Skip to content
butler.
← Back to Butler
B

Privacy Policy

Last updated: September 30, 2026

Butler ("we," "our," or "us") is operated by Mayank Mehta as a sole proprietorship based in California, United States. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at https://trybutler.xyz and the Butler application (collectively, the "Service"). By using the Service, you consent to the practices described herein.

1. Information We Collect

1.1 Account Information

Clerk manages authentication through the available email, Google, and Apple sign-in options. We receive account identifiers and the name, email address, and profile image that you or your sign-in provider supply. Apple may provide a private relay email address. Signing in with Google is separate from granting Gmail or Calendar access.

1.2 Profile and World Model Data

Information you voluntarily share with Butler about your life - family members, vehicles, homes, preferences, doctors, activities, and other personal details. This data is stored in your Butler profile and is used exclusively to personalize Butler's assistance. You control this data entirely and can view, edit, or delete it at any time from your profile page.

1.3 Task Data

The tasks you create, your conversations with Butler, and the results Butler produces on your behalf (e.g., flight search results, email drafts, call transcripts). Task data is stored in our database and associated with your account.

1.4 Connected Gmail and Google Calendar Data

If you authorize an MCP connection from another assistant, such as Claude, ChatGPT or Aspen, that assistant can request your task titles, progress, questions and results with read permission. With write permission, it can create tasks and stop future work. Task results may contain personal information relevant to your request. The receiving assistant processes these responses under its own privacy policy. The connector does not return your authentication credentials, raw provider ledgers or full profile memory. Disconnect the assistant and revoke its OAuth authorization to end access. Existing data already received by the assistant is subject to that assistant's retention controls.

With your permission, Butler reads Gmail message metadata and content to find information relevant to your requests, such as school notices, appointments, and renewals. Calendar permissions let Butler list calendars, check availability, read events, and create events you request. Butler does not need permission to modify Gmail messages for these features. Outbound Butler emails use Butler's email service rather than your Gmail account.

Relevant email and calendar content may be processed by our AI providers to carry out your tasks. Relevant excerpts, tool results, and derived context may be retained with your tasks and profile; we do not promise that all Google data is discarded immediately after a request. You can manage your connection in Butler and revoke access from your Google account connections. Revoking access stops future access; account deletion addresses data already stored by Butler.

1.5 Payment Information

Web payments are processed by Stripe; supported native purchases are processed by Apple through StoreKit. We retain provider customer or transaction identifiers, purchase status, and subscription or credit entitlements. Butler does not store full card numbers or security codes for these purchases.

1.6 Usage Data

We collect usage metrics including task counts, feature usage, API call counts, and error logs. PostHog and Vercel Analytics support product and website measurement where configured. This data helps us improve the Service and diagnose issues.

1.7 Cookies and Similar Technologies

We use cookies and similar technologies for:

  • Authentication: Clerk sets cookies to maintain your signed-in session.
  • Infrastructure: Vercel may set cookies for performance optimization.
  • Payments: Stripe may set cookies for fraud prevention.

We also use product analytics to understand feature use. We do not use Google user data for advertising. You can configure your browser to reject cookies, but this may impair your ability to use the Service.

1.8 Log Data

Our servers automatically collect information when you access the Service, including your IP address, browser type, operating system, referring URLs, and timestamps. This data is used for security monitoring and debugging.

2. How We Use Your Information

We use your information solely to operate, maintain, and improve the Service:

  • To execute tasks on your behalf (booking flights, sending emails, making phone calls, creating calendar events)
  • To personalize Butler's responses and suggestions based on your profile and world model
  • To provide proactive suggestions based on your calendar and life context
  • To send you notifications about task progress, completions, and reminders
  • To send periodic product update newsletters (you can unsubscribe at any time)
  • To process payments and manage your subscription
  • To monitor and improve the Service's reliability and performance
  • To comply with legal obligations

We do not sell, rent, or trade your personal information to third parties. We do not use your personal data to train AI models without your explicit, affirmative consent.

