Privacy Policy

1. Overview

Northlight (“we,” “us,” or “our”) provides software that enables users to execute tasks across applications using AI. This Privacy Policy describes how we collect, use, and handle information when you use our services, including your Northlight account and the apps connected to it.

Northlight operates by interacting with applications on a user’s behalf and executing actions at the user’s direction. Your assistant keeps working on a task you gave it while you are away, and reads data within the applications you connect as that task needs. When you finish setting up your account, Northlight’s Context app also researches your public profiles on its own, without a separate instruction.

2. Information We Collect

a. Account Information

We collect basic account information such as your name, phone number, and email address. If you sign in with Google, we receive your Google account’s name, email address, and profile picture.

b. User Inputs and Outputs

We store:

• prompts, instructions, and commands submitted by users
• outputs generated by the system
• conversation history

c. Usage Data

We collect limited technical and usage data, such as:

• session activity
• feature usage
• performance metrics
• server logs of requests to the service
• crash and error reports, from our servers and from the Northlight iPhone app
• if you use the Northlight iPhone app and allow notifications, a device token that we store with your account so we can send you a notification when your assistant asks you a question

d. Data Accessed Through User Actions

Northlight may access data within third-party applications (e.g. email, calendar, CRM, messaging tools) when you ask it to or when a task you gave your assistant needs it. Your assistant keeps working on a task while you are away, so this can happen when you are not using the app. Separately, when you finish setting up your account, Context researches the public profiles you shared, without further instruction from you.

3. Google and Apple Sign-In

If you choose to sign in with Google, we use Google only to confirm who you are and to read your name, email address, and profile picture (the openid, email, and profile scopes). We use that information to sign you in and to fill in your Northlight account. We do not use it for advertising, and we do not sell it.

If you choose to sign in with Apple, we use Apple only to confirm who you are and to receive your name and email address (the name and email scopes). If you choose to hide your email from us, the address we receive is a private relay address Apple creates, which forwards to your real one. We use that information to sign you in and to fill in your Northlight account. We do not use it for advertising, and we do not sell it.

4. What We Do NOT Collect or Store

Northlight never asks for or stores your passwords for your accounts at other services. When you connect an app, we store the access tokens that app grants so your assistant can work with it. You sign in to your Northlight account with a link sent to your confirmed phone number or email address, with Google, or with Apple.

5. How We Use Information

We use collected information to:

• provide and operate the service
• execute user-requested actions across applications
• improve system performance and reliability
• analyze usage patterns to improve the product
• send you a notification when your assistant asks you a question

6. AI and Model Usage

Northlight uses third-party AI model providers, such as OpenAI and Anthropic, to process user inputs and generate outputs.

If you text Northlight's number before you have signed in, we send those texts to Anthropic so an AI assistant can answer them.

• Data is sent to these providers only as needed to provide the service
• We do not use customer data to train our own models
• We do not use identifiable customer data to train third-party models

Northlight’s own Anthropic account also processes data for Northlight’s apps, for example the research Context does about you when you finish setting up your account.

We may review anonymized interactions internally for product improvement and analytics.

7. Data Storage and Retention

We store:

• account information
• conversation history
• inputs and outputs
• limited usage logs

We retain this data for as long as necessary to provide the service and improve the product. You can delete your account from your account page; we may also delete or anonymize data upon request, subject to operational constraints.

8. Security

We implement industry-standard security practices to protect data, including:

• encryption in transit
• access controls

Northlight is in the process of obtaining SOC 2 Type II certification and aligning its systems with those standards.

9. Data Sharing

We do not sell personal information.

We may share data only:

• with service providers required to operate the system (e.g. AI model providers; infrastructure and messaging providers that host the service and deliver sign-in texts; Sentry, which receives crash and error reports; and Apple, which delivers notifications to the iPhone app)
• with the apps you connect to your account, to the extent needed for them to work
• as required by law

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• access your data
• request deletion
• request correction

Requests can be submitted to: [email protected].

11. Changes

We may update this policy from time to time. Continued use of the service constitutes acceptance of updates.

12. Contact

For questions, contact:

Northlight Systems Inc. Email: [email protected]