Privacy Policy Last updated: 2026-06-16 What we store and what we share depends on which privacy tier you use per chat. For a plain-language breakdown of the three tiers (Standard, Privacy, Ephemeral) see our Privacy Tiers page. The sections below cover the policy that applies to all tiers. What we collect When you use Routabout we store your email address, account credentials, conversations you create, and any usage data needed to bill you for paid models and operate the service (token counts, model selection, timestamps).
When you submit a query to a free, external provider , the text of that query is sent to that provider per their own terms. We do not inject behavioral data or other Cabildo-held information into those requests. When you submit a query to our in-house model, the request routes to our contracted provider (Mistral la Plateforme, EU) under a contract prohibiting training on your data and limiting any data retention to abuse-prevention obligations required by applicable law. It does not reach any frontier AI provider.
What we do with it Your conversations are used to deliver replies, persist your history, and as a core feature of the Service, provide context retrieval and continuity across your sessions. We use your data to operate the Service and, as described under Behavioral signals, to personalize content, recommendations, and advertising within Cabildo's own services. We may also use conversation data from Standard and Privacy (In-House) mode sessions to train, evaluate, and improve our AI systems, including Dudley. This training uses abstracted behavioral patterns and quality signals — not raw conversation content.
Ephemeral mode sessions are never used for training; no record is retained after processing completes. We do not sell your personal information. How you use the Service also produces behavioral signal (features used, interaction patterns), which we write to a shared internal profile across Cabildo's products (Routabout, Cour, Portage) so they can work together for you. This signal is never injected into a prompt sent to an external AI provider.
Actionable Intel, Cabildo's audience-modeling function, uses de-identified signal to help Cabildo's products work together and personalize the content, recommendations, and advertising you see within Cabildo's own services. Cabildo runs its own ad server, so advertisers describe an audience and receive only aggregate results — they never see you, your profile, your conversations, your IP, or any identifier. We do not run real-time bidding, third-party ad networks (such as AdSense), or third-party trackers, and we never sell your individual data or share it with data brokers. The only thing that can leave Cabildo for outside use is an aggregate, de-identified audience (no group smaller than 100), and only with your consent — and you share in that revenue through your Cabildo wallet.
These external uses are not active today; before we enable any, we will add an in-product consent control and the required notices. For access or deletion requests, contact privacy@routabout.ai. Voice input When you record audio in the app, the recording is sent to our contracted transcription provider (Voxtral via Mistral la Plateforme, EU). We do not retain raw audio after transcription completes.
Image attachments Images you attach are sent to the model you select. If you use a third-party vision model, the image is processed under that provider's terms. Email Services When you use Email Dudley, Routabout processes the email thread content delivered to dudley@routabout.ai to generate a reply. This includes the text of the triggering message and prior thread context visible in the email payload.
When a message triggering a Dudley session is authored by someone who is not a Routabout account holder, Routabout sends that person a one-time notice before reading the content of their message. They may opt in (allowing Dudley to read their messages in that and future sessions) or opt out (Dudley will not read or respond to their messages). If a non-subscriber's prior messages appear as quoted or forwarded content within a thread, Dudley may read those messages as context when a Routabout account holder or another opted-in participant sends the triggering message. The opt-in gate applies to the triggering sender.
Non-subscribers whose messages appear only as quoted history in a thread do not receive a separate notice for that processing. If you do not wish your email messages to be processed in this way, you may opt out globally using the signed link in any Dudley reply sent to your address, or by contacting privacy@routabout.ai. Email thread content — including content authored by account holders and non-subscribers — is not written to Routabout's own databases after the reply is generated. The following metadata is retained for billing, fraud prevention, and legal compliance purposes, for the period required by applicable law and no longer than necessary: message identifier, thread reference headers, recipient count, question count, and cost.
No email body text, triggering message content, or prior thread context is persisted. Email thread content passes through the following sub-processors: Postmark (inbound message delivery and outbound sending), which retains message content in its Activity feed for 45 days pursuant to Postmark's standard retention policy; and Mistral AI via la Plateforme, which processes content pursuant to Mistral's contractual no-training, no-retention API terms. Email thread content is not used to train Routabout's models. If this policy changes for account holders whose email sessions would be affected, we will notify them before the change takes effect.
Any email recipient may opt out at thread scope or globally at any time using the signed links in Dudley's signature, or through account settings. We process opt-out requests promptly; requests are applied to future communications. Data retention Conversations and balances are retained while your account is active. Audit records and per-query transaction records are retained for up to seven years to satisfy accounting and abuse-prevention obligations.
When you delete your account, the identifier in those records is decoupled from your auth identity and is not designed to be reattached to a named individual after deletion. Sub-processors We share data with third parties only as necessary to operate the service: • Supabase (auth, database hosting) • Railway (backend hosting) • Mistral AI, la Plateforme (in-house model serving and transcription — EU data residency, no-training contract) • Stripe (payment processing) • Postmark (Email Services — inbound email delivery and outbound sending; 45-day Activity feed retention per Postmark's standard policy) • AI model providers — the specific providers depend on which model you select; only your submitted query content is sent, no Cabildo-held behavioral data. Current list: routabout.ai/legal/providers Children Routabout is not directed at children under 13. We do not knowingly collect personal information from anyone under 13.
Your rights Depending on where you live, you may have rights under GDPR (EU/UK), CCPA (California), or comparable laws — including the right to access, correct, port, or delete your personal data. You can delete your account at any time from Settings → Danger zone. For data export, correction, or other privacy requests, contact privacy@routabout.ai. Changes to this policy We will notify you of material changes by email or in-app banner.
Continued use after a change constitutes acceptance. Contact Cabildo Companies LLC privacy@routabout.ai Placeholder copy — finalize with counsel before public launch.