Privacy Policy
What Pete is
Pete the Pigeon is an AI assistant for the Ohio General Assembly — bills, votes, legislators, committees, campaign finance and lobbying — built from public records. You can use Pete four ways: the chat at petethepigeon.com, by emailing Pete, as a connector inside Claude or ChatGPT, and as the Pete the Pigeon Outlook add-in. Pete is operated by Fugio Consulting, LLC, an Ohio company. This policy covers all four.
The short version
Three rules. Anything you say to Pete is kept 30 days, then deleted automatically. The email you open in the pane is used to write the answer and is not stored. Your own account data stays until you remove it or ask us to delete it, and we complete deletion requests within 30 days. No AI model is trained on your data — not by us, and not by our providers. Pete Pro accounts run on Anthropic only, so nothing you say to Pete is kept by the model provider beyond 30 days, and a zero-retention setting is available for any office on request.
What we collect, and why
Chat and connector questions
We keep each question, Pete’s answer, the model used, how long it took, and a one-way hash of your IP address (never the raw address) for 30 days, then a daily job deletes them. If you are signed in, your account email is stored with the question for the same 30 days. We read a sample of questions and answers to check accuracy, catch abuse and improve Pete’s instructions; we never train a model on them and never share them. When you ask Pete about an open email in the pane (Ask Pete), the email’s text is sent to write the answer and is not saved with your question. Through the Claude or ChatGPT connector, Pete receives your question or the bill you ask about, your account identity and the time; identity, tool name and the first 500 characters of the request are kept 30 days in our connector log; the answer is not stored. Don’t put sensitive personal information — medical history, account numbers, government identifiers — into a question.
Email to Pete
If you email Pete we receive your address, the subject and the message, and use them to write and send a reply. Question and reply are stored; your address goes in a daily counter that limits automatic replies.
Your account
When you sign up we store your name, email, the office or organization you enter, the date, and, if a colleague shared Pete with you, which account referred you (so they receive their Query Credits). Your account has a personal connector key; the key is your login for the connector and, if you install Pete from your personal link, for the add-in.
The Pete the Pigeon Outlook add-in
The pane reads only the message you have open. Two optional tools — Sort inbox by urgency and the Email Efficiency Index — read more, only when you click them, as described below.
- When you open the pane on a message, it sends that message’s subject, body text and sender address, plus your mailbox address, to our server to write the Message summary and the Sender summary. This happens when the pane opens, not on a click.
- Draft reply sends the same fields again and returns a draft. The draft opens as an ordinary reply for you to edit and send; the add-in never sends mail.
- Constituent notes you type, and the sender summaries Pete writes, are stored on our server under your account, keyed by the sender’s address, so they appear whenever that address writes.
- Settings — your custom instructions and any response template you upload (PDF or Word) are stored under your account and used for every draft.
- Train Pete stores the emails you add with + (up to 30, each trimmed to 6,000 characters) under your account and, when you click Train, sends them once to Anthropic’s API to write your office standard. Form-letter matching compares new incoming mail to that set on our server.
- Sort inbox by urgency reads the subject and opening lines of your unread inbox mail when you click, marks each Urgent or Important, and tags those messages with ordinary Outlook categories (“Pete · Urgent”, “Pete · Important”). It lists them in the pane; a Draft button on a listed row drafts a reply for that one email and saves it to your Drafts folder for you to review. Nothing is sent by Pete.
- Pete’s Email Efficiency Index reads, when you click, the sent and created timestamps of replies in your Sent Items for the last two years — timestamps only, never the words — and computes the score in your browser. Only the totals (counts, minutes, hours, by month) are stored under your account. They are not published.
- Share Pete opens an ordinary email in your Outlook, addressed to the colleagues you choose, with share@petethepigeon.com in the BCC. You send it or you don’t. When it arrives we record that you sent it and credit your extra drafts; we keep the addresses on it only for that.
- Ask Pete, the chat circle in the pane, sends your question together with the open email’s subject, sender, text and sender card to our server so Pete can answer about it. Questions count on your daily limit like drafts and are kept 30 days like chat questions; the email text is not kept.
- Mailbox access uses a Microsoft sign-in inside the pane (Microsoft Graph with delegated permission Mail.ReadWrite, plus User.Read) that you or your administrator approves once and can revoke in your Microsoft account or admin center. The pane reads the open message automatically when you open it on a message (to write the Message summary and Sender summary) and again when you click Draft reply or Ask Pete. Sort inbox by urgency and the Efficiency Index read more, only when you click them. Its only writes are those category tags and the drafts it saves for you. It never files, moves, deletes or sends anything from your mailbox.
- Your personal install link (and the file version of it) contains your connector key. Treat it like a password; if it is shared or lost, write to us and we will issue a new key.
- Constituent notes and sender summaries describe people who did not sign up for Pete. Your office is responsible for any notice it owes constituents; we delete everything keyed to a constituent’s address on request.
Pete Pro
If you subscribe, we store the email the subscription is attached to and its status so Pete knows the account is paid. Billing is handled by Chargebee; card processing by Stripe. Fugio never sees your card number.
Usage and analytics
Our marketing pages carry Google Analytics, Google Ads, Meta Pixel and LinkedIn Insight tags. The Outlook pane, the embedded chat, this page, /terms, /support and /outlook/it carry none. A server-side purchase event can send Google Analytics and Meta a one-way hash of your email, the plan and the price when a Pete Pro subscription is created; as of this writing the two vendor keys that event needs are not set on our production service, so nothing is currently sent. The counters we keep are operational: drafts, trainings, batch runs, shares sent, referrals completed and credit balances per account, so the limits and rewards work.
