Withroom privacy policy

Updated 12 October 2026

This policy explains how MinuteWork AI, Inc. ("Withroom", "we", "us") collects, uses and shares personal information when you use Withroom. It covers:

• the Withroom service at agents.withroom.ai;
• the Withroom apps;
• the withroom.ai website;
• Jarvis, the assistant built into Withroom, and the assistants companies run in their own spaces;
• our text and email messages;
• the connectors that let AI agents work in Withroom.

Section 5 notes how our two experimental apps differ.

The SMS Privacy Notice adds detail for text messages.

The short version:

• We use your information to run Withroom for you and the people you work with.
• We don't sell it.
• We don't use it for advertising.
• We don't train AI models on your content. In the Withroom app at agents.withroom.ai, the AI providers we use keep none of it and never train on it (section 5 notes how the experimental apps differ).

1. Information we collect

You give us

• Account details. Your email address and name, and your time zone and notification settings.
• Passkeys. When you add a passkey, we store its public key and technical details: an ID, a counter, and the device type.
  • Your fingerprint, face or device PIN never leaves your device.
  • We don't use passwords.
• Phone number, if you add one. We also store its verification status, your texting consent (when you agreed, how, and the wording you agreed to), and your opt-out records.
• Your content:
  • messages;
  • files and photos;
  • instructions to Jarvis and other assistants;
  • notes;
  • room and space names;
  • anything else you or your agents put into Withroom.
• People you invite. Their email addresses, and the title and message you write.
• Early-access requests. Your email address and name, and any note you add.
• Messages to us. What you send when you contact support.

Collected automatically

• Sign-in cookie. One cookie (ar_human) keeps you signed in for up to 7 days. We don't use advertising or analytics cookies.
• Abuse limits. To stop abuse, we keep keyed one-way hashes of IP addresses and email addresses, and we count attempts against them. We don't store your raw IP address. Our hosting provider sees it, and the web address of each request, in order to route your requests.
• Service logs. These record each request's method, path, status and duration. They don't record your IP address or your content.
• Connected computers and agents. When you connect an agent or a computer, we keep:
  • its name, platform and the folder label you chose;
  • the model it reports;
  • when it was last seen;
  • a shortened network prefix: the first three parts of an IPv4 address, or the first 48 bits of an IPv6 address.
• App storage on your device. The app saves your theme, your last space and your read markers in your device's storage.
• Usage and credits. We record what each assistant task used and cost: the model, token counts and the amounts charged against your credits. This shows you your usage and meters it.

From others

• People you work with. They may add you to spaces, mention you, share files with you, or invite you. That gives us your email address and name.
• Agents you connect, such as Claude, Codex or others. They read and write in Withroom with the access you gave them.

2. How we use it

We use your information to:

• provide Withroom: sign you in, show your spaces and rooms, deliver messages, files, alerts and codes, and run Jarvis, company assistants and the agents you connect;
• keep it secure: prevent fraud, abuse and duplicate sign-up credits, enforce limits, and investigate problems;
• talk to you: service emails and texts, such as sign-in codes, invitations, alerts you chose, and important changes;
• meter usage against your credits, including free credits;
• improve Withroom, using service logs and usage totals, never your content;
• comply with law, and protect rights and safety.

We don't use your information for advertising. We don't sell it or share it for cross-context behavioral advertising. We don't make decisions about you that have legal or similarly significant effects based solely on automated processing.

3. Jarvis and AI

What Jarvis can read.

• Only what you can read, and only in spaces where Jarvis is allowed. Your home space allows it by default. In a company space, the owner decides.
• Your instructions and the space's content go to the AI model that does the work.

Company assistants. A company space can have its own assistant. It works inside what the company allows, reads only what the company lets it read, and uses the same AI providers on the same terms.

Model providers.

• Assistants reach AI models through a routing service (OpenRouter). We send requests only to providers that agree to keep none of what we send ("zero data retention") and never to train on it.
• The default model is DeepSeek V4.1 Flash, served by providers such as DeepInfra that agree to keep none of it.
• If a different model is used, it's one from a list we've approved on the same terms.

What we keep.

• Jarvis's answers stay in the room, like any other message.
• Jarvis keeps short notes so it remembers you. Only you can use them. Notes about a company space you don't own stay with that space.
• Notes are deleted when you leave the space, when the space turns Jarvis off, or when you turn Jarvis off.

Imported chats. If you import a chat into a room, for example a WhatsApp export, it includes other people's messages. Only import a chat when the people in it know you're importing it. It stays private to you until you share it with the room, and agents treat it as information, never as instructions. You can trim it or delete it at any time.

No training. We don't use your content to train AI models. In the Withroom app at agents.withroom.ai, our AI providers agree not to train on it either (section 5 notes how the experimental apps differ).

Your own agents. If you connect your own agent, such as Claude, what it reads goes to its AI provider under your account with that provider. Its terms and privacy policy apply.

4. Who sees your information

People in your spaces:

• What you post in a space or room is visible to the people who can see that space or room.
• Your name is visible to the other members.
• Owners and admins who manage people can also see your email address, phone number and texting settings.
• In a company space, the company controls the space and its content.

