Privacy policy

Last updated 2026-11-05

Sub is a service of Sup AI Labs, Inc. ("we", "us"), 111 Lena Way, Suite 3319, Mountain View, CA 94040, US. Sub provides AI employees ("subs"): AI assistants that work for an organization, each with its own name and email address; a sub can also have its own phone number. Subs are AI, not people.

This policy explains what we collect, how we use it, and the choices you have. Write to us at support@sub.ad.

What we collect

• Account information: the name and email address of each member of an organization, and the role they have there; once they sign in to Sub with Google, their Google account identifier; any other email address they add, and whether they confirmed it; their sign-in sessions, with the browser they used; and a record of what they do in Sub, such as approving work or changing a sub's settings.
• What people send to a sub, and what it sends: chat messages and emails, with their date and time, the sender's and recipients' addresses, and their attachments; and text messages to and from a sub's own number, with their date and time and the numbers they come from and go to.
• Voice calls: when a member calls a sub by voice in chat, what each of them said, as written down during the call, which Sub saves in the conversation as chat messages; and a record of the call: who called which sub, when, for how long, and what it cost. Sub keeps no recording of a call's audio or video.
• A sub's work: its notes, its tasks and their results, the commands it runs and what they print (also on a person's own computer, when that person has it help there), screenshots of its computer, and the files and code it works on.
• Contacts: the people a sub works with, as it records them: their name, email address, and any phone numbers a member links to them; what it learns about them (such as their organization, role, language, preferred channel, and time zone); and where each fact came from.
• Phone numbers: a member's mobile number once they enter it in Sub, and whether they confirmed it; the numbers that text a sub; and the numbers of people whom a sub texts.
• Consent and opt-out records: the consent records Sub writes when a member asks its phone form for a verification code (the member, the number, when, how, the exact wording of the box they checked, and what each covers: the verification codes that confirm the number, or the texts their organization's subs write to them); when a member confirmed their mobile number in Sub, which is their agreement to those texts; and each opt-out: a STOP or a word like it texted to a sub's number, and any opt-out our texting carrier reports when it refuses a text or fails to deliver it.
• Phone calls: when a member calls a sub's number, or a sub calls a member or another number for a member who directs it, what each side said, as written down during the call, which Sub saves in Sub; and a record of the call: the numbers, when, for how long, and what it cost; and of any other call to a sub's number, a record of it, with all or part of the caller's number. Sub keeps no recording of a call's audio.
• Calls consent records: when a member checks the box to get calls beside their mobile number in Sub, or turns calls on or off there, a record of it: the member, the number, when, the exact wording of the box, and how calls were turned off (in Sub, on a call, by a STOP texted from the number where the box's wording said a STOP stops calls, or when the number or the member's membership was removed); and when someone on a call asks to stop calls, or calls and texts, from Sub's AI employees, a record of it: the number, when, and the call.
• Usage and cost records: what each sub did, what its work cost, and the spending limits its organization set.

How we use it

• To run the service: a sub reads the messages it receives and answers those the sections below allow, does the work it was given, and keeps a record of it for its organization.
• To text a verification code to a number a member enters in Sub, and to text members who agreed to texts from their organization's subs, from a sub's own number.
• To call, from a sub's own number, a member or another number for a member who directs the sub, but never a number whose calls were turned off in Sub or that asked on a call to stop calls. What is said on such a call is transcribed and saved in Sub.
• To keep the service secure, to keep each organization's spending within the limits it set, and to meet legal duties.

Text messages

• We do not share, sell, or rent mobile phone numbers, or text-messaging opt-in data and consent, with any third parties or affiliates for marketing or promotional purposes.
• Text-messaging opt-in data and consent are never sold, rented, or shared with third parties or affiliates for marketing. We give them only to the service providers below, only to run Sub, with one exception: proof of a person's consent goes to our texting carrier or to phone carriers when they ask for it.
• Message frequency varies.
• Message and data rates may apply.
• Reply STOP to a sub's number to stop texts from that number, or HELP for help. See how texting works.
• A member can also remove their number in Sub (Your account → Mobile number), and texts to it stop at once.

Who else processes it

We use these service providers to run Sub. Each handles personal information to provide its service, under its own terms. Where those terms also let a provider use what it handles for purposes of its own, its entry names them:

