Privacy Policy

This Privacy Policy describes how Directed, Inc., a Delaware corporation ("Directed," "we," "us," or "our"), collects, uses, stores, and shares information in connection with our websites, applications, and services (collectively, the "Services").

This Privacy Policy applies to directed.ai and all associated subdomains, our web, desktop, and iOS applications, the Directed command-line tool, and the Directed AI browser extension.

1. Information We Collect

Account Information

When you create an account or sign in, we collect your name, email address, username, and password (stored only as a secure hash), or the profile information provided by the sign-in service you choose (Google, Microsoft, or Apple), such as your name, email address, and profile picture. If you add a phone number, we collect it and verify it by text message. We also store your profile settings, such as language, time zone, and profile picture.

Content You Create and Share

We collect the content you submit through the Services, including chat messages, reactions, files, images, audio and video messages, documents, forms and form responses, and the instructions you give our AI assistant. We also store the content our AI assistant produces for you, and the records of how it produced it (described in "AI Features" below).

Calls, Voice, and Dictation

Our applications include voice and video calls with AI features. With your permission, we access your device's camera and microphone. Calls on Directed are recorded. We store the recording, a written transcript identifying who said what, a summary, and the times participants joined and left. When you use dictation, the audio you record is converted to text. Messages spoken during a call may also be saved to the chat.

Contacts

If you allow it, the iOS app reads your device's address book (names, nicknames, organizations, job titles, email addresses, and phone numbers) and uploads it to Directed so we can show you which of your contacts are on Directed and let you start chats with them. While access is granted, the app keeps this copy in sync when your address book changes. If you sign in with Google and grant the optional contacts permission, we import your Google contacts as described in "Google User Data" below.

Command-Line Tool

When you run a supported AI coding agent (such as Claude Code or Codex) through the Directed command-line tool while signed in, the tool shares that session to a chat on Directed. It uploads the agent's session transcript, which includes your prompts, the agent's responses, commands it ran and their output, and file contents and changes it worked with. It also sends basic repository state (the repository path, branch, current commit, and the names of changed files), the last lines of the terminal when the session ends, and your computer's name and the tool's version. You can turn sharing off for a session with the --no-chat option. If you enable remote sessions with directed connect, the tool keeps a connection to Directed so you can start sessions on that computer from a chat. Cloud workspaces clone the repository you choose from GitHub.

Browser Extension

The Directed AI browser extension lets you import a conversation from a supported AI chat site (currently ChatGPT and Claude) into Directed. The extension only reads a page when you open the extension and click "Import chat" on that page. When you do, it collects:

• The address (URL) and title of the conversation page you are importing
• The content of that conversation, including your messages, the AI's responses, and any documents or code attached to them. To capture the full conversation, the extension reads the page and, on the same site, requests the conversation the page is already displaying, using your existing session on that site
• Any instruction you type into the extension to accompany the import
• Your Directed sign-in status, which the extension checks using the Directed sign-in cookie

The extension does not read pages you do not choose to import, does not track your browsing history, does not run on websites in the background, and does not collect passwords, payment information, or credentials for the AI chat sites.

Connected Services

If you connect another service, we receive information from it to provide the connection:

• Slack: messages in the channels and conversations the Directed app is added to, and the names and email addresses of the people in them
• Telegram: messages, images, and contact cards you send to the Directed bot, and your Telegram name and phone number
• GitHub: your GitHub username and account ID, and the repositories, issues, and pull requests you ask our AI assistant to work with

Information About Other People

When you ask our AI assistant to look someone up, it may search the web and use people-data services to find publicly available professional information about that person, such as their name, employer, role, and professional profile. We may also hold information about people that users include in chats, contacts, or invitations.

Information Collected Automatically

• Device information: device platform, app or tool version, time zone, and a push notification token if you enable notifications
• Usage information: when you last signed in and were active, which messages you have read, and how much AI processing your requests used
• Service logs: our servers record requests to the Services, linked to your account, and may record the content being processed (see "Storage and Security")

We do not use third-party advertising or analytics trackers. Our hosting providers receive your IP address when your device connects to the Services. Our video player provider (Mux) collects playback statistics when you watch a call recording.

Cookies and Local Storage

We use cookies to keep you signed in and to protect against forged requests, and browser storage to keep you signed in and remember interface preferences. The iOS app stores your sign-in in the device keychain and keeps a cache of recent chats on the device. The command-line tool stores your sign-in in your home folder. We do not use advertising cookies.

2. Google User Data

We use Google user data only to provide user-facing features of the Services:

• Signing you in and setting up your account and profile
• If you grant the optional contacts permission, importing your Google contacts (including Google's "other contacts"), which may include names, email addresses, phone numbers, and organizations, so we can suggest people you may know on Directed by matching your contacts against registered users (matching uses one-way hashed identifiers), show you your imported contacts, and auto-complete email addresses when you invite someone to a chat

We do not use Google user data for advertising, and we do not sell it. We do not transfer it to third parties except as necessary to provide these features (for example, to our hosting provider), to comply with applicable law, or as part of a merger or acquisition with notice to you.

