Back to Home
ChiefofStaff logo

Documentation

Everything you need to know about ChiefofStaff: features, data handling, integrations, privacy, and security.

Overview

ChiefofStaff is an intent orchestration platform. It turns a spoken or typed instruction into controlled execution across the people, systems, documents and AI a firm already uses, and records what happened and why.

The Service is operated by Sonnet Advisors. The application is hosted in the European Union, in Germany.

Platform

iOS, Web Application

Pricing

£99/month

Core Features

Voice Commands

Speak naturally to create tasks, send emails, schedule meetings, and more. Audio is transcribed; automatic deletion of the audio after transcription is being built and is not in place yet.

Zero-touch inbox

Read, draft and reply, by instruction. Content is used solely for Service functionality.

Task Management

Create, assign, and track tasks with intelligent prioritisation and team delegation.

Calendar Management

Schedule and manage meetings through voice or text. Microsoft 365 calendars today; Google Calendar in pilot.

Team Collaboration

Delegate tasks to internal contacts. All contacts are manually created; the app never imports phone contacts.

Data Handling

We collect only the data necessary to provide the Service. Below is a summary of data types and their retention:

Data TypeRetentionDeletion
Voice recordingsRetained in processing logs; immediate deletion in buildAccount termination
TranscriptionsUp to 30 daysAutomatic or account deletion
Account dataDuration of subscriptionAccount deletion
Tasks & productivityDuration of subscriptionAccount deletion
Integration dataWhile integration is activeDisconnection or account deletion
Security logsNot yet setNot yet set

We do not sell personal data, use data for advertising, build marketing profiles, or mine data for unrelated purposes.

Integrations

ChiefofStaff supports optional integrations with Google and Microsoft accounts. These are entirely opt-in.

Email Integration

  • Read and summarise emails
  • Draft and send responses
  • Extract action items

Calendar Integration

  • View and manage events
  • Schedule meetings by voice
  • Set reminders and alerts

Integration data is accessed only after explicit authorisation and used exclusively for Service functionality. You can disconnect integrations at any time.

Internal Contacts

The app does not access, import, sync, or retrieve contacts from your device phone contact list.

All contacts within ChiefofStaff are manually created by the user. Each contact contains only:

  • First name
  • Last name
  • Email address

Contacts can be created manually or via voice command. Voice-created contacts always require explicit confirmation through an in-app permission popup before being saved.

Security

We implement appropriate technical and organisational measures to protect your data:

Encryption in transit (TLS)
Role-based access controls
Hosted in the EU, in Germany
Limited internal data access
Contractual subprocessor safeguards
Data minimisation practices
Security monitoring and detection

For full details, see our Security page.

Privacy & GDPR

ChiefofStaff complies with GDPR, CCPA/CPRA, and international data protection regulations. We serve users globally including in the EU, EEA, UK, and United States.

Your Rights

EU/EEA/UK Users

  • Access, rectification, erasure
  • Restrict/object to processing
  • Data portability
  • Lodge complaints with authorities

California Residents

  • Know what data is collected
  • Request deletion or correction
  • Opt out of sale (we do not sell)
  • Non-discrimination

International Transfers

ChiefofStaff is hosted in the European Union, in Germany: the system of record (account data, tasks, time entries and connection tokens), the automation that carries out each request and its working record of each request all run there. Some processing uses AI providers in the United States, for example OpenAI's Whisper for speech to text and OpenAI's language models, under enterprise terms that forbid using your data to train any model, so the content of an instruction passes through the United States even though the record of it is stored in the EU. Messages sent through Telegram or Signal pass through those services. For EU/EEA/UK users, transfers to the United States are safeguarded by Standard Contractual Clauses (EU 2021/914) and the UK International Data Transfer Addendum.

Read our full Privacy Policy and Terms of Service (includes DPA and International Data Transfer Addendum).

Account & Data Deletion

You can request account deletion or data erasure at any time. Upon verified deletion request, personal data is deleted within a commercially reasonable timeframe unless legal retention is required.

How to Request Deletion

We will verify your identity before processing any deletion request.

Getting Support

Need help? We are here for you. Our support team typically responds within 24-48 hours.

Maximum 3 support requests per week per email address.