Privacy policy

01Who we are

Underway is operated by Wilder AI, a Colorado business (“Wilder AI”, “we”, “us”). This policy covers the Underway app at app.underway.now, the Underway connector your AI assistant uses to reach your queue, and this website, underway.now. Together we call them “the service”.

Underway is in beta. We are responsible for the personal data described here, and the place to reach us about any of it is support@underway.now.

02What we collect

Your account

The name we show you in the app. When you sign in, we also keep your email address, the account id your sign-in provider gives us, a record of your sign-in sessions, and the invite code you used to join.

What you put in your queue

• Tasks, in your own words, with their briefs, titles, priorities, due dates and projects.
• Your notes and answers, including your replies to your assistant’s questions.
• Your profile: who you are and which tools your assistant can reach.
• Your projects: what each is, the systems it runs on, and any other standing context you give it.
• Your rules: the standing instructions your assistant follows, and which assistant you prefer to work in.

What your assistant writes into a task

Your assistant reaches Underway through our tools, and we receive only what it sends through them: the tasks it captures for you, progress it records, the questions it asks you, notes, and the summaries and drafts it reports back, either as text or as links to where it saved them in your own storage. When it cannot reach something it needs, it can file a short report saying what was missing, which carries the name and version of the assistant app it was working in. When it starts a scheduled run, we record which tasks the run picked up.

When you use the app

A few timestamps: when you last opened the app, when you first opened each task, and when you dismissed a tip. These tell us whether the getting-started tasks helped. They are not analytics, and nothing tracks you across other sites.

Invite requests

If you ask for an invite on this website, we keep the email address you give, which AI you pay for, the areas you picked if you answered that question, and when you sent it. When we send you an invite, we also keep when we sent it, and the invite records the address it was sent to. We don’t store the IP address it came from.

Operational logs and support

Our server and our hosting provider keep logs of requests, with the time, the address requested, the result and network details such as an IP address, so we can keep the service running and secure. If you email us, we keep the conversation.

03What we never see

Underway does not connect to your email, your files or your calendar, and we hold no copies of them. Your AI assistant reads them with its own connections, set up with its own provider, and sends us only what it writes into a task.

• We never ask for, receive or store a password, access token or other credential for your email, files, calendar or any other account.
• Underway has no password of its own. When you sign in, you use your Google account or a one-time code sent to your email.

What your assistant does write into a task is stored like anything else you put there. If it quotes a line from an email in a note, that line is in your queue.

04How we use it

• To run your queue: to write each task’s brief, show you your queue, and let your assistant pick work up and record what it did.
• To make your briefs better over time: your recently finished tasks, and what was done on them, inform your future briefs. Only yours.
• To keep the service working and safe: to fix problems, prevent abuse, and see where your assistant could not reach what it needed.
• To talk to you: to answer your emails, and to tell you about your invite or important changes to the service.

We don’t sell your data or share it for advertising. There are no ads, and no analytics or tracking scripts on this website. We don’t use your content to train AI models, and the AI provider that writes your briefs works under terms that do not permit training on your data by default (see How AI is used). We look at the contents of your queue only when we need to in order to run, support or fix the service, or when you ask us to.

If the law of the EU or the UK applies to you, we rely on our agreement with you to run your queue, on our legitimate interest in keeping the service working and secure, and on your request when you ask for an invite.

05How AI is used

Briefs, written by Anthropic’s API

When you capture or change a task, we send it to Anthropic’s API to write its brief, together with the context that makes the brief fit you: your profile, your rules, your projects, and your recently finished tasks with what was done on them. That use is under Anthropic’s commercial terms, which do not permit training on your data by default.

The work, done by your own assistant

The work itself happens in your own AI assistant, such as Claude from Anthropic or ChatGPT from OpenAI. What you say to it, what it reads with its connectors, and what it keeps are governed by your agreement with that provider and its privacy policy, not by ours. We receive only what your assistant writes into Underway through our tools.

06Who processes it

We use a few companies to run the service. Each gets only what its job needs.

