Last updated: July 13, 2026
Nova Era Labs, Inc. ("Actioner," "we," "our," or "us") respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, the Actioner desktop application (the "App"), the Actioner relay service, our Claude integrations, our AI enablement services, and related services (collectively, the "Services").
If you do not agree with this policy, please discontinue use of the Services.
Actioner is architected so that your customer data stays with you. Understanding this architecture is the key to understanding this policy:
Your customer data lives on your machine. The App captures, processes, and stores your Customer Content (defined below) locally, on your own device, in an embedded data store. Actioner does not receive, store, or retain your Customer Content on its servers.
Credentials stay local. OAuth tokens and credentials for your connected accounts (email, calendar, and meeting tools) — and, if you provide one, your own Anthropic API key — are stored on your device, not in our cloud.
The relay is a pass-through. To connect Claude to the data on your machine, Actioner operates a relay that proxies traffic between Claude and the App. Data crosses the relay in transit; it is not stored there. Teams may also self-host the relay, in which case the data path never touches Actioner's infrastructure at all.
Claude access is yours. When you work with your data in Claude, Claude reaches it through your own Claude account (Claude Desktop or claude.ai) via Anthropic's Model Context Protocol (MCP), scoped to your own access. There is no Actioner-provided account option for this connection: your conversations with Claude always run under your own agreement with Anthropic. Your conversation itself flows directly between your Claude client and Anthropic. When Claude uses Actioner tools during a conversation — for example, to query your customer graph or draft content — the tool requests (which may include details drawn from your prompt) and the tool results travel between Claude and your device through the relay described below: transiently, without being stored.
One narrow exception: enrichment. To enrich your contacts and companies with publicly available business information, the App sends contact email addresses and related company names to Actioner's enrichment service. This happens in all configurations, including when you use your own Anthropic API key. The enriched profiles Actioner builds are stored in a shared lookup database without any link to you or your workspace — Actioner does not record which customer a contact came from. See "Contact and Company Enrichment" below.
AI preprocessing — your choice of account. Separately from your Claude conversations, the App uses Claude to preprocess the emails and meeting transcripts it captures (for example, to extract contacts, deals, and signals when building your customer graph). For this preprocessing you choose one of two options: provide your own Anthropic API key, in which case preprocessing runs under your own Anthropic account directly from your device; or use Actioner-Hosted AI, in which case Actioner provides the Claude processing at its own cost and the relevant content is transmitted to Anthropic through Actioner's systems, under Actioner's agreement, transiently and solely to process it for you. Even in this mode, Actioner does not store your Customer Content.
Because of this design, most of the personal information described in this policy relates to your account with Actioner (registration, billing, support, and product telemetry) — not to the content of your customer communications.
Account details such as your name, email address, password, and profile information.
Payment information, processed securely by third-party providers (e.g., Stripe). We do not store full payment card numbers.
Communications you send us, such as support requests, feedback, or information shared during sales or AI enablement engagements.
If you choose to register or log in via a third-party service (such as Google or Slack), we may receive certain profile information from that provider, including your name, email, and avatar.
"Customer Content" means the data the App holds on your device: (a) the emails and calendar events it captures from the Google or Microsoft accounts you connect, and the meeting transcripts it receives from your meeting notetaker; (b) any other customer data you or Claude choose to store in the App — including data brought in from other systems (such as a CRM or ticketing tool) through MCP connectors; and (c) the customer graph and artifacts the App builds from it. Actioner does not itself connect to those other systems; their data reaches the App only when you or Claude store it there.
Customer Content is captured, processed, and stored locally on your device by the App. Upon initial connection, the App ingests up to 90 days of historical data from each connected source, and thereafter captures new data continuously — all on your machine. Actioner's servers do not receive or retain Customer Content, and Customer Content is not uploaded to an Actioner-operated data store.
You can disconnect any source at any time in the App, which stops further capture from that source, and you can delete Customer Content at any time by removing it in the App or uninstalling the App from your device.
When you use Claude with Actioner via the default (Actioner-hosted) relay, Customer Content passes through the relay in transit between your device and Claude. This includes both directions of tool traffic: the requests Claude sends to Actioner tools (which may include details drawn from your prompts) and the results returned from your device. This transmission is encrypted and transient: the relay proxies the data and does not store Customer Content. We may retain limited operational metadata (such as connection timestamps, error codes, and volume metrics) needed to operate, secure, and troubleshoot the relay; this metadata does not include the content of your communications.
If you self-host the relay on your own infrastructure, your data path bypasses Actioner's systems entirely, and this section does not apply.
