Trust

What Pete does with your data, provable, live. Last updated September 9, 2026.

What we promise

Anything you say to Pete is deleted after 30 days (free accounts).
Free-account mailbox drafts and the emails they answer are kept under your account until your next inbox listing or draft job; Pete Pro / a zero-retention office never has them stored at all.
Deletion requests are completed within 30 days.
No AI model is trained on your data.
Pro runs with zero data retention. We keep nothing. We share nothing. Pete keeps no copy of your emails, questions or drafts; the only things stored are what you set yourself (your instructions, templates, notes) and the encrypted sign-in that links your mailbox. Pro traffic never touches Google.

Proof, live

…Questions stored right now

…Oldest stored question

…Rows deleted, last sweep

…Last sweep ran

Loading live numbers…

Where your data goes

Service	What it receives	Why	How long they keep it
Anthropic (Claude)	Pete Pro accounts: every chat answer, plus drafts, summaries, Train Pete and email replies for all accounts	writes the answer	not retained by default for the models Pete uses; deleted within 30 days in every case; never used to train models. DPA · subprocessors
Google (Gemini API, paid tier)	free accounts only: chat questions at petethepigeon.com and Ask Pete in the pane, including the open email’s text. Pete Pro traffic never touches Google, in either direction.	writes chat answers	not used to train models; prompts and responses logged for 55 days for abuse monitoring (ai.google.dev)
Google Cloud	runs Pete’s server, databases and application logs on a single virtual machine in Google’s Ohio region (us-east5)	hosting	the data stays on our own disk; Google does not read it; SOC 2 Type II; DPA
Google Drive	a nightly encrypted-in-transit copy of our databases	backup	we delete each copy after 30 days; DPA
Resend	mail to and from Pete’s own address (not the pane)	sending and receiving email	30 days; SOC 2 Type II; DPA
Microsoft	the pane loads Office.js from Microsoft; mailbox reads and writes go from your browser to your own mailbox through Microsoft Graph	the add-in runs	your mailbox stays in your Microsoft tenant; Microsoft’s DPA applies
Chargebee and Stripe	name, email, subscription status; card details go to Stripe only — Fugio never sees your card number	Pete Pro billing	Chargebee erases account data 120 days after cancellation; Stripe keeps it for as long as it provides the service plus its legal obligations; both PCI DSS Level 1 and SOC 2 Type II
Google Analytics, Google Ads, Meta, LinkedIn	visits to our marketing pages (never the pane, the embedded chat, this page, /terms, /support or /outlook/it) — plus, when a Pete Pro subscription is created, a one-way hash of your email, the plan and the price sent to Google Analytics and Meta to measure the purchase (not yet active on our production service — the two vendor keys it needs are not set)	measuring marketing	per their policies
Google Fonts	your IP address when the chat page loads a font	fonts	Google’s policy

We do not sell personal information and do not share it outside the services listed here.

Agreements and certifications

Our vendors

Google Cloud — SOC 2 Type II, SOC 3 and ISO 27001 (cloud.google.com/security/compliance/soc-2)
Resend — SOC 2 Type II (resend.com/security/soc-2)
Anthropic — trust center at trust.anthropic.com
Chargebee and Stripe — PCI DSS Level 1 and SOC 2 Type II

Ours

Data Processing Addendum (draft for counsel review): /trust/dpa
Security questionnaire, pre-filled: /trust/security-questionnaire
SOC 2: not yet; planned
Microsoft 365 App Compliance Program: Publisher Attestation in progress

Change log

2026-10-14 — Hosting named correctly (Google Cloud, Ohio region, replacing Railway since 2026-09-18), the nightly Google Drive backup and its 30-day deletion disclosed, and the Pete Pro zero-retention commitment stated up front with the pilot activation rule.
2026-09-08 — Retention truth pass: 30-day purge, email context taken out of the log, an erase tool, a zero-retention setting, Pete Pro moved to Anthropic, trackers turned off on policy pages, corrected IT and support pages.
2026-09-09 — This page, and the live numbers on it.

Ask

For deletion, export, or the pre-filled security questionnaire, write hello@petethepigeon.com. We complete requests within 30 days.