Privacy Policy
Effective date: August 8, 2026
This Privacy Policy explains what information 11s ("we", "us") collects when you use the Service, how we use it, who we share it with, and the choices and rights you have.
11s is a private workspace for notes and preparation about your one-on-one conversations. Privacy is central to the product: by default, your workspace content is visible only to your account.
1. Information we collect
We collect the following categories of information:
- Account data: your email address and authentication credentials (passwords are stored only as cryptographic hashes by our authentication provider).
- Workspace content: the people, roles, organizations, notes, conversation summaries, topics, follow-ups, talking points, and preparation ideas you enter or generate — which may include personal information about other people. Sensitive workspace content is encrypted at rest (AES-256-GCM) in addition to transport encryption.
- Preferences: your language choice and plan details.
- Billing data: your plan, subscription status, and payment-history references. Card numbers and full payment details are collected and stored by our payment processor, not by us.
- Technical data: standard server logs such as IP address, browser type, and timestamps, used for security and reliability.
2. How we use information
We use the information we collect to:
- Provide the Service: store your content, sync it across your devices, and keep it private to your account.
- Generate preparation suggestions at your request, using the context you saved for the relevant person.
- Process payments and manage your subscription.
- Secure the Service, prevent abuse, and debug issues.
- Communicate with you about your account, security, billing, and material product or policy changes.
- Comply with legal obligations.
3. AI processing
When you ask the Service to prepare suggestions, the relevant context (such as your notes and discussion history for that person) is sent to the AI model provider we use, which processes it solely to return suggestions to you. Our agreements with providers require that your content is not used to train their models.
Please do not enter highly sensitive information into the Service (see our Terms of Service for prohibited content), whether or not you use AI features.
4. Legal bases (EEA, UK, and similar jurisdictions)
Where data-protection law requires a legal basis, we process personal data: (a) to perform our contract with you (providing the Service you signed up for); (b) based on our legitimate interests in securing and improving the Service, balanced against your rights; (c) with your consent, where requested; and (d) to comply with legal obligations.
5. How we share information
We do not sell your personal information. We share it only with:
- Service providers who operate the Service for us: cloud hosting and database infrastructure, authentication, payment processing, and AI model providers. Each receives only what it needs to perform its function, under contractual confidentiality and data-protection obligations.
- Authorities or other parties where required by law, legal process, or to protect the rights, safety, and security of the Service, our users, or others.
- A successor in connection with a merger, acquisition, or sale of assets, subject to this Policy.
6. International transfers
We serve users worldwide, and our providers may process data in countries other than yours, including countries whose laws may differ. Where required, we rely on recognized safeguards such as standard contractual clauses for cross-border transfers.
7. Retention
We keep your account data and workspace content for as long as your account is active. When you delete content, it is removed from active systems promptly and from backups on their normal rotation cycle. When you delete your account — which you can do yourself from the account page — we delete your content and cancel any active paid subscription within a reasonable period, except where law requires longer retention (for example, payment records).
8. Security
We use encryption in transit and at rest, account-level isolation of workspace data, and least-privilege access controls. Sensitive workspace content (such as names, notes, talking points, and career information) is additionally encrypted at the application layer with AES-256-GCM before it is stored. No method of transmission or storage is perfectly secure; if we learn of a breach affecting your personal data, we will notify you and the authorities as the law requires.
9. Your rights
Depending on where you live (including the EEA, UK, California, and other jurisdictions), you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can exercise most of these directly in the Service: view, edit, and delete content in the workspace, download a full JSON export of your data from the account page, or permanently delete your account (which removes all associated content) from the account page. You can also contact us at any time.
You may also have the right to complain to your local data-protection authority. California residents: we do not sell or share personal information for cross-context behavioral advertising.
10. Information about other people
The Service lets you record information about people you know. For that information, you act as the data controller and we act as your processor: you decide what to record, and you are responsible for having a lawful basis, telling people where required, and responding to their requests. If someone asks us directly about information you stored about them, we may direct them to you or ask you to respond.
11. Cookies
We use only essential cookies and browser storage required to sign you in, keep your session secure, and remember your preferences. We do not use advertising or third-party tracking cookies.
12. Children
The Service is not directed at anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
13. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, give advance notice by email or in the Service.