We store your Google sign-in access tokens and imported contacts while your account is active, and refresh your contacts when you sign in with Google. You can ask us to delete your imported contacts at any time by contacting us, and you can revoke Directed's access to your Google data at any time in your Google account settings.

Directed's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and improve the Services
• Run chats, calls, and our AI assistant, including transcribing calls and dictation, summarizing conversations, deciding when the assistant should reply in a group chat, and remembering facts and decisions from your chats so the assistant can use them later
• Turn conversations you import with the browser extension, and sessions you share with the command-line tool, into chats on Directed
• Connect you with people you know and deliver invitations
• Send notifications and emails you have asked for or that relate to your account
• Maintain security, debug problems, and prevent fraud or abuse
• Comply with legal obligations

AI Features

To answer you, our AI assistant sends the relevant content (such as chat messages, call transcripts, files, and imported conversations) to the AI model providers listed below. We keep a record of each AI request and response so we can operate, debug, and improve the assistant. We do not sell this content, and we do not use it for advertising.

4. Storage and Security

Information is sent to and from the Services over encrypted connections (HTTPS) and stored with our hosting and storage providers. Call recordings, uploaded files, and media are stored in Amazon Web Services and, for call recordings, Mux. Access is limited to the systems and personnel that need it to operate the Services. Integration secrets and shareable link tokens are encrypted, and passwords and access keys are stored only as hashes.

Our server logs and error reports may include the content being processed, such as the messages sent to AI models, and are kept by our hosting and error-monitoring providers.

Images that our AI assistant places in documents may be hosted at unlisted public links, which anyone who has the link can open.

For the browser extension: the page content you import is sent to Directed's servers, where it is converted into chat messages. We store those messages as a chat in your account and do not keep the raw page content. In your browser, the extension keeps only temporary state in Chrome's local extension storage (the progress of an import in flight and any unsent instruction you typed). These entries expire after a few minutes and are deleted the next time the extension updates its state, or when you remove the extension.

No security system is completely secure, and we cannot guarantee the security of your information.

5. How We Share Information

We do not sell your information, and we do not use or transfer it for advertising, credit-worthiness, or lending purposes. We share information only as follows.

With Other Users

Messages, files, calls, recordings, and transcripts are visible to the other members of the chat or call they belong to, including people you invite and anyone who joins through a link you share. Your name and profile picture are visible to people you interact with.

With Service Providers

We use the following service providers to operate the Services. They process information on our behalf to provide their services to us.

• Hosting, databases, and storage: Render, Fly.io, Amazon Web Services (S3), and Sprites (cloud coding workspaces)
• AI models: OpenAI, Anthropic, Google (Gemini), Groq, and TypeSafe. They receive the chat content, transcripts, and files needed to answer a request; Groq and OpenAI also receive call and dictation audio for transcription
• Calls and recordings: Daily (call audio and video, live captions through Deepgram), Mux (recording storage, playback, and captions), and Google Cloud Text-to-Speech (the assistant's voice)
• Image generation: fal.ai and Google
• Web search and people lookups: Serper, Jina, RocketReach, and People Data Labs. These receive search queries and the names, email addresses, or profile links being looked up, not your account information
• Email and documents: Google Workspace (sending email, and creating Google Docs and Sheets you export)
• Phone verification: Twilio
• Notifications: Apple Push Notification service and web browser push services, which receive the sender's name and a preview of the message
• Error monitoring: Sentry

Services You Connect

When you connect Slack, Telegram, or GitHub, or ask our assistant to email someone, we send the relevant messages and content to that service on your behalf.

Legal and Business Transfers

• To comply with applicable laws, regulations, or legal processes
• To protect the rights, safety, and security of Directed, our users, or others
• In connection with a merger, sale, or other business transaction

Chrome Web Store User Data Policy

Directed's use of information received from the browser extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

6. Data Retention and Deletion

We retain information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

• Chats, including imported conversations and shared command-line sessions, are kept until a chat owner deletes them. Deleting a chat removes its messages, members, and call transcripts from the Services. Records of AI requests, uploaded files and recordings, and facts the assistant learned from the chat may be kept after the chat is deleted; you can ask us to delete them
• Incognito chats are deleted automatically when they expire
• Imported contacts are kept while your account is active and updated when they change at the source
• Server logs and error reports are kept for the period set by our hosting and error-monitoring providers

To delete your account, or any of your information, contact us at support@directed.ai. We will delete or de-identify your information unless we are required to keep it by law. Content you shared in chats with other people may remain visible to them.

7. Your Choices

• You can control camera, microphone, contacts, and notification access in your device or browser settings
• You can remove your phone number and imported contact suggestions in the Services
• You can share command-line sessions selectively with the --no-chat option, and disconnect remote sessions at any time
• You can stop the browser extension from collecting anything by not using it, and remove it at any time from your browser's extensions page
• You can stop sharing data from a connected service by removing the Directed app from your Slack workspace or GitHub account, stopping the Directed Telegram bot, or revoking Directed's access in your Google account settings
• You can contact us to request access to, correction of, or deletion of your information, subject to applicable law

8. Children's Privacy

The Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date when changes are made.

10. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Directed, Inc.
A Delaware Corporation
support@directed.ai

Effective Date: October 6, 2026