You are storing notes about real colleagues.
That deserves to be handled carefully, and described plainly. This page explains what Atturel stores, what it does with it, and what it will never do.
Draft. This describes the product’s actual behavior accurately, but it has not yet been reviewed by a lawyer and is not a final legal document.
What you store
Atturel holds a private working record of the people you interact with professionally: their name and role, notes you write, observations about how it is to work with them, interactions you log, commitments between you, and links to public sources you have added.
It also holds your own account details and your Interaction Profile, which is built from answers you give.
Who can see it
Only you. Every record is scoped to your account at the database level using row level security, so access is enforced by the database rather than by application code remembering to filter.
Atturel does not show your record to the people it describes, and it is not shared with other users. If team workspaces are introduced, sharing will always be an explicit act — your private notes stay private by default.
What we do with it
Your record is used to prepare you for your own conversations: meeting briefs, message adaptation, and answering questions you ask about your own relationships. That is the entire purpose.
When a language model is used, only the specific, bounded context needed for that task is sent — not your whole record. Your content is not used to train a shared model, and product analytics deliberately record only counts and enum values, never names, notes or message bodies.
Public research
When you research someone’s public professional footprint, Atturel reads legitimate publicly accessible material — company biographies, conference pages, articles, interviews — and records what it found along with a link to the source.
It does not bypass logins, paywalls or access controls, and it does not scrape platforms whose terms prohibit it. Every extracted fact carries the source it came from, so you can check it and remove it.
Research is limited to professional context. Atturel does not collect or surface information about family, relationships, home address, health, religion, politics, or anything else about a person’s private life, and it ignores such material if it appears in a source.
What it will never infer
Atturel does not infer or record race, ethnicity, religion, sexual orientation, gender identity, medical conditions, disability, mental health, pregnancy, age, political affiliation, union membership, immigration status or criminal history — about anyone.
It also does not produce hiring, firing, promotion or compensation recommendations, or score anyone’s suitability for a role.
AI-generated content is labeled
Every claim about a person carries an evidence level: confirmed, observed, inferred, or unknown. Guidance shows the records it was built from. Where output was composed deterministically rather than generated by a model, the interface says so.
Nothing an AI proposes about a person enters your relationship record until you explicitly accept it.
Voice recordings
When you record a conversation or a voice note, the audio is sent to a speech-to-text service to be turned into words, and the audio is then deleted. It is never added to your record. A long recording is uploaded in parts to private, temporary storage that only Atturel’s servers can read; each part is deleted as soon as it has been transcribed, and anything left behind is removed within about a day. What you keep is the text, which you review and can edit or delete.
Before recording other people, you confirm they know. Recording happens only while the app is open on screen.
Payments
Payments are handled by Stripe. Atturel never receives or stores your card number. We keep what is needed to run your plan: its status, the period it covers, and the identifiers that link your account to your Stripe customer record.
If you delete your account, a minimal billing record is kept so a billing question can still be answered: that an account was deleted, when, which plan it was on, and what was done to stop its billing. It contains none of your relationship record. Stripe keeps its own records of past payments, as payment processors are required to.
Service providers
Atturel runs on a small number of providers, each used only for the job named here:
- Supabase — database, sign-in and file storage
- Vercel — hosting the application
- OpenAI — the language model behind briefs, reading conversations and answering questions, and speech-to-text. Only the bounded context a task needs is sent.
- Exa — finding public professional material when you research someone
- Resend — sending account and product email
- Stripe — payments
- Google and Microsoft — reading your calendar, only if you connect one
Your control
You can, at any time and without contacting anyone:
- Edit or delete any observation, note, person or source
- Mark a source as the wrong person, which removes what it supported
- Export everything you have stored as JSON
- Delete your account and destroy the entire record, from the web or inside the iPhone app. A paid plan billed on the web is cancelled first, so you are not charged again.
Deleting a source removes any fact that had no other supporting evidence. Observations you personally confirmed are kept, because you vouched for them.
Contact
Privacy questions: privacy@atturel.com. Anything else: support@atturel.com.
Atturel Labs. Last updated 2026-08-24.