• Sign-in: Google, when a person signs in with their Google account. Google handles the sign-in under its own privacy policy, among other things to keep its services safe, and says it does not use information or activity from Sign in with Google for ads or any other Google product.
• AI models: our AI model provider's models, through a cloud provider, which write a sub's replies and do its work. The cloud provider says that what Sub sends those models, and what they answer, is not used to improve the models and is not shared with any model provider; for some models, its terms say it may keep that for up to 30 days, only to detect abuse. What the cloud provider says does not cover that AI model provider's coding tool, which a sub uses on its own computer for coding, reviews, research, and long reading (which can include the messages and files it works on), signed in to the account with that provider set up on that computer. That provider handles those sessions under that account's terms and settings, including whether they may be used to improve its models; Sub neither sets nor checks those settings, or whose account it is.
• Voice calls: our speech and video AI provider, which hears what a member says on a voice call with a sub (their microphone's audio only), with the sub's instructions and the conversation's recent messages; writes down what both say; and produces the sub's spoken answers and, when the sub appears as an avatar, its video. It may keep what a call sends it and its answers, audio and video included, for up to 24 hours, so that a call can carry on after a lost connection and answers come faster, and it may log what a call sends it to detect abuse of its service.
• Memory: our memory provider, which keeps a searchable copy of a sub's records so that it can remember its work. To run its service, it keeps what Sub sends it until that is deleted. It has told us that it never uses customer data to train models; that is its statement to us, not part of its terms or of a separate agreement with us. Its privacy policy also lets it use personal information for purposes of its own, among them internal research, and use what it learns about how its service is used to improve it.
• Email: our email provider, which hosts each sub's mailbox and sends and receives its email. Under its terms, our email provider may also use those emails for purposes of its own, among them developing and training its AI models.
• Text messages: our texting carrier, which sends and receives a sub's text messages and the verification codes Sub texts. Our texting carrier checks texts for spam and fraud, including by automated inspection of the numbers they come from and of their content, and its privacy policy says it may also act as a controller of the information about the texts it carries (such as the numbers they go between, and when) for purposes of its own.
• Phone calls: our texting carrier also carries the calls to and from a sub's number, and speaks Sub's fixed greeting on them, and, as for texts, its privacy policy says it may also act as a controller of the information about the calls it carries (such as the numbers they go between, and when) for purposes of its own; our speech and video AI provider hears what is said on such a call, by whoever is on it, and writes it down, as on a voice call in chat (its entry above).
• A phone number we no longer use: our previous texting carrier still holds a phone number a sub used before its current one, until we release it there. Texts and calls to that number reach that carrier, which keeps its own record of them under its terms; Sub keeps nothing they say, answers none of them, and sends no texts through it.
• Computers: our provider of subs' computers, which runs a sub's own computer, where it keeps its working files.
• Code: our code hosting provider, which hosts the code repositories a sub works in. Under its terms, which depend on the plan of the account that owns a repository, our code hosting provider also uses what it hosts for some purposes of its own: it scans repositories for malware, known vulnerabilities, and abuse; it and its affiliates may train AI models on what is in public repositories; and it may train its AI features on private repository content given to one of them.
• Hosting and storage: our hosting provider, which runs Sub and its database, and our storage provider, which stores files, attachments, and backups. Our hosting provider is also an independent controller of the usage data it collects while it runs Sub, such as activity logs and where each connection comes from and goes to, for some purposes of its own, among them detecting fraud, security incidents, and misuse, and maintaining its service.

A list of our service providers is available on request: support@sub.ad.

We do not sell personal information.

Who sees it inside Sub

Inside an organization, a sub's email and text messages can be read only by the people who direct that sub (the organization's owners and administrators, and the sub's designated manager) and by the sub it reports to, if another sub hired it. Every member of the organization can see the records a sub keeps of its work, such as its notes, the results of its tasks, and its requests for help, and those can quote a message. No one outside the organization can open any of it in Sub, except those who operate Sub for us, who can reach every record when they run and support the service.

Keeping and deleting

We keep records until they are deleted, so that subs can remember their work, and nothing deletes an organization's records when it stops using Sub. Messages, emails, notes, contacts, and the records of what members and subs do in Sub have no automatic retention period, with two exceptions:

• The images of screenshots of a sub's computer are deleted after 7 days. The record that each was taken, with its caption, stays. On a sub's own computer, each of its browser tools keeps the last 20 page images it took.
• When a sub runs a command on a person's own computer, the output kept with that command is erased 30 days after the command finished. The command itself stays, and the record of the sub's work keeps the first 4,000 characters of each result the sub got back, with no end date.

A person who directs a sub can have it forget a message it keeps in its memory, such as a chat message or an email. Sub then replaces the message's text in its records with a removal note at once, and clears the copies it made of it in the sub's memory and in Sub's file storage, retrying until that is done, at least once a day (a file keeps its name). Other copies remain:

• Sub's backups made before the removal keep the message, and copies of its attachment files, until those backups are deleted. A deleted backup stays as an older version for at least 35 more days, until our storage provider erases it, unless that version is deleted sooner. Our database host's own backups, if turned on, keep it on their schedule.
• Our email provider keeps its copy until it is deleted there, and the people who received the message keep theirs. Our email provider's terms say some copies may remain after a deletion there, and give it a perpetual, irrevocable license to use emails for purposes of its own (see its entry above). Our texting carrier keeps its own copy of the texts a sub's number sends or receives, and of the information about them, for as long as its privacy policy says it reasonably needs them; it names no fixed period.
• What a sub wrote about it in its own words stays, apart from notes that rest on that message alone, and so do some records of its earlier work that hold it word for word, such as its coding sessions; what those sessions sent our AI model provider stays under the terms of the account with that provider set up on its computer.
• What was said on a voice call, and the recent messages a call sent it, may stay with our speech and video AI provider for up to 24 hours, and in what it logs to detect abuse for as long as it keeps that log; it names no period (see its entry above).
• Files a sub saved or wrote on its own computer, such as an attachment it saved there, or committed to a code repository, stay there.

To ask for access to, correction of, or deletion of your information, write to support@sub.ad.

Children

Sub is for businesses and is not directed to children under 13.

Changes

We post any change here, with a new date.