This Privacy Policy describes how Aberyarn (“we”, “us”, or “our”) collects, uses, and protects information in connection with our communication platform and related services (collectively, the “Service”). We are based in Scotland, United Kingdom, and this policy is governed by UK GDPR and the Data Protection Act 2018.
By using the Service, you acknowledge that you have read and understood this policy.
We collect the following categories of information:
Under UK GDPR, we process your personal data on the following legal bases:
We use the information we collect to:
We do not use your content or calendar data for advertising, and we do not build behavioural profiles for marketing purposes. Automated emails (catch-up and deadline reminders) are solely for Service functionality.
We use Anthropic's Claude to generate audience-tailored summaries and meeting agendas. When you create a post or schedule a meeting, the relevant content (post title, description, and participant context) is sent to Anthropic's API for processing.
Anthropic processes this data solely to return a response and does not use your content to train their models under their API terms. We do not send calendar event details or personal calendar data to Anthropic. You can read Anthropic's privacy policy at anthropic.com/privacy.
Aberyarn offers an optional Google Calendar integration to enable meeting scheduling. If you choose to connect your Google account, we request the following permissions:
We store a Google OAuth refresh token securely in our database to maintain the connection between sessions. We access your calendar data only to check availability and create events on your behalf. We do not read, store, or share the content of your calendar events. We do not use your Google Calendar data for any purpose beyond the meeting scheduling feature.
You can disconnect your Google Calendar at any time from your account settings. Disconnecting will revoke our access and delete your stored refresh token. You can also revoke access directly from your Google Account permissions page.
Aberyarn's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Aberyarn offers an optional Slack integration that enables posting updates to Slack channels and sending direct messages to users. When an organisation admin installs the Slack integration, we:
We do not read the content of your Slack conversations beyond what is necessary to post our own messages. Only organisation admins can install or remove the Slack integration. Users may unlink their individual Slack accounts at any time in their notification settings.
If you opt in to browser push notifications, we subscribe your browser to our push notification service using VAPID (Voluntary Application Server Identification). This stores a unique endpoint URL associated with your device/browser combination. We use this endpoint solely to send you notifications about activity in the Service (mentions, replies, meeting invitations).
You can revoke push notification permission at any time via your browser settings or by disabling notifications in the Service. Revoking will delete the subscription endpoint from our servers.
We do not sell your personal information. We share data only in the following circumstances:
We retain your account data for as long as your account is active or as needed to provide the Service. Post history is subject to retention limits based on your subscription plan. Meeting data is retained for as long as necessary to provide the Service and for a reasonable period thereafter for legal and support purposes.
Google OAuth tokens are deleted when you disconnect your calendar or delete your account. When your account is closed, we will delete or anonymise your personal data within 30 days, except where retention is required by law.
Under UK GDPR, you have the following rights:
To exercise any of these rights, contact us at support@aberyarn.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
We use essential cookies to keep you signed in and to remember your session preferences. We do not use advertising or third-party tracking cookies.
For analytics, we use Plausible Analytics — a privacy-first, EU-hosted service (servers in Frankfurt, Germany). Plausible does not use cookies, does not collect personal data, does not track individuals across sites or devices, and does not store IP addresses. All data is fully anonymised and aggregated. No cookie consent banner is required. You can read more at plausible.io/privacy.
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. All data is transmitted over encrypted connections (HTTPS). OAuth tokens are stored encrypted at rest. However, no system can guarantee 100% security, and you are responsible for maintaining the confidentiality of your account credentials.
Some of our service providers (including Anthropic and Supabase) may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses or adequacy decisions — consistent with UK GDPR requirements.
The Service is not directed to children under 16. We do not knowingly collect personal information from children. If we learn that a child has provided us with personal information, we will delete it promptly.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date below. For material changes, we will notify users by email or via a prominent notice in the Service. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at support@aberyarn.com.
