Your data
Your data, in plain English
Effective October 19, 2026
We keep your tasks and what was done on them. Your AI does the reading of your mail, files and calendar with its own connections, so we never see them. Here is all of it, in three tables. The full version is our privacy policy.
| What | Why | How long |
|---|---|---|
| Your name, and when you sign in, your email and sign-in account id | So we know it’s you. | While you have an account. |
| Your tasks, in your own words, and their briefs | They are your queue. | While you have an account. Deleting a task hides it; ask us to erase it for good. |
| Your notes and answers, and what your assistant recorded: progress, questions, summaries, drafts | So the next conversation picks up where the last one stopped. | While you have an account. |
| Your profile, projects and rules | So briefs fit you and your assistant follows your instructions. | While you have an account. |
| When you last visited, and when you first opened each task | To see whether the getting-started tasks helped. | While you have an account. |
| Scheduled runs, and what your assistant couldn’t reach | To make the next run go further. | While you have an account. |
| Your sign-in session, as a fingerprint, never the cookie itself | To keep you signed in. | Ends when you sign out, or 90 days after you last used it. |
| Your invite request: your email, which AI you pay for, and any areas you picked | To decide who to invite next. | Until you ask us to delete it. We keep it after we invite you, with when we sent the invite. |
| Backup copies of the database | To recover from mistakes or failures. | Up to 30 days. Deleted data can remain in them until then. |
| Server logs | To keep the service running and safe. | As long as our host keeps them, then deleted. |
| What | Why not |
|---|---|
| Your inbox | Your assistant reads your mail with its own connection to your account. We get only what it writes into a task. |
| Your files | The same: your assistant opens them. A draft it saves stays in your own storage; we keep the link, or the text if it hands that back. |
| Your calendar | The same: your assistant checks it and suggests the entry. We keep the task. |
| Your passwords | Underway has none. You sign in with Google or a one-time code sent to your email, and we never ask for the keys to your other accounts. |
If your assistant copies a line from an email into a task, that line is stored like any other note.
| Company | What for | What they get |
|---|---|---|
| Railway | Hosts the app and its database. The database is in the EU (the Netherlands). | Everything we keep. |
| Anthropic | Writes each task’s brief, under terms that don’t permit training on your data by default. | The task, with your profile, rules, projects and recent finished work. |
| WorkOS | Signs you in. | Your email address and name. |
| Confirms who you are, if you sign in with Google. | That you are signing in to Underway. | |
| Cloudflare | Runs this website and forwards email sent to support@underway.now. | Visits to this website, and the emails you send us as they pass through. |
| Google Workspace | Our email provider: holds the mail sent to support@underway.now. | The emails you send us, and our replies. |
Getting it deleted or exported
Email support@underway.now from the address on your account. We delete everything, or send you a copy, within 30 days, and tell you when it’s done.
No ads, no selling, no analytics, and no cookies on this website. Every detail is in the privacy policy.