Privacy

Draft for the owner's review. Last updated 20 October 2026.

What StayPuller is

StayPuller keeps your files in step across your devices. Your files live in your Storage Pod: storage that you own, such as a private GitHub repository or your Dropbox. They are not stored by StayPuller.

What we store

• Account: your name and email address, a salted hash of your password (we never keep the password itself), and, only if you add one, your mobile number. Your name appears beside your email in the messages we send for you and on the pages of people you share with. We don't send anything to your mobile number today; it is kept for sharing files by text message, which is not available yet, and we'll ask before using it.
• Devices: the name and type of each device you sign in, when it was last used, and a hash of its sign-in token.
• Dropbox connection: the email of your Dropbox account and a long-term access token from Dropbox, encrypted before it is saved. StayPuller's Dropbox access is limited to a Storage Pod folder in your Dropbox. A device or your browser asks StayPuller for a short-lived token and then talks to Dropbox directly.
• GitHub connection: the number of the StayPuller GitHub App installation and the name of your Storage-Pod repository. When a device needs access, StayPuller asks GitHub for a token that lasts one hour and works only for that one repository.
• Google connection: the Google account address and a long-term access token from Google, encrypted before it is saved. A device asks StayPuller for a one-hour token and then talks to Google directly.
• Google Drive, S3-compatible and WebDAV connections: for Google Drive, the email of your Google account and a long-term token, encrypted before it is saved; StayPuller can only reach the "Storage Pod" folder it creates and files you pick. For S3-compatible storage and WebDAV, the address you enter and your access keys or password, encrypted before they are saved. On these stores your files pass through StayPuller's servers in memory when you add, open or preview them, and are never written to disk or kept.
• Adding files from the web: when you add files on staypuller.com, your browser sends them directly to where your Storage Pod is kept (GitHub or Dropbox) using a short-lived token that StayPuller requests for it. The files do not pass through StayPuller's servers. If the activity log is on, their names appear in it like any other file your devices sync.
• Activity log: after each sync, your devices tell StayPuller which store they synced, how many files and bytes it holds, and which files moved (added, received, removed) with their sizes. The file names are kept only while "Show file names" is on, which you control on the Activity page (turning it off also erases the names already kept), and you can clear the log there at any time. The contents of your files are never sent. The log keeps the last 30 days.
• Sharing: when you share a file, StayPuller keeps who you shared it with (their email address), which file (its name, size and place in your Storage Pod), your optional note, when it was opened and how many times it was downloaded. If the other person has no StayPuller account, we make one for their email address, with no password until they choose one, and email them a link that works for 3 days. They can say "I don't know this person" to stop that sender. Shares are kept until you stop them or delete your account.
• Plan and payments: if you subscribe to StayPuller Plus or Pro, Stripe takes the payment on its own page, and we never see your card number. We keep your Stripe customer number, your plan, its status and when it renews, so your account knows which plan it is on. Stripe sends you receipts and keeps the payment records.
• Ask on the web: if you turn it on, we keep that setting and how many Ask credits you've used each month, so we can show your allowance. We don't keep your documents, your questions or Ask's answers, unless you choose to: when Ask can't help, it asks whether it may log that one question as an area to improve, and only a yes keeps it (see below).
• AI assistants you connect: the name of each assistant, what you allowed it to do, when you connected it and when it last used the connection, and hashes of its sign-in tokens (the tokens themselves are never kept). We do not keep what an assistant searched for, read or added.
• Technical data: short-lived sign-in sessions, and request logs kept by our hosting provider.

When you share a file

Sharing is the one time a document passes through StayPuller, and only because you chose to share it. The file stays where it is in your Storage Pod. When the person you shared it with downloads it or saves it to their own Storage Pod, StayPuller asks GitHub or Dropbox for it with a short-lived token and passes it straight along, in memory. We don't write it to disk or keep a copy. The share box says this before you share. When you stop sharing, the file disappears from the other person's Shared Pod at once; a copy they already downloaded or saved stays with them.

