Secretariat reads your classes, calendars and, if you turn it on, some email. That’s a lot to trust an app with, so here’s exactly how we handle it. The Privacy Policy is the full answer, and Your data is the short list of what it reads.
The short version
- It only reads the apps you connect. It never submits, posts, sends or changes anything in them.
- The assistant shows you every change it wants to make and waits for your OK.
- Sign-ins to your apps are encrypted before they’re stored.
- We don’t sell your data, show you ads or use your data to train AI.
- You can disconnect any app or delete everything, any time.
It only reads your apps
Secretariat reads your assignments, events and tasks so it can build your list. It never turns in work, posts in a class, sends an email or edits your calendar. Where an app lets access be limited to reading, as Google and Microsoft do, that’s all Secretariat asks for. Some, like a Canvas access token, can’t be limited that way, so there the promise lives in our code, which only ever reads. Checking something off, moving it or adding a note happens inside Secretariat and stays there.
The assistant asks first
When you ask the assistant to move a to-do, add an event or clear something, it shows you exactly what will change and does nothing until you confirm. Clearing or deleting comes with an Undo. This holds in every language it answers in.
How your data is protected
- Sign-in tokens for connected apps, calendar links, phone numbers and two-step sign-in keys are encrypted with AES-256 before they’re stored.
- Passwords and recovery codes are kept only as secure hashes, never as the password itself.
- Everything travels over HTTPS, and the site sends strict security headers.
- Each account can only ever see its own data.
- Sign-in and sign-up are rate limited, and you can turn on two-step sign-in in Settings.
- Sign-ins, password changes and other security events are logged so problems can be traced.
AI and your data
Some features use AI from Anthropic (Claude) and OpenAI. Each one gets only what that feature needs, like a syllabus to find its due dates or your question for the assistant. None of these providers trains on what we send, your grades are never sent to AI, and we never use your data to train AI models ourselves. Many of these reads reach Anthropic or OpenAI through OpenRouter, which passes them on. If you turn on spoken replies, the text of each reply goes to OpenAI or ElevenLabs to be read aloud.
Reviewed by Google and Microsoft
- Google reviewed and approved how Secretariat reads your Google Calendar and Google Tasks. Its use of Google data follows the Google API Services User Data Policy, including the Limited Use requirements.
- Secretariat Labs, Inc. is a verified Microsoft publisher, so Outlook and Microsoft To Do show who’s asking.
- The Chrome extension is listed on the Chrome Web Store.
Who else handles it
Secretariat runs on a few service providers (hosting, the database, AI, email, error reports and payments), and each one only processes data to provide its service to us. The full list is in the Privacy Policy. Card details go straight to Stripe, never to us.
You're in control
Disconnect any app in Settings, Connected apps, and its sign-in is deleted right away. Delete account in Settings removes your account and everything in it. To get a copy of your data, email us.
Report a security problem
If you think you’ve found a security issue, please email hello@getsecretariat.com with what you found and how to reproduce it. We read every report and will get back to you.