Privacy & Data Handling

To do its job, Dunbar stores the relationship information you add or connect: the names, roles, organizations, and contact details of the people in your network and your own contact records; your notes and the history of your interactions (calls, meetings, intros, and the engagements you record); meetings you schedule through Dunbar; and messages you draft. If you import a spreadsheet of contacts or past engagements, Dunbar stores what you imported.

Meeting notes from Granola, if you connect it. If you connect your own Granola account with an API key, Dunbar reads the summaries Granola writes of your meetings and files each one on the people you met, with its title, its date and a link back to Granola. To find those people it keeps the names and email addresses of the people at each meeting. When someone on a calendar invite has exactly the name of a person in your records who has no email address on file, it adds the address from the invite to that person, and tells you which one it added. It never asks Granola for a transcript and never reads the private notes you type in Granola, and it skips any note that someone else owns and shared with you. If you describe other work you do on the Granola card, each new summary is first sent to Anthropic's Claude, with its title and the names, email addresses and tags of the people at the meeting, to decide which of your businesses the meeting was for. A meeting for your other work is not filed, and we keep only a record that it was set aside, so it is not read again. Every other meeting is filed, including one Claude cannot place. Your key is stored encrypted. You can disconnect at any time from Settings, on the Meeting notes & CRM tab; summaries already filed stay on your records until you delete them.

Meeting notes from Wispr Flow, if you connect it. If you sign in to your own Wispr Flow account from Settings, Dunbar reads, through the connector Wispr offers other apps, the summaries, next steps and action items its Notetaker writes of the meetings it recorded, and files each one on the people you met, with its title, its date and the names and email addresses of the people there. It never keeps a transcript or the notes you write in Wispr Flow, and Wispr does not let it read what you dictate. Your sign-in is stored encrypted; disconnecting in Settings deletes it.

Notes you email, or write on a meeting. If you make an address for notes by email, Dunbar reads each email that arrives there from you, or from a notetaker such as Zoom, and files its text on the person the meeting on your calendar was with. It reads the email's text only: attachments are never opened, and mail from anyone else is turned away unread. It keeps a record of what happened to each email, never what it said, and an email waits encrypted for at most 14 days until it has been read. When Gmail sends a code to confirm the address, the code is shown on your card for two days so you can type it into Gmail. Notes you type or dictate on a meeting are filed the same way when you choose to file them. If you describe other work you do, these notes are sorted the same way as Granola's.

Your calendar and your mail, if you connect Google. If you connect your Google account, Dunbar reads the events on your main calendar from a week back to three months ahead, so your meetings with the people in your records show up in Dunbar, and a meeting that has happened counts as a touch on that person. It adds a meeting you book in Dunbar to that calendar, and changes or cancels it when you do. It sends an email from your own address only when you approve it, one at a time. It cannot read your mail: for Gmail, Dunbar asks Google only for permission to send. A meeting's title, time and description can be among the details sent to Anthropic's Claude when the coach or the chat works with that meeting. You can disconnect Google at any time from Settings, on the Email & calendar tab. Dunbar's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your calendar and your mail, if you connect Microsoft 365. If your email and calendar live in Microsoft 365 or Outlook, you can connect that account instead of Google. Dunbar then does the same there: it reads the events on your main calendar from a week back to three months ahead, adds a meeting you book in Dunbar to that calendar and changes or cancels it when you do, and sends an email from your own address only when you approve it, one at a time. It asks Microsoft for permission to send mail, not to read it. A meeting's title, time and description can be among the details sent to Anthropic's Claude when the coach or the chat works with that meeting. You can disconnect at any time from Settings, on the Email & calendar tab.

We also store basic operational data needed to run the product: your account and workspace settings, and standard server logs.

Your organization has its own workspace. Every record you create belongs to that workspace, and every request Dunbar makes is scoped to it, so your contacts and your activity are not visible to other customers of Dunbar.

Data is hosted on managed cloud infrastructure in the United States (see service providers). Access is limited to the systems that run Dunbar and to authorized personnel who need it to operate or support the service.

Dunbar uses Anthropic's Claude to draft messages in your voice, summarize your activity, and research publicly available information about your contacts. To do that, the relevant details are sent to Anthropic's API for processing and the result is returned to your workspace.

Voice calibration, if you agree to it. Dunbar can learn how you write so your drafts sound like you. If you agree, you paste in three or more emails you wrote yourself, and Dunbar sends them to Anthropic in a single request so Claude can describe your style. We keep that description and two or three short excerpts of your own writing, with names taken out. The emails you pasted are discarded, and Dunbar never reads your mailbox to do this. It stays off until you agree to it. You can erase what was learned at any time, from Settings, on the Voice tab: the description and the excerpts are deleted, and drafts go back to your written tone settings.

Your data is never used to train AI models. Anthropic does not train its models on data submitted through its API, and we do not use your data to train any model ourselves. We never sell or rent your data, and we never share it with other customers.

We keep this list short and purposeful. Each provider processes your data only to perform its specific function for Dunbar:

• Anthropic: AI processing (drafting, summarizing, research, the coach, and sorting meeting notes if you ask it to).
• Supabase: database hosting (where your workspace data is stored).
• Vercel: application hosting (running the Dunbar web app).
• Resend: delivering invitations, notifications, and the individual emails you approve when you have not connected your own mailbox, and receiving the notes you send to your own notes address.
• Serper: looking up publicly available information for research (Google results, through Serper's API).
• Google (Calendar, and Gmail if you choose): only if you connect your own account, to read your calendar, schedule meetings, and send the mail you authorize.
• Microsoft (Outlook calendar and mail): only if you connect your own Microsoft 365 account instead, to read your calendar, schedule meetings, and send the mail you authorize.
• Granola: only if you connect your own account, to read the summaries of your meetings.
• Wispr Flow: only if you connect your own account, to read the summaries of the meetings its Notetaker recorded.

You own your data. You can request a full export of your workspace, or its permanent deletion, at any time by emailing support@dunbarcoach.com. We honor deletion requests within 30 days, and deleted data is purged from backups on our normal rotation. If you close your account, we delete your workspace data unless you ask us to retain an export for you.

Data is encrypted in transit (TLS). Access is restricted to the systems that run Dunbar and to authorized personnel. We use reputable, security-conscious infrastructure providers (listed above).

We want to be precise rather than impressive: Dunbar does not currently hold formal certifications such as SOC 2 or HIPAA. If your organization requires a specific certification, data-processing agreement, or security review, get in touch and we'll talk through your needs.

• • Send mass email blasts on your behalf. Outreach is one-to-one, and you approve every message.
• • Use your data to train AI models.
• • Sell or rent your data.
• • Show your data to another customer.
• • Find you strangers to email. Dunbar works the people you already know.

Privacy questions, requests, or concerns: support@dunbarcoach.com. We read every one.