The Google sign-in row and the Google Workspace row are separate: what Google shares when you sign in is covered by Google user data below, and has nothing to do with email you send us.

We may also disclose information if the law requires it, to protect someone’s safety, or as part of a sale or transfer of the business, in which case this policy continues to apply to it.

07Google user data

If you choose to sign in with Google, Google shares with us, through WorkOS, only your name, your email address and your Google account id. We ask for the openid email profile scopes and nothing more: no access to your Gmail, Drive, Calendar, contacts or any other Google data.

We use that information only to sign you in and to show your name in the app. We don’t use it for advertising, don’t sell it, don’t use it to train AI models, and don’t share it with anyone except as needed to sign you in, to comply with the law, or with your permission.

Underway’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

08Cookies

This website sets no cookies and loads nothing from other companies: no analytics, no ads, no tracking.

The app sets one cookie when you sign in, to keep you signed in. It is used only by app.underway.now, can’t be read by scripts, travels only over encrypted connections, and lasts 90 days from when you last used it. While you are signing in, the app also sets a short-lived cookie that ties the sign-in back to your browser. We store only a fingerprint of the session cookie, never the cookie itself.

The app also remembers display preferences, such as your theme and filters, in your browser’s own storage. Those stay on your device.

09Retention and deletion

• Your account and your queue are kept for as long as your account exists.
• Deleting a task in the app removes it from your queue, but keeps its record so it can be restored and so your finished work can keep informing your briefs. To have it erased for good, ask us.
• Invite requests are kept, with when we sent your invite, until you ask us to delete yours.
• Operational logs are kept for our hosting provider’s log retention period, then deleted.
• Backup copies of the database are kept for up to 30 days; see below.
• Support emails are kept as long as we need them to help you and keep a record of what was agreed.

To have your account and everything in it deleted, or to get a copy of it, email support@underway.now from the address on your account. We do it within 30 days and tell you when it’s done. A copy comes in a common machine-readable format.

We make backup copies of the database before changes to it, so we can recover from mistakes or failures. They are kept securely and deleted after 30 days, so data you delete is gone from them within 30 days.

10Security

Everything between you, your assistant and Underway travels over encrypted connections (TLS). Your queue lives in a database with our hosting provider, protected by its standard safeguards, and in the backup copies we keep securely for up to 30 days (see Retention and deletion). We don’t add a separate layer of encryption of our own today.

Access to your queue requires your sign-in, whether through the app or through your assistant’s connector. Access to production systems is limited to the people who operate Underway. Because we hold no credentials for your other accounts, a problem on our side can’t open your mail or files.

No system is perfectly secure. If a breach affects your data, we will tell you without undue delay, and as the law requires.

11Your rights

Wherever you live, you can ask us to:

• See the personal data we hold about you.
• Correct it. Most of it, such as your profile, rules, projects and tasks, you can edit yourself in the app.
• Delete it.
• Export it, in a machine-readable format.
• Object to or restrict a particular use of it.

Email support@underway.now. We may ask you to confirm the request comes from you, usually by writing from the address on your account, and we answer within 30 days.

If you live in Colorado, you have rights under the Colorado Privacy Act, including to access, correct, delete and get a portable copy of your data, and to opt out of its sale, of targeted advertising and of certain profiling. We don’t do any of those three, but you may still ask. If we decline a request, you can appeal by replying to our answer, and if you are unhappy with the result you can contact the Colorado Attorney General. If you are in the EU or the UK, you can also complain to your data protection authority.

12Children

Underway is for people 18 and over, and is not directed at children. If we learn we hold data about someone under 18, we delete it.

13International transfers

Wilder AI is based in the United States. Our database is in the EU (the Netherlands), and the companies listed above may process data in the United States and other countries. Where the law requires safeguards for those transfers, we rely on the contractual protections our providers offer.

14Changes to this policy

When we change this policy, we post the new version here and update the date at the top. If a change is material, we also email you before it takes effect, once we have your email address.

15Contact

Questions, requests and complaints about privacy all go to support@underway.now. Underway is operated by Wilder AI, a Colorado business.

See also: Terms of service · Your data, in plain English