Pedro Privacy Policy

1. Scope and who is responsible

This Privacy Policy applies to the Pedro website, Web application, Desktop application when available, Pedro API, Accounts, Organizations, Workspaces, plans and billing, Pedro Assistant, support, and other Pedro-operated services that link to this policy (together, the “Pedro Services”).

The Pedro Services are operated by AppSage LLC, 1309 Coffeen Avenue, STE 1200, Sheridan, Wyoming 82801, United States, which is responsible for them. “Pedro,” “we,” “us,” and “our” refer to AppSage LLC. Contact us about privacy at contact@pedrohq.com.

2. Information Pedro handles

• Website and security information: IP address, requested page, browser or device information, timestamps, and delivery or security metadata handled by hosting and security providers.
• Website analytics: pages visited, links clicked including Start free, campaign tags, approximate location (country and city), device and browser type, page loading speed, and recordings of how pages are used, with typed text masked. Collected only outside countries that ask first and only when your browser sends no privacy signal. Your IP address is discarded after the location is derived.
• Browser and authentication state: your theme preference, a temporary pending sign-in email, and authentication or session information used by Google Identity Platform.
• Former waitlist information: if you joined Pedro’s former waitlist, your email address, an optional answer about what you want Pedro to help with, and form metadata processed through Tally.
• Account information: email address, authentication subject, Pedro Account identifier, the name Pedro calls you by which you type and can change and which may be filled in from your Google profile, and creation or update timestamps.
• Organization and Workspace information: Organization and Workspace identifiers, membership, metadata, what you tell Pedro while setting up a Workspace, and timestamps.
• Plan and billing information: your Organization’s plan, credit balance, credit use, and purchase and subscription records. Paddle collects and processes your payment details; Pedro does not receive your full card number.
• Assistant information: prompts, selected prior conversation context, generated responses, conversation and message identifiers, previews, relationships, status or failure information, and timestamps.
• Assistant operations: model identity, token counts, estimated list cost, timing, rate-limit information, and failure evidence needed to operate the service.
• Communications: your email address, message, and response history when you contact Pedro.

3. How Pedro uses information

Pedro uses information to:

• deliver, secure, maintain, and troubleshoot the Pedro Services;
• send and complete email-link authentication and establish an Account;
• authorize access to Organizations and Workspaces;
• manage plans, credits, usage limits, and billing;
• store and restore Workspace-scoped conversations;
• send the context needed for a requested response to the current model provider;
• apply size, rate, deadline, security, and abuse controls;
• contact people who joined the former waitlist about access to Pedro; and
• respond to support, privacy, safety, and legal requests.

4. Pedro Assistant and AI processing

Pedro Assistant uses artificial intelligence and can make mistakes. When you ask Pedro for a response, Pedro sends your current prompt and a bounded selection of prior conversation exchanges to Anthropic (Claude) and, when Claude cannot answer, to Google Vertex AI. Processing may use a global provider endpoint. Pedro stores the conversation separately in its authoritative PostgreSQL database so the conversation can continue across sessions.

Do not submit information you are not authorized to use. Do not rely on Pedro as a substitute for professional medical advice or without independent review for important legal, financial, employment, safety, or other consequential decisions.

5. Providers and disclosures

Pedro relies on service providers to operate parts of the Pedro Services. Current providers may include Cloudflare for public delivery and protection; Google Cloud for application hosting, identity, databases, logs, and AI processing; Anthropic for AI processing; Paddle, our reseller and Merchant of Record, for checkout, payments, taxes, invoices, and refunds; PostHog (United States) for website analytics, reached through a Pedro subdomain; Tally for the former waitlist form; and email providers for authentication and support communications. These providers process information for their respective service functions and under their applicable agreements.

Pedro may also disclose information when required by law, to protect people or the Pedro Services, to investigate misuse, or in connection with a reorganization or transfer of the service, subject to applicable law.

6. International processing

Pedro and its providers may process information outside your country. The location depends on the service, provider, and environment involved. Pedro does not promise that all processing remains in one country or region.

7. Retention and deletion

Pedro keeps information for as long as reasonably necessary to provide and secure the Pedro Services, manage the relationship, meet legal obligations, resolve disputes, and enforce agreements. The period depends on the category and context. Former waitlist entries are kept until removal is requested, subject to provider recovery copies. Purchase and billing records are kept as long as tax and accounting law requires. Website analytics are kept for PostHog's standard retention, up to seven years. Account, Workspace, and conversation information is currently retained in Pedro’s database; self-service Account deletion and export are not yet available.

Backups, security records, provider records, and versioned Terms-acceptance evidence may remain for a limited period after active information is removed or for longer when preservation is required by law. Signing out does not delete an Account or its content. To request deletion or removal from the former waitlist, contact us.

8. Security

Pedro uses measures including verified email authentication, encrypted transport, Server-side authorization, Workspace-scoped data access, and limited provider credentials. No system or transmission method is perfectly secure, and Pedro cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection; withdraw consent where processing relies on consent; and complain to a competent authority. Pedro may need to verify your identity before acting on a request. Contact contact@pedrohq.com to make a request or to be removed from the former waitlist. You can turn website analytics off at any time under Your privacy choices above.

10. Cookies, local storage, and similar technologies

The website may store pedro-theme in your browser to remember the selected theme. Where website analytics run, PostHog sets a ph_-prefixed cookie and browser storage to measure visits; turning tracking off removes them and storespedro-tracking to remember your choice. The application may temporarily store a pending sign-in email so an email link can be completed in the same browser, and Google Identity Platform maintains authentication or session state. You can clear browser storage through your browser settings, although doing so may sign you out or remove preferences.

11. Age requirement

Pedro is intended only for people who are at least 18 years old. Do not use Pedro or submit personal information if you are under 18.

12. Changes and contact

Pedro may update this policy as the Pedro Services and applicable requirements change. The effective date and version identify the current policy. Material changes will receive notice appropriate to the change and available contact information.

For privacy questions or requests, email contact@pedrohq.com.