LAST UPDATED OCTOBER 9, 2026
Privacy policy
On It is a private personal assistant operated by its developer for one account.
Information On It accesses
When you connect Google, On It uses read-only Gmail and Google Calendar access. It stores email headers and snippets and upcoming calendar events within a 45-day window. It does not fetch full email bodies. Account profile information and OAuth credentials are used to sign you in and maintain the connection.
The optional macOS Messages collector reads new text messages from the local Messages database after you grant Full Disk Access. Its first run does not import prior history. It sends up to 500 characters of message text, sender details, timestamps, and conversation identifiers to On It over HTTPS. It does not read attachments. You can stop the LaunchAgent and remove its local cursor and Keychain token at any time.
How information is used
Information is used only to display and synchronize your private review workspace. On It does not sell data, serve ads, or send email replies or make calendar changes automatically. Source records are stored in a Neon Postgres database. Authentication data and OAuth tokens are stored there, with OAuth tokens encrypted by the authentication library.
Sharing and security
Data is processed by Google APIs, Vercel (application hosting), and Neon (database hosting) to provide the service. The Messages collector sends data only to the configured On It endpoint. It is not shared for advertising. The developer uses access controls and encrypted OAuth token storage, but no internet service can guarantee absolute security.
Retention and deletion
Source records and short previews are kept until 90 days after the source event or the last linked review item is resolved, whichever is later. Records linked to open or confirmed review items are retained until those items are resolved. After expiry, the source record is deleted and closed review items keep only their kind, status, and resolution time. You can revoke On It’s Google access from your Google Account at any time. To request deletion of stored account or source data, email krisburtoft@gmail.com.
Contact
For privacy questions, contact krisburtoft@gmail.com.