The App uses Claude to preprocess captured emails and meeting transcripts when building and maintaining your customer graph. If you choose the Actioner-Hosted AI option for this preprocessing — rather than providing your own Anthropic API key — the content being preprocessed is transmitted from your device through Actioner's systems to Anthropic under Actioner's agreement with Anthropic. In this mode, Actioner has temporary access to that content while it is being processed: it passes through our systems in transit and in processing memory, is not written to an Actioner data store, and is not retained after processing completes. Anthropic processes it solely to produce preprocessing results for you and is contractually prohibited from using it to train models. The results are stored back into the customer graph on your device.
If you instead provide your own Anthropic API key, preprocessing traffic flows from your device to Anthropic under your own account, and this section does not apply. You can switch between the two options at any time in the App, which ends any transmission of Customer Content under Actioner's account. Your Claude conversations are unaffected by this choice: they always run through your own Claude account, as described above.
To give you richer contact and company profiles, Actioner operates an enrichment lookup service. When the App identifies a contact in your captured data (for example, someone you exchange emails with), it sends that contact's email address and the domain name to Actioner's enrichment service. This is the one flow of Customer Content to Actioner's servers that occurs in every configuration, including when you use your own Anthropic API key for preprocessing.
Here is what happens with that data:
We pass the email address and company name to third-party data enrichment providers and run searches against publicly available web sources, which return business information about the person and their company (such as name, role, company size, industry, and location).
We store the resulting enriched person and company profiles in Actioner's enrichment database, and return the relevant profiles to your device, where they become part of your local customer graph.
We store enriched profiles without any link to you or your workspace. The enrichment database records that a profile exists for a given person or company; it does not record which customer's data surfaced that contact, and we do not maintain any association between enriched profiles and the workspaces that queried them.
We use enrichment data only to provide the enrichment feature. We do not sell it, use it for advertising, or use it to train AI models.
The enrichment database contains professional, business-card-level information sourced from licensed data providers and public sources — not the content of anyone's communications. Individuals who wish to have their enriched profile corrected or removed from our database may contact us at support@actioner.com (see "Your Privacy Rights" below).
When you use our website or the App, we automatically collect technical and usage information such as:
IP address, browser type, device type, operating system, and referring URLs.
Device identifiers and language settings.
Log and diagnostic data, including access times, feature usage, crash reports, and error events.
Website interaction data such as clicks, session duration, and navigation flows.
Cookies and similar technologies on our website to track usage, improve performance, and personalize your experience.
This telemetry describes how the Services are used; it does not include the content of your emails, meetings, or other Customer Content.
We use the information we collect for purposes including:
Providing, operating, and maintaining the Services, including the App and the relay.
Setting up and administering your account and, where applicable, your organization's workspace.
Processing transactions and sending transactional communications.
Sending product updates, security alerts, and administrative messages.
Research, analytics, and product improvement, based on account information and telemetry — not on your Customer Content.
Providing support and delivering AI enablement services you have engaged us for.
Protecting against misuse, fraud, and security threats.
Complying with legal obligations.
We do not use your Customer Content to train machine learning or AI models — ours or anyone else's. By design, we do not hold your Customer Content on our servers, so it is not available to us for training or any other purpose.
Your Customer Content reaches Claude in two distinct ways:
Your Claude conversations (always your own account). When you ask Claude about your customers, your Customer Content is made available to Claude from your own device, over an MCP connection tied to your own Claude account, solely to generate responses and insights for your use. That processing occurs under your agreement with Anthropic and is governed by Anthropic's terms and privacy practices. Where the default Actioner-hosted relay carries this traffic, it does so transiently, as described above.
AI preprocessing (your choice of account). The App also uses Claude to preprocess captured emails and meeting transcripts into your customer graph. If you provide your own Anthropic API key, this runs under your own Anthropic account directly from your device. If you use Actioner-Hosted AI, Actioner transmits the relevant content to Anthropic under Actioner's own agreement, solely to process it for you; Actioner's access is temporary and technical — in transit and processing memory only, with nothing retained afterward — and Anthropic is contractually prohibited from using your data for model training.
In all cases, AI processing is scoped to your own data and access; your data is never pooled with, shared with, or used to benefit other customers.
We may share the personal information we hold (i.e., account, billing, support, and telemetry data) with:
Vendors, consultants, and third-party service providers performing services on our behalf (e.g., Stripe for payments, cloud hosting for our website and relay infrastructure).
