Privacy Policy

This Privacy Policy explains what information Better Together collects, how we use it, and the choices you have.

Last updated: September 23, 2026

1. Information we collect

Information you give us

• Account data: name, email, password, role, and organization.
• Evidence data used to build a Digital Double: life-history interviews, decision incidents, psychometric responses, behavioral tasks, and work artifacts you choose to provide. This is the most sensitive category of data we hold, and it is collected only with the modeled person's consent.
• Workspace content: simulations, scenarios, artifacts, scores, and messages created while using the Service.
• Support communications: messages you send to us.

Information collected automatically

• Device and log data: IP address, browser type, pages viewed, timestamps.
• Cookies and similar technologies used for authentication, security, and basic analytics.

Information from integrations

If you connect third-party tools (for example, Gmail, Slack, or Telegram), we receive the data those integrations are scoped to share. Integrations connect via OAuth. We store the resulting access and refresh tokens so the connection keeps working without asking you to sign in again; they are encrypted at rest with AES-256-GCM and are never exposed through our API. We never ask for or store your password for any third-party service.

Section 5 describes Gmail specifically, in the detail Google requires.

2. How we use information

• Operate the Service, including authentication and account management.
• Build, calibrate, and run Digital Doubles: evidence data becomes a structured Memory Core used to simulate the modeled person's reasoning, with provenance and audit metadata preserved.
• Run simulations, scoring, and workflow rehearsals you initiate.
• Improve the platform, including simulation quality and calibration.
• Communicate with you about your account, updates, and support requests.
• Meet legal obligations, enforce our Terms of Use, and protect against fraud or abuse.

3. How we share information

• Within your organization. Content created in an organization's workspace is visible to workspace members according to the access rules that organization configures. Workspace administrators control who can run or inspect which Doubles.
• With service providers. We rely on vendors for hosting, email delivery, analytics, and AI model inference. They process data on our behalf under contractual protections, and evidence data is not used by our AI providers to train their own models.
• For legal reasons. We may share data to comply with law, to enforce our Terms, or to protect the rights, property, or safety of Better Together, our users, or others.
• In a business transfer. If Better Together is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

We do not sell personal information.

4. Your choices and rights

• Access and update. You can view and edit most of your information from within your account.
• Withdraw consent. If you are modeled by a Digital Double, you can withdraw consent at any time. Your Double is deactivated and its evidence data deleted or anonymized, subject to your organization's retention duties.
• Delete. You can delete your account and everything associated with it yourself, from Settings. Doing so also withdraws our access to every service you connected. If you would rather we did it for you, contact support@future-forward.tech.
• Regional rights. Depending on where you live, you may have additional rights (e.g. access, portability, correction, objection). Contact us to exercise them.

5. Google user data

This section describes how we handle data obtained through Google APIs. It applies in addition to the rest of this Policy, and where the two differ, this section governs.

What we ask for, and why

• See your email messages and settings (gmail.readonly) — we read messages in your Inbox and Sent mail so your Digital Double can draw on them when you ask it something, and so the Reply Agent can recognise a message that still needs an answer.
• Manage drafts and send emails (gmail.compose) — we create a draft reply in your mailbox when you approve one. This is the narrowest scope Google offers that can create a draft; there is no draft-only scope. We never send email on your behalf. The draft waits in your Drafts folder until you send it yourself.

What we read, and when

The first time you connect, we read up to 5,000 messages from the previous 180 days, from your Inbox and Sent mail. After that we read new messages as they arrive. We check periodically in the background, without you being present, so the Reply Agent can prepare a draft before you next open the app. We also sample your 20 most recent sent messages about once a day to learn how you write, so drafts sound like you rather than like a generic assistant.

From each message we keep the sender, recipients, any copied recipients, the subject, and the message body, together with the names of any attachments. We do not download attachments themselves.

Where it is kept

• a search index, so your Double can find the right message when answering — this holds the message text, not only a mathematical representation of it;
• our database, for any reply the agent has drafted: the message being answered, a short excerpt of the conversation it belongs to, and the mail headers needed to put the reply back in the right thread.

We keep this for as long as the integration is connected. There is no separate expiry: disconnecting or deleting your account is what removes it.

Who else sees it

Producing an answer or a draft means sending the relevant message text to service providers who process it on our behalf:

• CloudRift — our primary AI model provider.
• Anthropic — fallback AI model provider.
• Together AI — turns your messages into the mathematical representation the search index uses, and acts as an additional model fallback.
• Qdrant — hosts the search index described above, which contains message text.
• Telegram — only if you choose to connect a Telegram notification bot. In that case the notification we send you includes the sender, the beginning of the message being answered, and the drafted reply. If you would rather this did not happen, do not connect a notification bot.

These providers process the data to deliver the feature you asked for, under contractual restrictions, and are not permitted to use it to train their own models. We do not sell Google user data, and we do not use it for advertising.

Limited Use

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Gmail data to develop, improve, or train generalised artificial-intelligence or machine-learning models, and we do not transfer it to others except as described above, with your consent, or as required by law.

Removing it

Disconnecting Gmail in the app withdraws our access at Google and deletes the mail we synced — across every one of your sessions — along with any drafts the agent prepared, the record of what was synced, and the stored credentials. In the rare case where our encryption key is unavailable and the stored credentials cannot be overwritten, we still withdraw access and tell you the deletion did not fully complete, so you can retry.

Deleting your account, from Settings, does all of the above for every connected service, removes your Digital Double and everything behind it, and deletes your account record. If we cannot confirm that a provider accepted our request to withdraw access, we tell you which one, so you can remove us from that service's own permissions page. You can also remove our access at any time from your Google account permissions page.

6. Security

We use administrative, technical, and physical safeguards designed to protect information, including TLS 1.2+ encryption in transit, AES-256 encryption at rest, access controls, and audit logging. No system is perfectly secure; we encourage you to use a strong, unique password and to notify us at support@future-forward.tech if you suspect unauthorized access to your account.

7. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service. Evidence data behind a deactivated Double is deleted or anonymized within a defined retention window. After deletion, we may keep limited records required for legal, accounting, or fraud-prevention purposes.

8. International data transfers

Better Together is operated by Ecosystemone LLC from the United States. If you access the Service from another country, information may be transferred to, stored, and processed there. Where required, we put in place safeguards that align with applicable data protection laws, including GDPR where it applies.

9. Children

The Service is a workplace product directed to adults. It is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you (for example, by email or a prominent in-product notice) and update the "Last updated" date above.

11. Contact

Questions about this Privacy Policy or your information can be sent to support@future-forward.tech, or by post to Ecosystemone LLC, 3270 Cabrillo Ave, Apt 431, Santa Clara, CA 95051-2233, United States.