Privacy policy

Hamilton is an AI finance assistant (a "CFO") that a business sets up to help run its finances. This policy explains what information Hamilton handles, why, and the choices you have. "We" means the people who operate Hamilton.

What we collect

• What you tell Hamilton in chat (for example WhatsApp or Slack), including files you send.
• Accounts you connect, such as Gmail. Hamilton reads them to do the work you ask for: bills, invoices, statements, payroll and tax notices, renewals and similar business mail.
• Logins you choose to share through a Hamilton sign-in link, so Hamilton can sign in to a website for you. Your password is encrypted in your browser before it leaves your device and is only ever decrypted on the business's own computer, where it is stored encrypted and used only to sign in to the site it was given for. Our web servers only handle the encrypted form and delete it once it is collected.
• Basic technical logs (time, which tool was used, whether it worked) to keep the service running. These logs don't contain message contents or passwords.

How we use it

• Only to provide Hamilton to the business that set it up: answering questions, keeping its records and notes, preparing drafts, and flagging things that need attention.
• Hamilton never sends email for you. With your permission it can save a draft in your Gmail for you to review and send yourself.
• We don't sell your information, use it for advertising, or share it with anyone except the service providers needed to run Hamilton (below).

Google user data

If you connect Gmail, Hamilton requests read-only access to your mail and permission to create drafts. It uses this only to provide the features you see in Hamilton. Hamilton's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements. Your Google data is not used to train general-purpose AI models, is not sold, and is not read by people except with your permission, for security reasons, or where the law requires it. Personal (non-business) mail is not saved or shared.

Where it's kept

A business's Hamilton runs on a computer that business controls, and its notes, records and saved logins stay there. To work, Hamilton relies on a few service providers: an AI model provider to process requests, an accounts service that securely holds connection tokens for accounts like Gmail, and a hosting provider for this website. Each only receives what it needs for its part.

Your choices

• Disconnect an account or ask Hamilton to forget a login at any time, just by asking it. Access ends immediately.
• You can also remove Hamilton's access to Gmail from your Google Account settings.
• Ask us to delete information about you by emailing the contact below.

Security

Passwords are encrypted end to end between your browser and the business's computer, connection tokens are held by the accounts service, and access is limited to what each task needs. No system is perfectly secure; if something goes wrong that affects your information, we'll tell you.

Changes and contact

If this policy changes, we'll update the date above. Questions or requests:josephpalbanese@gmail.com.