Anthropic (provider of Claude), but only if you use the Actioner-Hosted AI option for preprocessing: in that mode, Actioner transmits the emails and meeting transcripts being preprocessed to Anthropic under Actioner's agreement, solely to process them for you, and Anthropic is contractually prohibited from using that data for model training. Your Claude conversations, and preprocessing under your own API key, flow to Anthropic at your direction under your own agreement — not as a disclosure by Actioner.
Third-party data enrichment providers, to which the App sends contact email addresses and company domains so they can return business information about your contacts and their companies. This happens in every configuration, including when you use your own Anthropic API key. These providers supply professional, business-card-level data; see "Contact and Company Enrichment" above.
Business partners in the event of a merger, acquisition, or sale of assets.
Legal and regulatory authorities, if required by law or to protect rights and safety.
We do not sell personal information to third parties.
Beyond the Actioner-Hosted AI transmission and the contact enrichment described above, your Customer Content is not ours to share: it resides on your device, and it flows to Anthropic (Claude) only at your direction. When our AI enablement team builds plays, connectors, or configurations with you, we do not take or retain copies of your Customer Content.
Account data. We retain account, billing, support, and telemetry information only for as long as necessary to fulfill the purposes described in this policy, unless a longer period is required by law. Upon termination or cancellation of your account, we will delete or anonymize your account data within 30 days, unless retention is required by law or necessary to resolve disputes or enforce our Terms. You may request earlier deletion by contacting support@actioner.com.
Customer Content. Your Customer Content is stored on your own device and is under your control at all times. Deleting data in the App, disconnecting sources, or uninstalling the App removes it; there is no server-side copy for Actioner to delete or return. We recommend exporting or backing up anything you wish to keep before uninstalling.
Relay. The relay does not store Customer Content, so there is nothing to retain or delete. Operational metadata is retained only as long as needed for security and troubleshooting.
Actioner-Hosted AI. When you use this option for preprocessing, Customer Content is processed transiently and is not retained by Actioner after processing completes.
Enrichment data. Enriched contact and company profiles are stored in Actioner's shared enrichment database without any link to you or your workspace. Because they are de-identified and shared across the service, they persist independently of your account and are not removed when you close it — there is no workspace association to delete. Individuals may request correction or removal of their enriched profile as described in "Contact and Company Enrichment" above.
Backups of our own systems (which contain account data, not Customer Content) may persist temporarily before being deleted.
We are based in the United States, and the account information we hold may be transferred to and processed there or in other countries where our service providers operate. Because your Customer Content remains on your device, it is not transferred internationally by Actioner, except transiently where the default relay or the Actioner-Hosted AI option carries it between your device and Claude.
We comply with the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, as set forth by the U.S. Department of Commerce, with respect to the personal information we hold. If there is a conflict between this policy and the DPF Principles, the Principles will govern. We remain liable for onward transfers to third parties under the DPF.
Dispute Resolution: If you have an unresolved privacy or data use concern, you may contact our U.S.-based third-party dispute resolution provider free of charge. Under certain conditions, you may invoke binding arbitration through the DPF.
Depending on your location, you may have the right to:
Access, correct, or delete your personal information.
Restrict or object to processing of your data.
Request portability of your data.
Withdraw consent where processing is based on consent.
Opt out of marketing communications by following unsubscribe links.
Residents of the European Economic Area (EEA), UK, Switzerland, Canada, and certain U.S. states may have additional rights under local laws.
These rights apply to the personal information Actioner holds (account, billing, support, and telemetry data). For Customer Content, you already have direct control: it is stored on your device and can be accessed, exported, or deleted through the App. Note that the individuals who appear in your Customer Content (e.g., your customers and contacts) should direct privacy requests to you, since you — not Actioner — control that data.
To exercise your rights, please contact us at support@actioner.com.
We do not knowingly collect information from or market to individuals under 18 years of age. If we learn that we have collected personal data from a minor, we will delete it promptly.
We implement appropriate technical and organizational measures to protect information, including:
Local-first storage: Customer Content and credentials are stored on your device rather than in our cloud, which removes the possibility of a pooled, server-side breach of customer data at Actioner.
Encryption of data at rest on your device and in transit, including across the relay.
Access scoped to your own credentials: Claude and the App can only reach what you can already access — never more.
Standard safeguards for the account and telemetry data we do hold.
Because Customer Content resides on your device, the security of that device (operating system updates, disk encryption, access controls) also matters; we encourage you to follow your organization's device security practices. No method of transmission or storage is 100% secure.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting an updated version and revising the "Last updated" date.
If you have questions or concerns about this Privacy Policy, please contact us at:
Nova Era Labs, Inc. (Actioner)
Email: support@actioner.com
Website: actioner.com