT or another AI app to Blair, that app can read your projects, pages, meetings, memory and synced items, add to your list and start tasks, under its provider’s terms. Blair strips keys, passwords and card numbers from what it returns, and nothing done this way sends, pays or deletes anything outside Blair.

5. Agents act only with your approval

Blair’s agents can read freely in the apps you connect, but anything that reaches outside Blair, such as sending an email, paying, posting, booking or accepting an invite, waits as a card for your yes. If Blair can’t tell whether an action only reads, it asks. Workspace and personal rules can only make this stricter. The one exception you control: if you add your own tool server and mark some of its tools “Always allow”, those run without asking.

When an agent uses a website for you, it does so from a cloud browser, or from your own Chrome through the Blair extension. The extension drives only the tab it opened itself, and never reads your cookies, other tabs or downloads. Page content the agent works with is sent to the AI model doing the task.

6. Meetings and calls

• No bot joins your call. You record on your Mac, or on the web.
• Consent is your responsibility. Many places require everyone’s consent before a conversation is recorded. Before you record, Blair asks you to confirm you have told the people in the meeting, and suggests a line to say (“This meeting is being recorded for notes.”). It is up to you to follow the law where you and the other participants are.
• No voiceprints. Blair never creates or stores voiceprints, voice embeddings or any biometric template. Speaker names are worked out per meeting, never carried to another, from your Mac’s microphone track (you), the names your meeting app displays, your calendar invitees, and self-introductions in the transcript.
• On Mac, with the Accessibility permission, Blair reads only the participant names the meeting app displays, never its chat, text fields or messages, and sends only the names and when they spoke. Slide text is recognized on your Mac.
• From video, Blair can find names by sending small cropped images of the displayed name label (never whole frames) to the AI model; none are stored.
• Transcription. Audio goes to a transcription provider. If you turn on cloud speaker labels, that provider separates the voices on its side and returns labels such as “Speaker A”.
• Retention. Meeting audio is deleted once it is transcribed, unless you choose to keep it. Video is off by default. When you record it, you choose to keep it for 30 days, 90 days (the default) or until you delete it, counted from the end of the meeting. Transcripts and notes stay until you delete the meeting.
• Calls with Blair. Live calls use OpenAI’s realtime voice service, which receives your call audio, a short brief Blair prepares from your calendar, list and projects, and the results of tasks Blair runs during the call. OpenAI receives a hashed identifier, not your name or email.

7. Sign-in codes

When a website sends a one-time sign-in code by email while an agent is signing in for you, Blair can read it from your own inbox so you don’t have to forward it. It does so only under these rules:

• only for a site where that agent may use a saved login, or where you started the sign-in in that task;
• only mail from that site’s own domain, received from shortly before the request until a few minutes after it, and only a handful of the newest messages;
• the code is typed into the site by our server: the AI model never sees it, and the code is never stored. The activity log notes that a code was used for a site, without the code.

This is on by default. You can turn it off in Settings (“Let my agents use sign-in codes from my email”). Reading codes from text messages is off unless you set it up on your iPhone; those texts are held in memory for at most 10 minutes.

8. Sharing and service providers

We share information only as described here. We don’t sell personal information, and we don’t share it for targeted advertising.

We use these service providers to run Blair. They process information on our behalf, for the purposes described. Some are used only when a feature is turned on, by us or by you.

Apps you connect (Google, Microsoft, Slack, Notion, GitHub, Dropbox and others) aren’t our service providers: you link them, Blair sends them your agents’ requests, and their own privacy policies apply.

Other sharing. We disclose information when you ask us to (sharing a project, sending meeting notes, publishing a site); when the law or valid legal process requires it, telling you first where we can; to protect the safety and rights of our users, the public or us; and, under this policy’s protections, as part of a merger, acquisition, financing or sale of assets.

9. Team workspaces

In a team workspace, people have roles: owner, admin, member or guest. A workspace’s owner and admins can see and manage its shared projects, pages, workspace memory and settings, see per-member usage, and see and export the activity log (including IP addresses). Members see what is shared with the workspace. Guests see only the projects they are invited to.

A project can belong to the whole workspace or be private. A private project stays private from admins too. Your personal chats, personal memory and files aren’t included in a workspace’s export. If you leave a workspace, content you put in its shared projects, and workspace memory it approved from you, stays with the workspace.

10. Retention, export and deletion

We keep your content until you delete it or erase your data, except where a shorter period applies:

• Meeting audio: deleted after transcription unless you keep it. Meeting video: 30 days, 90 days (default) or until you delete it, then deleted automatically.
• Chats: kept until you delete them. A workspace admin can set chats to be deleted automatically after a period between 7 days and 10 years.
• Connected-app summaries: about 30 days, and at most 500 per app.
• Emails we send: the message body is cleared once it is sent (invites are never kept); we keep the recipient, subject and delivery status. Deleted after 90 days.
• Notification log: the notification’s title (up to 120 characters), type and whether it was delivered. Deleted after 90 days.
• Activity log and usage records: kept for security, billing and workspace administration. IP addresses are removed from the activity log after 90 days.
• Sign-in sessions expire after 30 days; invites after 7 days.

