This policy is for Ponder, the product at heyponder.ai. It applies when you visit the site, create an account, or connect a Google account or Google Calendar. If we change how we use Google user data, we will update this page.
Your privacy
Your privacy is protected. We do not sell your personal information. Your rooms, chats, files, voice recordings, transcripts, and canvas actions are visible only to you. No one else can see them. If you invite someone into a room or chat, they can see only the content you share there.
You control that access from Settings. Open Manage Access to see everyone who can open a room, then grant or remove access there. Ponder keeps this in the open: the people who can see your work are listed, so who has access is never hidden from you.
Information we collect
Ponder is an early-access product. We collect account information needed to sign you in (for example via Google OAuth), and workspace content you create in rooms — voice recordings, transcripts, canvas actions, graph data, and related artifacts — so the product can function.
Depending on how you use Ponder, that can include:
- Account data: name, email address, profile photo, and the identifiers we receive when you sign in with Google or another WorkOS-supported login.
- Workspace content: rooms, chats, idea-graph nodes, files you upload, voice recordings, transcripts from voice or system audio, and the actions you take on the canvas.
- Google Calendar data, only after you connect Calendar: event titles, times, descriptions, locations, attendee emails, Meet links, and whether you can edit the event.
- Usage and device data needed to operate the service: IP address, browser type, and basic product analytics.
How we use information
We use that data to operate and improve Ponder, provide support, and maintain security. We do not sell it.
Voice and transcript features process audio to produce text and graph updates. Treat sensitive conversations accordingly while the product is in early access.
We use your email address to send product news. Every account starts subscribed, and each of those emails has an unsubscribe link. You can also turn product news off in Settings.
Google user data
Sign-in with Google gives Ponder the name, email, and profile photo Google returns so we can create or recognize your account. That is separate from Calendar access.
If you connect Google Calendar from Ponder, we ask Google for permission to list, create, and edit events on your primary calendar. When you start a Ponder session from an event, we may also add a Google Meet link and a Join in Ponder line on that event.
WorkOS Pipes holds the Google access token for that connection. Ponder does not store your Google refresh token or the Google client secret.
Calendar data is used only to show and change your schedule in Ponder and to open the related Ponder chat. We do not sell calendar data.
If an event lists attendee email addresses that already belong to Ponder users, we use those emails to grant those people access to the meeting chat. Other attendees stay Google Calendar guests only.
You can disconnect Google Calendar in Ponder. That ends new calendar access from this product. Events already written to Google stay on your calendar unless you delete them there. You can also revoke access in your Google Account permissions.
Ponder's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve ads. We do not allow humans to read Google user data unless you ask us for support, we need it for security, or the law requires it.
How we store and share information
Ponder runs as a cloud service on Railway. Workspace content is stored there so the product can load when you come back. Railway encrypts that stored data at rest. Connections use HTTPS. We do not sell personal information or Google user data, and we do not let anyone else see your workspace.
We share data with service providers who process it for us, only as needed to run Ponder:
- WorkOS, for sign-in and for holding the Google Calendar token.
- Google, when you sign in with Google or connect Calendar.
- Resend, to deliver Ponder email. It receives your email address, your name, and the content of each message.
- Railway, to host Ponder and store the workspace.
- Transcription and model providers, when you use voice or the agent. They receive only the workspace content needed for that request. Calendar data is not sent to them.
Those providers process data so Ponder can run. They do not receive it to sell, and other people cannot browse your workspace through them. Only you can see your data, unless you invite someone into a room or chat.
Retention and deletion
We keep account and workspace data while your account is active. You can delete rooms and chats in the product. They stay in Trash for 30 days. From Settings you can restore them, or delete them permanently. You can also delete your account in Settings. That closes the account and removes the rooms and chats you own. That removal is not listed in Trash. Signing in again with the same email starts a new workspace; those rooms and chats stay deleted.
Your choices
You can update your name and preferences in Settings, turn off product news email, disconnect Google Calendar, and leave or delete chats and rooms you own. Depending on where you live, you may also have the right to ask for a copy of your personal information or to ask us to correct or delete it. Email us to make that request.
Children
Ponder is not directed at children under 13, and we do not knowingly collect personal information from them.
Contact
Questions about this policy or your data: [email protected].
Updated 2026-10-07