When you ask a question on the web

Ask StayPuller on the web is optional, for Plus and Pro members, and off until you turn it on. When you ask a question, StayPuller reads the text of your scanned documents (the small index files your StayPuller app keeps in your Storage Pod) using a short-lived token, picks the few documents that best match your question, and sends their text with your question to an AI model run by our AI provider, currently Anthropic, using StayPuller's own account with them, to write the answer. Every few days, and only if you turned Ask on, StayPuller also sends the titles, types, dates and a key fact of your documents (not their full text) to the same AI provider to suggest collections, which are groups of related files; the suggestions are saved in your own Storage Pod, and we keep only when we last looked. Our AI provider handles that data under its commercial terms, which don't allow it to train its models on it. StayPuller holds the index in memory for a short while (about half an hour after the last question) so the next question is quick, and doesn't write it to disk or to our database. It doesn't keep your questions or the answers either. The one exception is yours to make, each time: when Ask couldn't help (it found nothing, or you asked for something it can't do), it says so and asks whether it may log that question and its reply as an area to improve. Only if you answer yes is that one question and reply kept, cut short and with no name, account or document attached, in a list of improvements to consider. If you say no, or ignore it, nothing is kept. Home also shows what is coming up (due dates and renewals on your scanned documents) and the Collections page keeps smart collections such as "Upcoming bills"; both are worked out in StayPuller's memory from the same index files, with no AI provider involved, and only while Ask is on. Reminders you add are kept in your own Storage Pod. The Android app reads a scan the same way: with Ask on, the phone sends the scanned PDF (and any QR links it decoded) to StayPuller, which passes it to the same AI provider to extract its text, a title, dates and payment details, and keeps nothing of it. With Ask on, StayPuller also reads a few of your saved notes, conversations, artifacts and scanned documents at a time with the same AI provider, every few hours, to list the people, organizations and projects they mention; those cards (People, and projects on Collections) are saved in your own Storage Pod, not kept by us, and you can remove any of them. On the Activity page, "Check my activity" is run only when you press it: the pattern-finding is done by StayPuller itself from your activity log and the list of file names in your Storage Pod, and, if Ask is on, a short summary of the findings (counts, file names and dates, never file contents) is sent to the same AI provider to explain them; nothing is changed without your confirmation. Nothing is sent to Anthropic while Ask is off, or unless you ask a question or scan a document. You can turn it off at any time on the Ask page.

Shared collections and requests for files

When you invite people to a collection, StayPuller keeps who you invited, whether they can add files, when they opened it and a short activity line when a member adds files, until you remove them or delete the collection. The collection and its files stay in your Storage Pod: when a member opens or downloads one, StayPuller reads it from your store with a short-lived token and passes it along in memory, without keeping a copy. A member who adds files sends them to StayPuller, which writes them to the owner's Storage Pod in memory and keeps no copy. An upload request is a link you give to someone: they can send files to your Storage Pod from a web page without an account. We keep the request's title and instructions, the sender's name and email as they typed them, and a list of the files sent (name, size, when) until you delete your account; the files themselves pass through memory into your Storage Pod and are not kept by us.

When you scan with your phone's browser

On Home, "Scan with your phone" shows a QR code that opens a page in your phone's browser, with no sign-in and no app. The link is made for your account, works for 30 minutes, takes at most 10 documents, and can only add scans to the Scans folder of your Storage Pod. The photos you take are sent to StayPuller, made into one PDF in memory and written to your Storage Pod; we don't keep them or the PDF. We keep a hash of the link's code, how many documents were sent and the name of the last one, until it expires, so your computer can show that the scan arrived. The page isn't read by an AI provider; reading the text of a scan is done by the StayPuller apps when you use them.

When you connect an AI assistant

On the Connections page you can let an AI assistant you choose, such as a chat app that supports connectors, use your Storage Pod. You sign in to StayPuller from that assistant and choose what it may do: find and read files (always), add files, and share files by email (off unless you tick it). When the assistant asks, StayPuller finds files by name or by the text of your scanned documents, and passes what it asked for, such as a file's text or a new file, straight between your Storage Pod and the assistant, in memory. We don't write it to disk or to our database. Once it reaches the assistant, it is handled by that assistant's provider under the terms you have with them, not by StayPuller. A file that cannot be read as text is offered as a download link that works for 10 minutes. You can disconnect an assistant at any time on Connections, and it loses access at once.