What we keep, and for how long
Free accounts: Pete keeps the questions you ask, the drafts it writes and the emails it reads to write them, for the retention windows below (subject to the automatic 30-day purge that applies to conversation rows). Free chat and free Ask-Pete/draft traffic may be processed by Google’s API as well as Anthropic’s.
Pete Pro: Pro runs with zero data retention. We keep nothing. We share nothing. Pete keeps no copy of a Pro account’s emails, questions or drafts; the only things stored are what you set yourself (your instructions, templates, notes) and the encrypted sign-in that links your mailbox. Pro traffic never touches Google.
| What | Where | How long |
|---|---|---|
| Chat and Ask Pete questions, and Pete’s answers | our conversation log | 30 days, then deleted automatically |
| Connector questions (Claude, ChatGPT) — identity, tool name, first ~500 characters of the request | our connector log | 30 days; the answer is not stored |
| The email you open in the pane (subject, text, sender) — free accounts | the mailbox job/listing record under your account | kept until replaced by your next inbox listing or draft job |
| The email you open in the pane — Pete Pro / zero-retention office | held in memory while Pete writes the summary, draft or answer; not stored | seconds |
| The draft Pete writes — free accounts | the mailbox job record under your account | kept until replaced by your next draft job |
| The draft Pete writes — Pete Pro / zero-retention office | not stored; the first 600 characters appear in our application log | 30 days (hosting log) |
| Sender summaries, constituent notes, your Train Pete set, templates, settings, Efficiency Index totals | under your account | until you remove them or ask us to delete them; deletion completed within 30 days |
| Account: name, email, office, sign-up date, who referred you | under your account | while the account exists; deleted within 30 days of your request |
| Daily counters (drafts, questions, shares, referrals, credits) | operational counters | per-day rows deleted after 7 days; balances while the account exists |
| Addresses Pete looks up to find a constituent’s district | lookup cache | 30 days |
| Email you send to Pete’s address, and Pete’s reply | our form-reply cache; Resend | Resend deletes the email itself after 30 days; our own cache of the question and answer (no address kept) is purged after 30 days |
| Pete Pro billing record | Chargebee and Stripe | see the table below |
| Application logs | Railway | 30 days |
| Pete Pro accounts, and any zero-retention office (on request) | our conversation log, connector log, and mailbox job/listing records | question text, answers, drafts and email are never written; counts and timestamps only |
Retention
One rule for what you say to Pete: 30 days. A daily job deletes conversation rows older than 30 days. The email itself is not stored. Your account data is kept while you keep the account; ask and we delete it within 30 days. Our hosting provider keeps application logs for 30 days.
Where your data goes
| Service | What it receives | Why | How long they keep it |
|---|---|---|---|
| Anthropic (Claude) | Pete Pro accounts: every chat answer, plus drafts, summaries, Train Pete and email replies for all accounts | writes the answer | not retained by default for the models Pete uses; deleted within 30 days in every case; never used to train models. DPA · subprocessors |
| Google (Gemini API, paid tier) | free accounts only: chat questions at petethepigeon.com and Ask Pete in the pane, including the open email’s text. Pete Pro traffic never touches Google, in either direction. | writes chat answers | not used to train models; prompts and responses logged for 55 days for abuse monitoring (ai.google.dev) |
| Railway | runs Pete’s servers, databases and application logs | hosting | logs 30 days; SOC 2 Type II; DPA |
| Resend | mail to and from Pete’s own address (not the pane) | sending and receiving email | 30 days; SOC 2 Type II; DPA |
| Microsoft | the pane loads Office.js from Microsoft; mailbox reads and writes go from your browser to your own mailbox through Microsoft Graph | the add-in runs | your mailbox stays in your Microsoft tenant; Microsoft’s DPA applies |
| Chargebee and Stripe | name, email, subscription status; card details go to Stripe only — Fugio never sees your card number | Pete Pro billing | Chargebee erases account data 120 days after cancellation; Stripe keeps it for as long as it provides the service plus its legal obligations; both PCI DSS Level 1 and SOC 2 Type II |
| Google Analytics, Google Ads, Meta, LinkedIn | visits to our marketing pages (never the pane, the embedded chat, this page, /terms, /support or /outlook/it) — plus, when a Pete Pro subscription is created, a one-way hash of your email, the plan and the price sent to Google Analytics and Meta to measure the purchase (not yet active on our production service — the two vendor keys it needs are not set) | measuring marketing | per their policies |
| Google Fonts | your IP address when the chat page loads a font | fonts | Google’s policy |
We do not sell personal information and do not share it outside the services listed here.
Your choices
- Don’t want a message read by Pete? Don’t open the pane on it. Sort inbox by urgency reads unread mail only when you click it.
- Remove anything from your training set with −; clear notes by deleting the text and saving.
- An administrator can remove the add-in for a whole organization from the Microsoft 365 admin center.
- Cancel Pete Pro at any time; access continues to the end of the paid period.
- Ask for a copy, or deletion, of everything tied to your address — or to a constituent’s address — at hello@petethepigeon.com. We complete deletion within 30 days.
- An office administrator may ask for the export, transfer or deletion of a departed staff member’s account data.
Children
Pete is not directed at children under 13. Constituent mail may come from anyone; we do not knowingly build profiles of children and delete such data on request.
Changes
We may update this policy. Changes are posted here with a new date; material changes to how the add-in handles your email are described here before they take effect.
Contact
Fugio Consulting, LLC
Email: hello@petethepigeon.com
See also our Terms of Service and support page.