3. Third-Party Services

Butler relies on the following third-party services to operate. Each has its own privacy policy:

  • Clerk (clerk.com) - Authentication and user management
  • Supabase (supabase.com) - Database hosting (United States)
  • OpenAI and Anthropic - AI processing of requests, relevant context, and task results. OpenAI is the primary task reasoning provider; Anthropic is used for configured fallback or supporting features.
  • Browser-Use and Hyperbrowser - Hosted browser sessions for web tasks and user-controlled sign-in. Session profiles can retain cookies so your connected sites remain usable.
  • Deepgram - Transcription of voice requests and meeting recordings you submit.
  • PostHog and Vercel Analytics - Product and website usage measurement.
  • Duffel (duffel.com) - Flight and hotel search and booking
  • Bland.ai (bland.ai) - AI-powered phone calls
  • Resend (resend.com) - Transactional email delivery
  • Stripe (stripe.com) - Payment processing
  • Google (google.com) - Sign-in, authorized Gmail access, and Google Calendar access
  • Apple - Sign in with Apple, native purchase verification, and device notifications
  • Inngest (inngest.com) - Background task orchestration
  • Vercel (vercel.com) - Application hosting

4. Google API Services User Data Policy Compliance

Butler's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • Butler only uses Google user data to provide and improve user-facing features that are prominent in the application's user interface.
  • Butler does not use Google user data for serving advertisements.
  • Butler does not allow humans to read Google user data unless: (a) the user has given affirmative consent to view specific data, (b) it is necessary for security purposes such as investigating abuse, (c) it is necessary to comply with applicable law, or (d) the data is aggregated and anonymized for internal operations.
  • Butler does not transfer Google user data to third parties except as permitted by Google's Limited Use requirements: to provide or improve prominent user-facing features, for security purposes, to comply with applicable law, or as part of a merger, acquisition, or asset sale after obtaining explicit prior consent from the user.
  • Google user data is not used to train or improve generalized AI or machine learning models.

5. When We Share Your Information

We share your information only in the following circumstances:

  • To execute your tasks: When you ask Butler to book a flight, your travel details are sent to Duffel. When you ask Butler to make a call, relevant details are sent to Bland.ai. These transfers are necessary to fulfill your explicit requests.
  • Service providers: We share data with the third-party services listed in Section 3 solely to operate the Service.
  • Legal requirements: We may disclose your information if required by law, subpoena, or government request.
  • Safety: We may share information to protect the safety, rights, or property of Butler, our users, or the public.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

6. Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide the Service. You can request deletion from Delete account in the app or contact support@trybutler.xyz. Upon receiving a deletion request:

  • Your profile, tasks, messages, and world model data will be deleted within 30 days.
  • Butler removes the connected account access it controls. You can also revoke Google access directly from your Google account. Copies retained by third-party providers remain subject to their retention policies and applicable requirements.
  • Anonymized, aggregated usage data may be retained for analytics purposes.
  • Data required for legal compliance or dispute resolution may be retained as required by law.
  • Minimal purchase claim records may remain without your account link or signed receipt to prevent replaying an already credited purchase. Email suppression records may remain to respect bounce, complaint, and delivery restrictions.

7. Data Security

We implement industry-standard security measures including:

  • Encrypted connections (TLS/HTTPS) for all data in transit
  • Row-level security (RLS) on our database to isolate user data
  • Secure authentication via Clerk with OAuth 2.0
  • Webhook signature verification on inbound requests
  • Service-role access controls for server-side operations

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you discover a security vulnerability, please contact us immediately at support@trybutler.xyz.

8. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users by email within 72 hours of becoming aware of the breach. We will also notify relevant regulatory authorities as required by applicable law.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know: You may request a copy of the personal information we have collected about you in the past 12 months.
  • Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
  • Right to Correct: You may request that we correct inaccurate personal information.
  • Right to Opt-Out of Sale: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, contact us at support@trybutler.xyz. We will respond within 45 days.

10. Children's Privacy

Butler is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@trybutler.xyz.

11. International Data Transfers

Butler is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States. By using the Service, you consent to such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or by posting a notice on the Service prior to the change becoming effective. The "Last updated" date at the top of this page indicates when this policy was last revised. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, contact us at:

Mayank Mehta
Butler
Email: support@trybutler.xyz
Website: https://trybutler.xyz