Export. Settings › Export downloads your chats, projects, memory, meetings and transcripts, kept meeting media, files, lists, panels, sites, synced items and more, as a zip. Saved passwords and keys are never included.

Delete everything. Settings › Delete everything erases what Blair holds about you, immediately and permanently: your chats, files, meetings and media, memory, saved logins and keys, sites, approvals, usage records, notification subscriptions and more. It also signs out your AI subscriptions, resets your cloud computer, removes your phone number, and revokes Blair’s access at each connected app that has a way to do it (Google, Slack, GitHub, Dropbox, Stripe Link and apps connected through Composio). For apps without one, such as Microsoft 365 and Notion, Blair deletes its tokens; you can also remove Blair in that app’s own security settings. It keeps your account itself (email and name), your workspace memberships, the activity log, delivery records of past notifications and emails (until they are 90 days old), and workspace content you contributed that the workspace keeps.

Close your account. Settings › Account › Close my account does everything Delete everything does, in every workspace you’re in, and also removes your Macs, your notification subscriptions, the notification and email records about you, your workspace memberships, every sign-in and the account itself. A workspace only you were in ends with it. If you own a team workspace with other people in it, transfer ownership first, and cancel a paid plan first. What stays: content you added to a team workspace’s shared projects, which stays with that workspace, and the activity log a workspace keeps for security, with your name and email taken out (its IP addresses go after 90 days, as for everyone). For 40 days we keep a one-way hash of your email, so closing and reopening with the same address can’t reset a month’s included credits; nothing else about you. To have other records removed where the law allows, email info@blair.app.

Copies may remain in our providers’ backups for a limited time before they are overwritten.

11. Security

• Connections to Blair are encrypted in transit with TLS.
• Passwords, keys, app sign-ins and authenticator keys you save are kept in Blair’s vault, encrypted with modern public-key encryption (libsodium sealed boxes).
• Each workspace’s data is separated in the database by row-level security that the database itself enforces, and Blair refuses to start with a database role that could bypass it.
• Sign-in sessions and connector tokens for AI apps are stored only as one-way hashes.
• Your AI subscription runs in an isolated sandbox that can reach only the AI provider.

No system is perfectly secure. If we learn of a breach that affects your information, we will notify you as the law requires.

12. Your rights

Wherever you live, you can:

• access your information, and take it with you, with Settings › Export;
• correct it in the app, or ask us;
• delete it with Settings › Delete everything, or close your account with Settings › Account › Close my account;
• object to or ask us to restrict some uses, and withdraw consent you gave (for example to notifications or cloud speaker labels) in Settings.

Write to info@blair.app for anything you can’t do in the app. We will verify the request comes from you, and answer within the time the law requires. If your data belongs to a team workspace, we may refer you to its owner. We won’t treat you differently for using your rights.

13. EEA and UK

If you are in the European Economic Area or the United Kingdom, Blair Apps LLC is the controller of your account information. For a team workspace’s content, the organization is the controller and we process it on its behalf. Our legal bases are:

• contract: to provide the Service you signed up for;
• legitimate interests: to keep the Service secure, prevent abuse, and understand and improve reliability, balanced against your rights;
• consent: for optional features you switch on, which you can withdraw at any time;
• legal obligation: where the law requires us to keep or disclose information.

You have the rights in Your rights, including portability and objection, and you may complain to your local data protection authority. Blair doesn’t make decisions about you that have legal or similarly significant effects based solely on automated processing.

14. California

California residents have the right under the CCPA (as amended by the CPRA) to know, delete, correct and get a copy of their personal information, to opt out of its “sale” or “sharing”, and not to be discriminated against for using these rights.

• What we collect: identifiers (email, IP address); account and commercial records (plans, approved purchases); activity on the Service; audio and visual information (meetings, calls); professional information; and inferences kept as memory, from the sources and for the purposes above.
• No sale or sharing. We don’t sell personal information or share it for cross-context behavioral advertising, and haven’t in the past 12 months. We have no actual knowledge of selling or sharing information of anyone under 16.
• Sensitive information. Some information may be sensitive, such as saved website logins and the contents of mail and messages you connect. We use it only to provide the Service you asked for, so the right to limit its use doesn’t apply. We don’t collect biometric information.

To make a request, write to info@blair.app. An authorized agent may make a request for you with your written permission.

15. Children

Blair is not for children. You must not use it if you are under 16, and our Terms require users to be adults. If we learn that we have information about a child under 16, we will delete it. If you think a child has given us information, contact us.

16. International transfers

We are based in the United States, and we and our providers process information in the United States and other countries. Where the law requires, we protect transfers from the EEA, UK or Switzerland with appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

17. Changes and contact

We will update this policy as Blair changes. If a change is material, we will tell you by email or in the app before it takes effect. The effective date at the top shows the latest version.