Privacy Policy

Last updated: February 23, 2026

ChatCal Inc. ("we", "us", "our") operates Sotto, a macOS application and the website at heysotto.com. This Privacy Policy describes how we collect, use, and protect your information.

1. Information We Collect

Website

• Email address — when you join our waitlist.
• Usage analytics — we use PostHog to understand how visitors interact with our site. This may include pages visited, referral source, browser type, and device information. PostHog may set cookies for this purpose.

Sotto Application

When you use the Sotto app, it accesses data from the following sources on your Mac:

• Gmail — via Google OAuth. We request read-only access to your email messages and metadata.
• Google Calendar — via Google OAuth. We access your calendar events and attendee information.
• iMessage — by reading the local iMessage database on your Mac. No Apple credentials are required.
• WhatsApp — by reading the local WhatsApp database on your Mac.

Sotto reads your messages and calendar data locally on your Mac. It does not upload or store your raw messages on any server.

2. How We Use Your Information

• Waitlist emails — to notify you when Sotto is available and to send product updates. You can unsubscribe at any time.
• Message and calendar data — to generate your daily brief, meeting preparation notes, people context, and suggested actions. Only the excerpts and summaries necessary to generate your brief are sent to our language model providers (see Third-Party Services below).
• Analytics data — to understand website usage patterns and improve our site.

3. Third-Party Services

Sotto uses the following third-party services to generate your briefs:

• Google (Gemini) — for context extraction and web search grounding. Subject to Google's Privacy Policy.
• Anthropic (Claude) — for brief enrichment and polish. Subject to Anthropic's Privacy Policy.
• PostHog — for website analytics. Subject to PostHog's Privacy Policy.

We send only the minimum data necessary to these providers. We do not sell your data to any third party.

4. Data Storage and Security

• Local-first architecture — your messages and brief data are stored on your Mac in iCloud Drive (~/Library/Mobile Documents/com~apple~CloudDocs/Sotto/). We do not maintain server-side copies of your personal data.
• Authentication credentials — your Google refresh token is stored in the macOS Keychain, protected by your system's security.
• Waitlist data — email addresses submitted via the waitlist are stored on our server infrastructure (Railway) and protected with industry-standard security measures.
• Encryption — all data transmitted between the app and our services uses HTTPS/TLS encryption.

5. Data Retention

• Brief data — stored locally on your Mac. You control retention by managing files in your iCloud Drive.
• Cached data — attendee research and people profiles are cached locally for up to 30 days and 7 days respectively to reduce redundant processing.
• Waitlist emails — retained until you request removal or unsubscribe.

6. Your Rights

You have the right to:

• Access your data — since brief data is stored locally, you have direct access on your Mac.
• Delete your data — uninstall the app and remove the Sotto folder from iCloud Drive to delete all local data. Contact us to remove your email from the waitlist.
• Opt out of analytics — you can use browser privacy settings or ad blockers to opt out of PostHog tracking.
• Revoke access — revoke Sotto's access to your Google account at any time via Google Account Permissions.

California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email below.

7. Children's Privacy

Sotto is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child under 13, please contact us and we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of Sotto after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

ChatCal Inc.
hello@heysotto.com