This isn't legal boilerplate copied from some other website. I'm going to tell you what really happens to your data, because if you're going to let Utgi read your email, you deserve to know that first.
Who is responsible
Otger Vendrell i Auleda. I build and maintain Utgi myself, between Barcelona and Bogotá. For anything in this text, or to ask me for a copy of your data or for it to be deleted: hola@utgi.app.
One installation per person
Every client has their own installation and their own database. There is no shared database where one person's emails get mixed up with someone else's tasks. If tomorrow you want to take your data with you or delete it, that's done on your installation without touching anyone else's.
What data is in there
- What you tell it: notes, voice notes that get transcribed, photos you send it, tasks and reminders.
- Your projects and the people involved in them, along with whatever you note down about each one.
- Your calendar and your email, if you choose to connect them. This is optional and you can disconnect them whenever you like.
- The minimum technical data it needs to work: your session, the time you want it to write to you, and the channel it uses to reach you.
Google data (Gmail and Calendar)
If you connect your Google account, Utgi asks for permission to read your emails and your calendar, and to create drafts. It never asks for permission to send: technically, it can't.
Utgi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically: that data is used only to provide Utgi's features to you. It is not sold, not used for advertising or to train models, and no person reads it unless you ask me for help with a specific issue and authorize it.
What happens with artificial intelligence
To summarize an email or understand a voice note, Utgi sends that text to the AI provider (Anthropic). That provider does not keep the content to train its models. Only what's needed for that specific task is sent, not your entire database.
Where it's hosted and who else handles it
Utgi relies on a handful of providers. Each one sees only what it needs to do its part, and none of them uses your data for anything else:
- Vercel, where the application runs.
- Supabase, your installation's database.
- Anthropic, the artificial intelligence that understands what you tell it and summarizes your emails.
- OpenAI, only to turn your voice notes into text.
- Google and Microsoft, if you connect your email or your calendar.
- Meta, if you talk to Utgi over WhatsApp.
Some of these providers process data in the United States. They do so with the safeguards required by the General Data Protection Regulation (GDPR): the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework. If you need your whole installation to live in Europe, tell me when we start and I'll set it up that way.
How long it's kept
For as long as you're a client. If you leave, I delete the installation and its database within thirty days, except for whatever I'm required to keep for tax purposes, which is the invoices and nothing else.
Your rights
You can ask me for access, a copy, rectification, erasure, restriction or objection, and to take your data with you in a readable format. You write to me and I do it; no forms, no queue. If you think I haven't handled it properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
Cookies
This page has no analytics or trackers. The application uses a single technical cookie to keep your session open, and it can't be used to follow you around.
If this changes
If I ever change anything important, I'll let you know by email before it takes effect. The date at the top tells you when this was last revised.