Tegaki 手書き

Privacy

What we hold, and what we do with it.

Tegaki works on your own writing, your own week and your own numbers. This page says plainly where each of those goes. Last updated 23 September 2026.

Who we are

Tegaki is operated by its three co-founders (see Who we are). Questions about your data: write to the address on that page.

What we store

  • Your account. Email address and a password hash, held by our authentication provider.
  • Your voice. The writing you paste or dictate to teach the tool, the profile it builds from it (which you can read and correct), your rules, and the rules it learns from your edits.
  • Your week. Notes you type or dictate, documents you upload, and the transcripts you tick from Fathom or Granola. We keep the condensed material a post was written from; we do not keep a copy of your whole Fathom or Granola library.
  • Your posts. Every draft, every edit you make to it, and, if you mark it as posted, the text as it stood then.
  • Your analytics. The LinkedIn export you upload, merged into one record per account. The spreadsheet itself is not kept.
  • Your LinkedIn account, if you connect it. Relevant information from your LinkedIn profile (such as your name, headline, about section, current company, industry and profile link); the content of your LinkedIn posts and their publication dates; the performance data available for those posts, such as reactions, comments, reposts and impressions; your follower and connection counts, where available; and a snapshot of your follower count each time you sync, used for your analytics. We use this to understand your writing and what you write about, to identify what you have already published, and to give you insights and analytics on your content. We retrieve it only when you connect LinkedIn and when you choose to Sync.
  • Connected accounts. The API key you give us for Fathom or Granola, and the reference to your LinkedIn connection, encrypted before they reach our database and never shown back to you in full. Disconnecting deletes them.
  • What you did. Events such as "draft generated", "copied", "marked as posted", with no content, so we can see whether the product works.
  • Feedback. What you write in the feedback box and any screenshot you attach.

What we do not do

  • We never post to LinkedIn, comment, send messages or connect with people for you. If you connect your LinkedIn account, Tegaki only reads it, as described above. Without the connection, Tegaki sees nothing from LinkedIn except the export you upload yourself.
  • We never see your LinkedIn password: you sign in on Unipile’s page, not ours.
  • We do not sell or share your data for advertising. There is no advertising or tracking script on the app.
  • We do not use your writing to train models. Your material is sent to our model provider to write and check your post, under their API terms, and for nothing else.

Who processes it for us

ServiceWhat reaches itWhy
AnthropicYour voice profile, rules, notes, ticked transcripts, the draft and examples of your own postsWriting and checking the post. Standard API terms; not a zero-retention plan.
SupabaseEverything listed under "What we store"Database, sign-in, file storage
NetlifyThe application and its logsHosting. Logs hold run timings and costs with a hashed account id, never your content.
ResendYour email address and the Monday digestEmail
Fathom, GranolaThe API key you gave us, to fetch your own recordingsOnly if you connect them
UnipileThe session and connection information needed to maintain your optional LinkedIn connection, and our requests for your own LinkedIn profile, posts and available performance dataThe LinkedIn connection, only if you choose to connect. You sign in to LinkedIn through Unipile, not through Tegaki. Disconnecting in Settings, or deleting your Tegaki account, ends the connection

How long we keep it

  • Your voice, rules, posts and edits: for as long as you have an account. A draft you delete is kept, marked deleted, because a draft you rejected is how the tool learns what not to write; it is removed with your account.
  • The material a run was written from: on the most recent run only. Older runs keep their timings, not their content.
  • Uploaded documents and week notes: until you remove them.
  • Backups: our provider's rolling window, plus manual copies kept no longer than 90 days.

Your data, out or gone

Export. Write to us and we will send everything we hold on your account as a zip: your profile and rules as JSON, every post and edit, and your uploaded files. We are building a button for this.

Deletion. Write to us and we delete your account: your sign-in, your workspace, every post and edit, your connected keys, your uploaded files, your analytics record and your feedback. Deletion is final. Backups age out on the schedule above and are never used to bring a deleted account back.

Security

Each person's rows are isolated by database policy and we test that isolation automatically before every release. Session cookies cannot be read by scripts. Stored API keys are encrypted. Our logs never contain your writing. Spending limits per account protect the service from abuse.

Changes

When this page changes we update the date at the top. If a change affects what we do with your data, we email you first.