Privacy policy

How Ponder collects, uses, stores, and shares information, including Google user data.

Updated 2026-09-23

This policy is for Ponder, the product at heyponder.ai. It applies when you visit the site, create an account, or connect a Google account or Google Calendar. If we change how we use Google user data, we will update this page.

Information we collect

Ponder is an early-access product. We collect account information needed to sign you in (for example via Google OAuth), and workspace content you create in rooms — transcripts, graph data, and related artifacts — so the product can function.

Depending on how you use Ponder, that can include:

  • Account data: name, email address, profile photo, and the identifiers we receive when you sign in with Google or another WorkOS-supported login.
  • Workspace content: rooms, chats, idea-graph nodes, files you upload, and transcripts from voice or system audio.
  • Google Calendar data, only after you connect Calendar: event titles, times, descriptions, locations, attendee emails, Meet links, and whether you can edit the event.
  • Usage and device data needed to operate the service: IP address, browser type, and basic product analytics.

How we use information

We use that data to operate and improve Ponder, provide support, maintain security, and train Ponder's own models. Training use is part of the product for every account; there is no opt-out. Deleted rooms and chats are excluded from new training exports once they are in Trash or permanently deleted. We do not sell your personal information.

Voice and transcript features process audio to produce text and graph updates. Treat sensitive conversations accordingly while the product is in early access.

Google user data

Sign-in with Google gives Ponder the name, email, and profile photo Google returns so we can create or recognize your account. That is separate from Calendar access.

If you connect Google Calendar from Ponder, we ask Google for permission to list, create, and edit events on your primary calendar. When you start a Ponder session from an event, we may also add a Google Meet link and a Join in Ponder line on that event.

WorkOS Pipes holds the Google access token for that connection. Ponder does not store your Google refresh token or the Google client secret.

Calendar data is used only to show and change your schedule in Ponder and to open the related Ponder chat. We do not sell calendar data, and we do not use it to train models.

If an event lists attendee email addresses that already belong to Ponder users, we use those emails to grant those people access to the meeting chat. Other attendees stay Google Calendar guests only.

You can disconnect Google Calendar in Ponder. That ends new calendar access from this product. Events already written to Google stay on your calendar unless you delete them there. You can also revoke access in your Google Account permissions.

Ponder's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve ads. We do not allow humans to read Google user data unless you ask us for support, we need it for security, or the law requires it.

How we store and share information

Ponder runs as a cloud service. Content is stored on our hosting providers so the product can load when you come back. Connections use HTTPS. We do not sell personal information or Google user data.

We share data with service providers who process it for us, only as needed to run Ponder:

  • WorkOS, for sign-in and for holding the Google Calendar token.
  • Google, when you sign in with Google or connect Calendar.
  • Our hosting and database providers, to store the workspace.
  • Transcription and model providers, when you use voice or the agent on workspace content. Calendar data is not sent to those providers for training.

If you invite someone into a room or chat, they can see the content you share there. Organization admins can see membership and activity for that workspace.

Retention and deletion

We keep account and workspace data while your account is active. You can delete rooms and chats in the product; items in Trash are excluded from new training exports. You can ask us to close your account by emailing the address below. After deletion, copies may remain in backups for a limited time, then expire.

Your choices

You can update your name and preferences in Settings, disconnect Google Calendar, and leave or delete chats and rooms you own. Depending on where you live, you may also have the right to ask for a copy of your personal information or to ask us to correct or delete it. Email us to make that request.

Children

Ponder is not directed at children under 13, and we do not knowingly collect personal information from them.

Contact

Questions about this policy or your data: [email protected].