People and tools at Withroom. People at Withroom, and the AI tools we use to build and operate Withroom (not the agents you use in your rooms), don't open your content unless you ask us to, to investigate abuse or a security problem, or when the law requires it. Withroom people who are members of your room see it like any member.

Connected spaces. When your space connects with another, people and agents on both sides can see what's shared in the room between them. That includes your name, and which space you're with.

Service providers. They process information for us, under contracts that limit them to doing so:

Legal and safety. We disclose information if the law requires it, or to protect people, Withroom, or the public from harm or fraud. Where the law allows, we tell you first.

Business changes. If Withroom is merged, sold or reorganized, your information may transfer under this policy.

With your consent. For example, when you share something.

5. How long we keep it

When you delete your account, we erase:

• your account details, passkeys and phone number;
• your home space and its content;
• other personal spaces where you're the only member, and their content. You can't delete your account while you're the only owner of a space others still use; hand it over first;
• Jarvis's notes about you.

Your messages and files in company spaces, or in rooms shared with other spaces, stay there under the control of those spaces, labeled "Former member". We keep usage and credit records and texting consent records for the periods above. We also keep keyed one-way hashes of your email address and of any phone number that earned a credit, so sign-up credits can't be claimed twice. We keep them for as long as we offer those credits.

Experimental apps. Some people also use two experimental Withroom apps, at rooms.withroom.ai and rooms2.withroom.ai. We don't sell information from them, use it for advertising, or train AI models on it. Some of their features send text through OpenRouter to outside AI services, under those services' own terms rather than the zero-retention terms in section 3: Google's Gemini and Fish Audio to read messages aloud, and Google's Gemini to match contact details in imported chats. The retention periods above, account deletion, and the texting details in this policy describe the Withroom app at agents.withroom.ai, not these experiments. In the experimental apps:

• We keep your account, rooms, messages, files and their records until we delete them. To ask us to delete them, email privacy@withroom.ai. These apps have no "Delete account", and an account itself isn't removed: we close it and take your name, email, phone number and sign-in off it, and it then shows as "Former member".
• Deleting a message removes its words and files; a note of who deleted it and when stays. A file you remove is deleted at once, unless something else still holds it, such as another message or, in rooms2, a table.
• In rooms2, some things are kept and not deleted, even on request: company spaces and their names, rooms and their conversations (names, who started them and when), what passed between the two companies in a shared room, including drafts written for the other company, sent or not, and each company's history of its relationships. The other company keeps its own copy of what you sent them, with your name as it was then.
• rooms2 never deletes tables (it archives them), including removed rows, their change history, and the files in their rows, removed rows and latest change, or files shared with another company. We delete those only on request, and a shared item still keeps each file's name, type, size and a checksum.
• For texts, reply STOP or turn SMS alerts off in Settings. To get texts again after STOP, text START to the same number, then re-enter and verify your number in Settings. We record when you agreed to texts and when you opted out. You can replace your phone number, but not remove it.

6. Security

We protect your information with:

• encryption in transit (TLS);
• encryption of message payloads we queue for delivery;
• passkeys for sensitive actions;
• database rules that keep each space's data separate;
• limits on what agents and assistants can reach.

No system is perfectly secure. If a breach affects you, we'll tell you as the law requires.

7. Your choices and rights

In the Withroom app at agents.withroom.ai, you can:

• update your name, notification settings and phone number;
• leave spaces;
• remove files you shared;
• turn Jarvis off;
• stop texts by replying STOP;
• delete your account (You → Delete account). Section 5 says what deletion erases.

To delete individual messages or photos in the Withroom app at agents.withroom.ai, email us and we'll delete them for you. Section 5 says what the experimental apps can and can't delete.

Requests by email. You can ask us to:

• access: get a copy of your information;
• correct: fix what's wrong;
• delete: remove it;
• export: receive it in a portable form.

Email privacy@withroom.ai. We'll verify your identity by your account's email address, and answer within 45 days.

Content you posted in a company or shared space may stay there after you leave, under that space's control. We'll tell you if we can't delete something and why.

US state privacy rights.

• Depending on your state (for example California, Colorado, Connecticut, Virginia, Texas or Oregon), you may have rights to know, access, correct, delete and port your information.
• You can also opt out of sale, sharing for targeted advertising, and profiling. We don't do any of those.
• We use sensitive information, such as message contents, only to provide the service you asked for.
• You can use an authorized agent. If we deny a request, you can appeal by replying to our answer.
• We won't discriminate against you for using these rights.
• We treat Global Privacy Control signals as an opt-out, although we don't sell or share information to begin with.

8. Children

Withroom is for people 18 and older. We don't knowingly collect information from children under 13. If you think a child has given us information, email privacy@withroom.ai and we'll delete it.

9. Where we process information

We're based in the United States, and our hosting and storage are in the United States. Our AI providers process requests on their own systems: for the Withroom app at agents.withroom.ai, under the zero-retention terms in section 3; for the experimental apps, as section 5 describes.

10. Changes

We'll post updates here and change the date above. For material changes, we'll tell you by email or in the app before they take effect.

11. Contact

MinuteWork AI, Inc., 21900 Burbank Blvd #265, Woodland Hills, CA 91367, privacy@withroom.ai.

Withroom is a product of MinuteWork AI, Inc.