ChiefofStaff is operated by:
Sonnet Advisors
Contact: craig@sonnetadvisors.com
Sonnet Advisors is the data controller responsible for decisions regarding the processing of Personal Data under this Privacy Policy.
The application is hosted on secure cloud infrastructure.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you use:
This Policy applies globally, including users in the United States, European Union (EU), European Economic Area (EEA), and United Kingdom (UK).
We collect only the data necessary to provide the Service.
The App does not access or import device phone contacts.
Users may manually create internal contacts consisting of:
Contacts are created only when:
Clear in-app disclosure explains how contact data is stored and used.
If you connect Google or Microsoft accounts, we may process:
We access only the data necessary to provide core functionality (summarization, task creation, scheduling).
We collect data through:
We do not scrape, purchase, or import phone contact lists.
For EU/EEA/UK users, processing is based on:
| Data Type | Legal Basis |
|---|---|
| Account data | Contract performance |
| Voice transcription | Contract + Consent |
| Email/calendar integration | Consent + Contract |
| Internal contacts | Contract |
| Security logs | Legitimate interest |
| Compliance records | Legal obligation |
Users may withdraw consent for integrations at any time by disconnecting accounts.
We use data solely to:
We do not:
Sensitive data from email and calendar integrations (including email content, calendar events, and associated metadata) is used exclusively to provide the core Service functionality described above. This data is not used for marketing, advertising, or any form of use-based data mining, either by us or by any third-party service providers, subprocessors, or analytics partners.
| Data Type | Retention Period | Deletion Trigger |
|---|---|---|
| Voice recordings | Immediately deleted after transcription | Automatic |
| Transcriptions | Up to 30 days | Automatic deletion or account termination |
| Account data | Duration of subscription | Account deletion |
| Task & productivity data | Duration of subscription | Account deletion |
| Integration data | While integration is active | Disconnection or account deletion |
| Security logs | Up to 12 months | System rotation |
Upon account termination, personal data is deleted or anonymized within a commercially reasonable timeframe unless retention is legally required.
All data is hosted in the United States.
For EU/EEA/UK users, transfers are safeguarded by:
The Service uses AI to process commands and summarize information.
The Service does not make decisions producing legal or similarly significant effects without human involvement.
Users retain full control over actions taken based on AI-generated outputs.
You have rights to:
You have rights to:
Requests may be submitted to: privacy@chiefofstaff.pro
We implement:
We may use third-party service providers to host or support the Service.
A current list of subprocessors is available upon request at: privacy@chiefofstaff.pro
All subprocessors are contractually required to provide appropriate data protection safeguards.
Third-party service providers and subprocessors are contractually prohibited from using data accessed through Google and Microsoft integrations (including email content, calendar events, and contacts) for any purpose other than providing the Service. They may not use this data for marketing, advertising, targeted profiling, or use-based data mining.
We have not appointed a Data Protection Officer as our processing activities do not require one under Article 37 GDPR.
Where required under Article 27 GDPR and UK GDPR, we will appoint a representative within the EU and United Kingdom and publish their contact details here.
For questions about this Privacy Policy or to exercise your rights, contact us at:
privacy@chiefofstaff.pro