Privacy Policy

Margaret is an AI operating system for business owners, operated by KG Creative Co. LLC, doing business as One Eleven Group (“we”, “us”). This policy explains what Margaret collects, why, and how it is protected. Margaret is currently a private system used by One Eleven Group; if it becomes available to other businesses, this policy applies to them equally.

What Margaret accesses

Only what the account owner explicitly connects, each connection authorized separately and revocable at any time from the Integrations page:

• Email (Google Gmail, read-only): messages in connected mailboxes, to identify requests, commitments, deadlines and follow-ups. Margaret does not send, delete, or modify email.
• Calendar (Google Calendar, read-only): events, to know what is in progress, what just ended, and what is coming up.
• Slack: direct messages between the owner and Margaret, and messages in channels the owner chooses to monitor.
• Project management (Asana): to create and verify tasks the owner has approved.
• Text messages (Twilio): messages between the owner and Margaret’s own phone number.
• Voice memos the owner records for Margaret, which are transcribed.

Google user data

Margaret’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the features the owner connected it for: reading mail and calendar events to organize the owner’s work and prepare recommendations for the owner. It is never sold, never used for advertising, never used to train generalized AI models, and never transferred to others except as needed to provide those features (see processors below) or as required by law. Humans do not read Google data except with the owner’s explicit consent, for security or abuse investigation, or to comply with law.

How data is used

To detect and organize work, prioritize it, prepare recommendations and drafts for the owner’s review, keep an auditable record of what Margaret did and why, and estimate the time and cost involved. Consequential actions require the owner’s approval unless the owner has deliberately granted that autonomy.

Processors we rely on

Vercel (hosting), Neon (database, encrypted at rest), Clerk (sign-in and multi-factor authentication), Inngest (background jobs), Anthropic (AI reasoning; content is sent for processing only and, under Anthropic’s commercial terms, is not used to train models), Deepgram (speech to text), Twilio (SMS), Slack, Google and Asana as the owner’s connected services.

Text messaging (SMS)

Margaret can send text messages to the account owner’s mobile number. Enrollment is by the owner only: she signs in to her Margaret account, confirms her own mobile number in the app’s Integrations settings, and explicitly turns SMS notifications on. No one else can be enrolled, and Margaret never sends marketing or promotional messages.

Messages are operational: meeting check-ins, approvals awaiting review, reminders, follow-ups that are due, and a daily briefing and recap. Message frequency varies with the owner’s calendar and workload. Message and data rates may apply.

Reply STOP at any time to stop receiving messages. Reply HELP for help or contact office@oneelevengroup.net.

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.

Mobile phone numbers and SMS opt-in information are used only to deliver these messages. They are not shared with, sold to, or rented to any third party or affiliate for marketing or promotional purposes. Twilio processes messages on our behalf as a service provider and does not use this data for its own purposes.

Security

All traffic is encrypted in transit. Credentials for connected services are stored encrypted with per-account keys. Access to the application requires sign-in with a second factor. Each business’s data is isolated at the database level. Secrets are never written to logs.

Retention and deletion

Email and message content is kept while the connection is active so Margaret can reason with context; the owner can disconnect any source at any time, which stops collection immediately. Provenance records (what came from where) are kept for auditability. On request we delete an account’s data entirely. Revoking Margaret’s access in Google or Slack also cuts off access at the source.

Your choices

Connect or disconnect any source, pause monitoring, and adjust Margaret’s autonomy at any time from the dashboard. Questions or requests: office@oneelevengroup.net.

Changes

If this policy changes materially, the date above changes and account owners are told in the application.