Privacy
Aggretime keeps time entries. It does not keep the mail, the transcript, the prompt, or the calendar description they were drafted from.
Every source is off until you turn it on. Access is read-only. The product never sends mail, never edits a calendar, and never deletes a recording. Disconnect removes the stored token.
You choose what a source may use: timestamps only, titles and subjects, or the content itself. Content is sent to the narrative drafter and then dropped. It is not written to the database.
OAuth tokens are encrypted with AES-256-GCM. Entries are queried by the signed-in user. One lawyer cannot read another lawyer’s day.
Your data is not used to train Aggretime models. The default drafter is Anthropic, which should be run under a zero data retention agreement. OpenAI is the alternative, called with storage disabled.
Nothing in a time log was exported before you confirmed it.