Who we are
UnKAnscious LLC is the company responsible for the information described here. You can reach us about anything on this page at bt@unkanscious.com.
Two different things
The website (unkanscious.com) is public. You can read all of it without an account, and we ask nothing of you unless you fill in the Private Alpha form.
GoalRunner is the product. It is in Private Alpha and access is by invitation — you sign in with Google, and only accounts we have explicitly added can open a workspace. GoalRunner only sees a mailbox after you connect one.
Google user data
This is the part that matters most, so it is the longest.
What we ask Google for
GoalRunner requests one Google scope: https://www.googleapis.com/auth/gmail.modify
We ask for it because GoalRunner does two things: it reads your mail to work out what still needs you, and it carries out the actions you take in GoalRunner — inside your own mailbox, one at a time, when you press the button.
Those actions are: applying and removing labels (including marking read or unread, and starring), moving a conversation to Trash or bringing it back, creating and updating Gmail drafts, and sending a draft you have confirmed.
GoalRunner never permanently deletes mail. Moving to Trash uses Gmail’s own Trash, which you can undo, and which Gmail keeps for 30 days.
GoalRunner never sends mail on its own. Every send is a Gmail draft that you confirmed; there is no code path that sends a message you have not seen.
What GoalRunner reads
First, message details without the body: message and thread identifiers, the date, sender and recipients, the subject, Gmail labels, approximate size, whether there is an attachment, and standard list headers such as List-Unsubscribe and Precedence. This is how GoalRunner reads a large mailbox cheaply and decides what is worth opening.
Then, for the messages that pass that filter, the readable text of the message — plain text where it exists, HTML flattened where it does not.
Attachments are recorded by name, type and size. GoalRunner does not read the contents of an attachment, and only ever downloads one when you open it — in which case it goes to your browser and is not stored by us.
What GoalRunner keeps
The address of the mailbox you connected, and any other addresses you tell us are also yours.
The understanding it built from your mail: who a conversation is with, what was asked, what was promised, what state each of those is in, and short quotations from the message that support each claim. Those quotations are the evidence GoalRunner shows you when you ask why it said something — the product is built so that no claim exists without one.
The message metadata described above.
Your Google credential, so GoalRunner can keep working without asking you to sign in to Google every time.
If you use the forwarding address: the subject, sender and recipients, body text and threading headers of what you forwarded, plus attachment names, types and sizes — never attachment contents.
Measuring whether GoalRunner is right
GoalRunner claims things about your mail, so we have to be able to check those claims. To do that we keep frozen copies of real mail from connected mailboxes in a private, access-controlled store inside our own Google Cloud project, and compare what the product said against what the mail actually says. This involves a person reading mail. We do it only for a mailbox whose owner has agreed to it, and never for anyone else’s. Write to bt@unkanscious.com and we will tell you whether any of your mail is held this way.
Limited Use
GoalRunner’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use Google user data for advertising. We do not sell it. We do not use it to train, develop or improve any generalized artificial-intelligence or machine-learning model, ours or anyone else’s.
Why we process any of it
To run the product for you: to work out what you owe, what you are owed, and when you are finished — and to show you the evidence behind each of those.
To carry out an action you took in GoalRunner.
To keep the service working and secure — logs, error diagnosis, and abuse prevention.
To check the product’s accuracy, as described above.
We do not process your mail for any other purpose. There is no advertising business here, and no data business.
Where it goes, and who else touches it
GoalRunner runs on Google Cloud. The application and its background workers run in Google Cloud’s us-central1 region in the United States, and data is stored in Google Cloud Firestore and Google Cloud Storage in the same Google Cloud project.
These are the only third parties that receive any of it:
Google Cloud (Google LLC) — hosting, database, file storage and secret storage.
OpenAI — GoalRunner sends the text of a message to OpenAI’s API to work out whether it contains an obligation, and to whom. This is the reasoning step; without it the product cannot do its job. OpenAI acts as our service provider for that step and returns the answer to us. We do not use your mail to train any model, and we do not send it to anyone for that purpose.
Postmark (ActiveCampaign) — receives mail sent to the forwarding address, and delivers the single verification message we send when you add one of your own email addresses. That verification message contains a code and nothing from your mail.
Framer — hosts unkanscious.com and receives Private Alpha form submissions. Framer never receives mail content.
We do not share your information with anyone else. We would disclose it if the law required it, and we would tell you unless we were forbidden to.
How long we keep it, and how to have it deleted
We will be plain about this, because the honest answer is not the tidy one.
Disconnecting Gmail deletes the credential we hold. Once it is gone, GoalRunner cannot open your mailbox again until you reconnect it.
Disconnecting does not, by itself, delete what GoalRunner has already recorded. The metadata, the understanding and the quotations stay in your workspace, so that reconnecting does not start you from nothing.
We have no automatic deletion schedule, and we are not going to invent one here. GoalRunner is early software with a small number of users, and deletion is done by hand, by us, when you ask.
To have it deleted, email bt@unkanscious.com. We will delete your workspace’s stored data — metadata, understanding, quotations, credentials and any evaluation copy of your mail — and confirm to you in writing when it is done.
What you can do
See the evidence. Every claim GoalRunner makes can be opened to the words it came from. That is a product feature, not a privacy promise, but it is the most useful control you have: you can check it.
Disconnect Gmail at any time in GoalRunner’s Settings.
Revoke our access at Google, which is the authoritative way to end it: go to myaccount.google.com/permissions and remove GoalRunner. Revoking there stops GoalRunner reaching your mailbox even if something on our side failed.
Ask what we hold about you, and ask us to delete it — bt@unkanscious.com.
Depending on where you live you may have additional rights over your personal information. Ask us and we will honour them; we would rather do that than argue about which statute applies.
Security
Sign-in is Google’s, not ours — we never see or store your Google password. Access to GoalRunner is limited to an explicit list of accounts.
Everything travels over HTTPS. Our secrets and API keys are held in Google Secret Manager, not in code. Stored data sits in Google Cloud Firestore and Google Cloud Storage, which encrypt data at rest. The evaluation store is private and access-controlled, and the code that writes to it refuses to publish into a bucket that is not locked down.
We hold no security certifications and we are not going to imply otherwise. GoalRunner is early software in Private Alpha, and the honest reason access is limited is that access should expand no faster than the security of the product justifies.
If you find a security problem, write to bt@unkanscious.com. A person reads it.
What we never do
We never sell your information.
We never use it for advertising, and we run no advertising business.
We never use your mail to train models.
We never buy data about you, enrich your contacts from data brokers, or collect anything you did not hand us.
We never send mail as you without you.
We never permanently delete your mail.
The website
unkanscious.com sets no cookies and stores nothing in your browser. We checked, and we will keep it that way.
It loads Framer’s built-in page analytics, which counts visits and pages. We use it to know whether anyone is reading; we do not use it to identify you or follow you around the internet.
If you fill in the Private Alpha form we receive the name and email address you type, and your answer to the optional question. We use them to contact you about the Alpha, and nothing else.
Children
GoalRunner is a tool for adults doing work. It is not directed at children, and we do not knowingly collect information from anyone under 16.
Changes to this policy
If what the product does changes, this page changes first, and the date at the top changes with it. We will not quietly widen what we take.
Contact
UnKAnscious LLC · North Carolina, United States · bt@unkanscious.com