Visits to this website

We count visits to our public pages (the home page, pricing, sign-up and the like) to learn which pages are read and which sites send people here. We do it on our own server, with no cookies and no scripts. For each page view we keep the page's address (never what follows a "?"), the site that linked to it, any campaign tag in the link, whether it was a phone or a computer, and an anonymous daily code made from your address and browser. The code changes every day and can't be turned back into your address, so a day's visitors can be counted but nobody can be followed from one day to the next. We don't keep your IP address. Visits from browsers that send Do Not Track or Global Privacy Control, and from bots, aren't counted, and neither are pages you see after signing in. If you then make an account, we remember which kind of source (such as a search engine) the same browser arrived from that day.

People who haven't made an account

When someone shares a file or collection with you, invites you to a team, or you send files through an upload request and give your email, we keep that email address with a record of what was sent and whether it was opened, so the sender can see it and so you can open it again. You don't need an account. You can ask us to delete that address at any time from the support page.

Suspended accounts

If an account is suspended (see the Terms), we keep a note of when, the reason category and any note from our team, and we keep the account's email and records until it is restored or deleted. The person can still sign in to see that it is suspended and to contact Support, and what they write there is used only to review the suspension. We may keep and share what the law requires with courts and authorities.

What we don't do

• We don't store the contents of your documents. They pass through StayPuller only for a moment, when you share one, or when you ask a question about them on the web.
• With Google connected, your contacts go from Google directly to your device. StayPuller does not read or keep them.
• We don't sell your data, show ads, or use advertising trackers or third-party analytics.

Be aware: because StayPuller can ask GitHub or Dropbox for a token to your Storage Pod, a breach of StayPuller could expose it. We limit the access to your Storage Pod only (one repository on GitHub, StayPuller's own folder on Dropbox) and to short periods at a time.

Google user data

StayPuller's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request read-only access to your contacts, and use it only to let your own devices save them into your own Storage Pod.

App updates

The Android app looks for new versions by asking our download site (dl.staypuller.com) for a small public file that lists the newest version. Nothing about you or your files is sent with that request. If a newer version exists, the app downloads it and asks Android to install it. You can turn this off in Settings.

Who we share data with

Our hosting provider (DigitalOcean) stores the account data above. Our email provider (Resend) delivers the confirmation, password-reset and sharing messages we send. Stripe handles payments. Our AI provider (currently Anthropic) answers the questions you ask on the web. GitHub and Google handle the connections you authorize.

Notes, meetings and saved conversations

If you connect Fathom, Granola, Zoom, Microsoft Teams, Notion, Mem or Google Meet on the Connections page, StayPuller keeps what you give it (an API key, an app's credentials, or for Google Meet a Google sign-in), sealed (encrypted) on our servers, and uses it only to read from that service. The notes and meetings it reads pass through our servers' memory on their way into your own Storage Pod and aren't kept; we keep only when it last ran, how many items came in, and for each item the service's id, where the file went and a version stamp. Disconnecting deletes the key and those records, and leaves your files where they are. When you ask an AI assistant connected to StayPuller to save a conversation or something it made, it goes the same way: through our servers' memory, into your Storage Pod.

The setup guide

If you use the "Getting started" guide, StayPuller sends our AI provider the labels of the buttons and fields on the setup pages you are on (Connections, Add a connection, Install, Settings), the navigation, what you type to the guide, and simple facts about your account such as whether your email is confirmed and which storage you use. It never sees your files, documents or their names, and it never types or asks for a password or key. When it clicks or types for you, it asks first, and you watch it happen. Nothing from the guide is stored on our servers.

Contacting support

On the support page, what you type is read by an automated assistant that runs on our AI provider, which replies, writes a step-by-step guide and drafts a summary. Nothing is saved on our servers while you talk. If you choose to send your request, the summary you reviewed, the guide, your conversation, your email address and (if you were signed in) your account address are emailed to our support team and kept in our support mailbox, and we email you a copy of the summary and guide.

When you are signed in, support can see facts about your account (your plan, your teams and which storage you have connected) to give better answers. It never reads your files or their contents. If you save a support guide to your Storage Pod, it can read the guides you saved in the Support folder. It can make changes in your account, such as creating a team, only when you press a button to confirm.

Your choices

• Disconnect GitHub, Dropbox or Google on the Connections page. Disconnecting Dropbox or Google also revokes StayPuller's access there.
• Sign a device out on the Devices page.
• Delete your account on the dashboard. This removes everything above. Your files in GitHub or Dropbox are untouched; to remove StayPuller's access there, uninstall the StayPuller app at github.com/settings/installations or remove it at dropbox.com/account/connected_apps.

Contact

Questions about privacy: [email protected].