Maestro
Privacy Policy
Maestro, on the web and for iPhone. Effective September 10, 2026.
Maestro reads your email in order to tell you who is worth writing to. That is the whole product, and it means Maestro holds more of your private correspondence than most apps ever see. This page says exactly what it holds, where it goes, and what it never does.
The short version
Your contacts and your correspondence are stored on our server so Maestro can reason about them. Message text is sent to Anthropic's Claude when, and only when, Maestro is drafting or reading a thread on your behalf. Maestro never sends a message for you. It writes drafts; you send them yourself, from your own account. We do not sell anything, share anything for advertising, or use your correspondence to train any model.
Your account
An email address and a password, which is stored only as a bcrypt hash and cannot be read back. A display name, your timezone, and the short profile you write about your work, which is what lets drafts sound like you.
Your contacts
Whatever you import or type: names, email addresses, phone numbers, organisations, your own notes, and any research Maestro has gathered about them from public web pages. If you import from Google Sheets, we read the sheet you name and nothing else.
Your email
You connect Gmail with an app-specific password, which is stored encrypted at rest with AES-256-GCM. Maestro uses it to read the threads between you and the people in your contact list, and to save drafts into your own Gmail drafts folder.
What Maestro stores from those threads: the sender, the date, the subject, and the full text of the message. It needs the text because the answer to "who should I write to today" is usually a question somebody asked you three weeks ago.
Two things it reads more widely than it stores. It scans the sender addresses and dates across your inbox and your priority labels, so it can notice which threads have gone active; it keeps the addresses and dates only, and only for people already in your book. And if you ask it to import from a Gmail label, it reads the messages under that label to find the people on them. Full message text is stored only for people in your contact list, and mail with everybody else is not kept.
Maestro reads and writes drafts. It does not send mail, delete mail, or change anything else in your mailbox. You can revoke its access at any moment from your Google account's app password page, without asking us.
WhatsApp messages live in a database on your own computer and are never uploaded. If you use the optional command-line sync, what leaves your machine is metadata only: which contact, which direction, when, and a one-word classification. Never the text. The one narrow exception is a message the classifier reads as a job offer, where a single generated line naming the work comes with it, capped in length, so the app can say what was offered instead of showing a name with no explanation.
The consequence is that Maestro cannot tell you what a WhatsApp message said. It shows you when one arrived and sends you to WhatsApp to read it.
Where your text goes
Maestro uses Anthropic's Claude to draft messages, to judge which threads are waiting on a reply, and to summarise what a contact is about. Doing that means sending the relevant correspondence to Anthropic's API. It happens when you ask for a draft, and on the scheduled pass that builds your weekly list.
Anthropic states that it does not train its models on data submitted through its API. We do not train anything on your data either, and we do not read your correspondence except when you ask us to look at a problem you have reported.
The people we rely on
- Anthropic processes message text for drafting and judgement, as above.
- Railway hosts the application and the PostgreSQL database it stores everything in.
- Google holds your mail; Maestro reads it over IMAP with the app password you provide.
- Resend delivers the weekly email, if you have it switched on.
- Stripe handles payment. Card details go to Stripe and never touch our server.
- Apple delivers push notifications to the iPhone app. See below.
Nobody on that list is an advertiser or a data broker, and none of them receives your information for any purpose other than the one named.
Notifications
The current release of the iPhone app sends no push notifications and asks for no notification permission.
When the daily nudge is switched on, the app will register a device token with our server and we will use it to send one notification a day. A notification names a person and says why they are waiting, so that sentence passes through Apple's push service on its way to your phone, as every iOS notification does. You can turn notifications off in the app or in iOS Settings, and no notification is sent on a day you have already written to somebody.
What we measure
Maestro records how many model tokens your account uses each month, so we can bill correctly and see what a plan actually costs. It records the times its own notifications were sent and whether a message went out afterwards, which is how we work out what time of day is worth interrupting somebody. There are no analytics frameworks, no advertising SDKs, and no third-party trackers anywhere in the app or the website.
Keeping and deleting
We keep your data for as long as your account exists, because the product is a record of relationships over years and a slate built from six months of memory is a worse slate. Email [email protected] to have your account and everything in it deleted, and we will do it and confirm. Disconnecting Gmail stops any further reading immediately.
Security
Credentials you give us, including the Gmail app password and any model API key of your own, are encrypted at rest with AES-256-GCM. Everything travels over TLS. Your account password is stored only as a bcrypt hash. No system is perfect, and we will tell you promptly if we ever have reason to believe your data has been exposed.
Children
Maestro is a tool for professional correspondence and is not directed at children. We do not knowingly collect information from anyone under 13.
Changes
If this policy changes, the new version is posted at this address with a new effective date. If a change materially widens what we do with your correspondence, we will email you before it takes effect.
Contact
Questions, or a deletion request: [email protected]
Impulse Arc LLC