Privacy Policy

Last updated April 1, 2026

This Privacy Policy describes how Contained, Inc. ("we", "us", or "our") collects, uses, and protects your information when you use the Aluminum application and the aluminum.app website (collectively, the "Service").

Information We Collect

We collect your email address when you join our waitlist. When you use the Aluminum app, we access data from your connected accounts — including email messages and calendar events — via APIs such as the Gmail API. We also collect usage data such as app interactions and feature usage patterns through analytics tools.

How We Process Your Data

Your email and calendar data is processed on our servers to power Aluminum's features, including surfacing important messages and drafting responses. Data flows from your email provider to our backend infrastructure where it is processed by AI models.

Sensitive information is automatically redacted before being sent to AI providers by default. You may adjust this behavior in your settings.

How We Use Your Information

  • Provide, operate, and improve the Service
  • Process your email and calendar data to surface relevant notifications and draft responses
  • Send you updates, security alerts, and waitlist communications
  • Analyze usage to improve features and performance
  • Comply with legal obligations

Third-Party Services

We use the following third-party services that may process your data:

  • Vercel — hosting and web analytics
  • PostHog — product analytics
  • Convex — database and backend services
  • Inngest — background job processing
  • Google Cloud Platform — cloud infrastructure and Pub/Sub messaging
  • AI providers (Anthropic, OpenAI, Google) — to process and summarize your email and calendar data

We do not sell your data to third parties or share it with advertisers. These services only receive the data necessary to perform their function.

Google API Limited Use Disclosure

Aluminum's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google user data to provide and improve the features you signed up for
  • We do not transfer Google user data to third parties except as necessary to provide the Service, comply with applicable law, or as part of a merger or acquisition with your prior consent
  • We do not use Google user data for serving advertisements
  • We do not allow humans to read your Google user data unless you have given explicit consent, it is necessary for security purposes, or it is required by law

AI providers that process your data are accessed via their API services and do not retain, store, or use your data for model training.

Cookies and Tracking

We use cookies set by our analytics providers (Vercel, PostHog) to understand how visitors use our website. We do not use advertising cookies or tracking pixels.

Data Security

We use industry-standard encryption and security measures to protect your data in transit and at rest. Sensitive data is redacted by default before being processed by AI providers. While no system is perfectly secure, we take reasonable steps to safeguard your information.

Data Retention

We retain your personal information only as long as necessary to provide the Service. You may request deletion of your data at any time by emailing us.

Your Rights

You have the right to:

  • Access and export your personal data
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Opt out of non-essential communications

To exercise any of these rights, email us at sumu@aluminum.app and we will respond within a reasonable timeframe.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • The right to know what personal information we collect, use, and disclose
  • The right to request deletion of your personal information
  • The right to opt out of the sale of your personal information
  • The right to non-discrimination for exercising your privacy rights

We do not sell your personal information. To exercise any of these rights, contact us at sumu@aluminum.app.

Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will promptly delete it.

Changes

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on our website.

Contact

Questions about this policy? Reach us at sumu@aluminum.app.