Privacy Policy

Last updated January 21, 2026

This Privacy Policy explains how Underframe LLC ("Underframe", "we", "us", and/or "our") collects, uses, and protects your information when you use our services.

1. What We Collect

We collect information you provide directly to us, including account information (such as your email address and optional name), content you create (such as chats, projects, RFIs, and other data you enter), and basic logs and diagnostics. If you connect your Google or Microsoft account, we sync and store your email and calendar content, metadata, and some attachments.

2. How We Use It

We use your information to provide and maintain the Services, including syncing email and calendar data and linking it to RFIs. We use your content to generate AI-assisted outputs you request. We also use your information for security, abuse prevention, and support.

3. AI Processing

When you use AI features, relevant content may be sent through Vercel AI Gateway to generate a response. See Vercel AI Gateway for details on model providers. We do not use your content to train our own models. We do not sell your email or content. We configure providers to limit retention and training where those options are available.

4. Google Services

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Microsoft Services

Our use of information received from Microsoft APIs adheres to the Microsoft APIs Terms of Use.

6. Who We Share With

We do not sell, rent, or trade your data. We only share your information with service providers who help us run Underframe (such as our database provider Convex and AI providers via Vercel AI Gateway), and only to the extent necessary to provide the Services. We may also disclose information if required by law or to protect safety and security.

7. Data Retention and Deletion

You can delete chats, projects, and RFIs within the app. Synced email and calendar data is retained until you delete your account, as it may be linked to your project history. Disconnecting Google or Microsoft stops future syncing but does not delete previously synced data. When you delete your account, we delete your stored content within a reasonable period, subject to backups and any legal or security requirements.

8. Your Choices

You can revoke Google or Microsoft access at any time, which stops syncing. To request account deletion, email privacy@underframe.com.

9. Security

We take reasonable measures to protect your data. OAuth tokens used to access your email and calendar are encrypted at rest. However, no system is perfectly secure, and we cannot guarantee absolute security.

10. Contact

If you have questions about this Privacy Policy, how we collect and use your data, or your choices and rights, please contact us at: