Frankfurt, Germany
Account and database
The app and its database run in DigitalOcean’s Frankfurt data center. That’s where your contacts, deals, tasks and conversations are stored.
Security
Security and data privacy: EU servers, and you decide who sees what.
Your customer data is the most sensitive thing your business owns. This page spells out where we store it, who can reach it and what protects it — including what leaves the EU. No spin.
Where your data lives
Your account lives in Frankfurt. The rest stays in the EU too.
Four places your data passes through — every one of them an EU region.
Frankfurt, Germany
Uploaded files
Contracts, proposals and images sit in private storage in the same region. Download links expire after a few minutes.
EU · eu-central-1
Meeting recordings
The AI notetaker’s recordings and transcripts are processed in Recall.ai’s EU region. The finished notes land in your workspace.
Stockholm, Sweden
Newsletter delivery
Your newsletters and campaign emails go out through Amazon SES in its EU region (eu-north-1), from your own sending domain.
What leaves the EU — said out loud
To generate an AI answer, the text goes through OpenRouter to a model provider (for example Anthropic, OpenAI or Google), and some of our vendors are US companies — Postmark, for instance, delivers system notifications. At OpenRouter, prompt and response logging is turned off, and requests only go to providers that don’t train models on your data.
See the full list in our privacy policyProtection inside your account
Six locks, on by design.
Isolated workspaces
Every workspace is separated from every other one at the database level. The rule lives in the database itself (row-level security), not just in app code — another company’s queries can’t see your rows.
Encrypted keys
Your two-factor secret and the keys and tokens of connected services are stored with AES-256-GCM encryption and never written to logs. The interface only ever shows the first few characters of a key.
Two-factor sign-in
With an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password) and 10 single-use recovery codes. It asks for the code on Google sign-in too.
Roles and per-feature access
Admin, Editor or Viewer — and when you invite someone, you limit what they see feature by feature: Sales only, say, without AI or billing. The server enforces it; it’s not just hidden in the UI.
Private pipelines, projects and contacts
Private means the owner and the people they invite. Even admins can’t see a private project or contact; a private pipeline is visible to an admin only through a separate, logged toggle.
Partner access without a seat
Your agency or accountant can work in your account without becoming a member or taking a seat. You set what they can reach per feature, add an expiry date if you like, and revoke it instantly.
Logs nobody can rewrite
What matters leaves a trace — and that trace can’t be erased from the app.
- At sign-up and sign-in we record the IP address and browser identifier, so an unfamiliar login can be traced afterward.
- The security log is append-only: entries can’t be edited, and workspace members can’t see them.
- After 6 months we strip the IP address and browser identifier from each entry.
- A full workspace export and an admin viewing private pipelines are both logged actions.
GDPR: your data, your call
Export, deletion, contracts and vendors — in one place.
One-click export
At the bottom of Settings › Profile you download your own data as JSON, and as an admin the whole workspace as a ZIP (CSV + JSON): contacts, deals, tasks, projects, invoices, conversations and more.
Deletion
You delete your account yourself at the bottom of your Profile. We also take deletion requests at [email protected] and complete them within one month.
Data processing agreement (DPA)
If your company needs a signed data processing agreement, email [email protected] and we’ll sort it out with you.
Subprocessor list
Our privacy policy lists every processor — hosting, delivery, AI models — by name, task and location, along with the safeguards for any transfer outside the EU.
Questions
What a careful buyer asks
The app, database and file storage run in DigitalOcean’s Frankfurt region. Meeting recordings are processed in Recall.ai’s EU region (eu-central-1), and newsletters are delivered by Amazon SES from Stockholm (eu-north-1). DigitalOcean is a US company, so our privacy policy also lists the contractual safeguards (DPF, SCCs).
No. AI requests go through OpenRouter to the model providers: prompt and response logging is turned off, and requests only go to providers that don’t train models on the data. Section 3.1 of our privacy policy names the exact providers.
Not by default. A private pipeline is visible to its owner and the people they invite. An admin can view it with a separate “Show all (admin)” toggle — it applies only to that admin, only in that workspace, and it’s logged. The toggle doesn’t cover private projects, contacts or tasks: admins can’t see those at all.
Not by default. A newly connected mailbox is set to “Only me”: nobody else sees its emails or the contacts created from it — not even an admin. You decide whether to share it with selected people or the whole team.
Sign in with one of your recovery codes, then set it up again on your new phone in your Profile. If you have neither your phone nor a code, email [email protected] from your account’s address and we’ll verify it’s really you first. That’s deliberately not instant — a stranger could ask the same way.
We don’t claim any certification. What we commit to is spelled out in our privacy policy and terms of service. If your vendor questionnaire needs more detail, email [email protected] and we’ll answer it.
Who writes tonight’s proposal?
Either you write tonight’s proposal — or Gammatica AI does. Don’t wait for your competitor to decide first.
No credit card · 3,000 AI credits on us
- GDPR-compliant data handling
- EU data residency
- We never change anything in your mailbox
P.S. The trial costs you nothing and asks for no card details. If it isn’t for you, you close the tab and we never charge you.