Privacy policy

Last updated 2026-11-01

SharedAI is operated by the SharedAI team (an independent developer). This policy explains what we store, why, who receives it and how to get it deleted. Contact: support@195.201.222.81.sslip.io.

What we store

  • Account: your name, email address and profile picture URL from Google sign-in, and a session cookie that keeps you signed in. We never see your Google password.
  • Space content: what you and your AI put into a space: requests, responses, proposals, decisions, notes and links, and the shared context document.
  • Audit log and activity: who did what in a space, when, and through which client (web app, ChatGPT, Claude or another AI client). Other members see this activity.
  • AI connections: OAuth client registrations and access/refresh tokens issued to the AI clients you connect, so they can act for you.
  • Notifications: your inbox items and, if you enable push notifications, the push subscription your browser gives us.
  • Telegram: if a space owner connects a Telegram group, the group's chat id and title, and every question the bot was asked there (in the audit log of that space). The bot receives only commands and replies to its own messages; where a group makes it an admin, Telegram sends it every message, and it ignores those not addressed to it without storing them. For the invite limit, the Telegram id of each person the bot sees in a connected group and when it first saw them, deleted when they leave the group or the group is disconnected. If you link your own Telegram account in SharedAI: its id, username and name, until you unlink it. Votes in a Telegram poll the bot posted are stored with the voter's Telegram id and name. The bot posts the space's requests (title and details), answers, polls and reminders into connected groups.
  • Technical logs: request logs (time, path, status, IP address) used for security and debugging, kept for up to 30 days.

Space content (the shared context, request and response texts, proposal and decision texts, notes and uploaded files) is stored encrypted with a key that belongs to that space alone; titles, names and the activity log are stored as they are.

We do not read your conversations with ChatGPT or Claude. Your AI only sends us the arguments of the SharedAI tools it calls (for example the text of a request) and receives the results.

Why we use it

Only to run the service: show your spaces to you and their members, let your AI act on your behalf, send you notifications, keep the service secure, and fix problems. No advertising, no profiling, no analytics or tracking cookies, no model training.

Who receives it

  • Members of your spaces see the content and activity of the spaces you share with them.
  • Your own AI clients (for example OpenAI's ChatGPT or Anthropic's Claude) receive the data their tool calls return. Members' AI clients receive space content the same way. Those providers handle it under your (or their user's) agreement with them.
  • Google provides sign-in. Web push services run by your browser vendor (Apple, Google, Mozilla) deliver notifications.
  • Our AI model provider (currently OpenRouter, which passes the request to the maker of the model we chose, such as OpenAI), when a space owner uses “Tidy here” (the shared context goes to the model and comes back regrouped; the owner decides whether to save it) and for spaces whose owner connected a Telegram group: the question, the message it replies to if any, and the space's text content (shared context, decisions, proposals, requests, titles and notes of files, never file contents) go to the model to compose the answer, and the answer is posted into that Telegram group, where people who are not members of the space may read it. The provider processes this text to produce the answer under its own API terms; the owner can disconnect the group at any time.
  • Public map, weather and currency services, when someone asks the SharedAI bot in Telegram about places, routes, weather, money or local time: the place names, addresses, city names and amounts in the question are sent to OpenStreetMap Nominatim, the FOSSGIS routing service, Open-Meteo and Frankfurter (European Central Bank rates), and to any tool servers we configure or the space owner adds for the bot (for example Google Maps or Kiwi.com), to look up the answer. No account data is sent. API keys an owner saves for those servers are stored encrypted with the space key.
  • Our hosting provider stores the data on a virtual private server in the European Union (Germany).

We do not sell or rent personal data and do not share it with anyone else unless the law requires it.

Retention and deletion

We keep your data while your account exists. Email support@195.201.222.81.sslip.io from your account address to get a copy of your data or to delete your account; we delete it within 30 days. Content you posted in a shared space is removed with your account. Backups roll over within 30 days. To stop an AI client from acting for you, remove the SharedAI connector in that client; we can also revoke its tokens on request.

Your rights

You can access, correct, export or delete your data and object to its processing by writing to support@195.201.222.81.sslip.io. If you are in the EU or UK you can also complain to your data protection authority.

Children

SharedAI is not meant for children under 16.

Changes

We will update this page and the date above when this policy changes.