Town
What Town keeps, for how long, whether it trains on it, and what rights you grant, for Town assistant (Townie), individual and Team plans under the standard Terms, Town for Organizations (Enterprise Agreement / DPA customers). Each answer quotes Town's own policy.
- Town assistant (Townie), individual and Team plans under the standard Terms
- Town for Organizations (Enterprise Agreement / DPA customers)
- Notes
- Open questions
- Documents
Town assistant (Townie), individual and Team plans under the standard Terms Agent
- Default retention How long prompts and chats are kept
-
Stated No fixed period: personal information is kept while you have an account, plus an unspecified time after. Email and file content isn't stored 'beyond what's necessary' (undefined).
What the policies say (3 quotes)
"For example, we will retain your personal information for as long as you have an account with us or keep using our services, and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise."
Privacy Policytown.comcaptured 2026-11-08"We don't store email content beyond what's necessary, and we never browse your inbox for any other purpose."
Security, privacy, and approvals by designtown.comcaptured 2026-11-08"Files are not stored beyond what's necessary."
Security, privacy, and approvals by designtown.comcaptured 2026-11-08 - After you delete How long until it is gone
-
Stated You delete your account in Settings. It is soft-deleted immediately (routines stop, sessions revoked) and all data is permanently removed within 30 days, apart from narrow exceptions.
What the policies say (3 quotes)
"**We soft-delete immediately.** The moment you delete, your account is deactivated, your routines stop, and your Town sessions are revoked."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"**Everything is permanently removed within 30 days.**"
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"Go to Settings to delete your account. We soft-delete immediately and permanently remove all data within 30 days."
Security, privacy, and approvals by designtown.comcaptured 2026-11-08 - Kept longer when Safety flags, legal holds, backups
-
Stated Exceptions are active legal holds and some required security/audit records, with no durations given. Memory Data may be kept de-identified after termination. Backups are not mentioned.
What the policies say (4 quotes)
"The only exceptions are narrow ones — for example, if there’s an active legal hold, or a small set of security/audit records we’re required to retain."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"Upon termination of this Agreement, Town will cease using Memory Data in a manner personally associated with you but may retain Memory Data in de-identified or aggregated form for product improvement purposes."
Terms of Servicetown.comcaptured 2026-11-08"We generally retain personal information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, for fraud prevention purposes, or otherwise in line with our agreements with you."
Privacy Policytown.comcaptured 2026-11-08"we may delete Your Content associated therewith from our live databases."
Terms of Servicetown.comcaptured 2026-11-08 - Zero data retention Whether it exists and who can get it
-
Not stated The captured policies describe no zero-data-retention option for Town's own storage.
- Trains on your data By default
-
Stated The pages conflict. The docs say Town's training is off by default (opt-in), but the privacy policy says Town may train its models (opt-out). Google data is never used.
What the policies say (4 quotes)
"Using your data for AI training is off by default, and we configure our [AI model providers ](https://www.town.com/ai-model-providers) so your inputs and outputs aren’t used to train their models either."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"As set out in the How We Use Personal Information section, we may use your personal information to train our AI models and for other machine learning purposes."
Privacy Policytown.comcaptured 2026-11-08"we do NOT use Google user data to train machine learning models"
Privacy Policytown.comcaptured 2026-11-08"We may use your personal information for research and development purposes, as well as to create anonymized, de-identified, or synthetic data to develop, analyze and improve our products and services, including to train our AI models"
Privacy Policytown.comcaptured 2026-11-08 - Opting out How, and what it doesn't cover
-
Stated Use the 'Improve Town for everyone' toggle in Settings → Privacy. It doesn't cover de-identified or aggregated data, Performance Data, or Memory Data kept de-identified after termination.
What the policies say (4 quotes)
"If you ever want to help improve Town, you can opt in with the **Improve Town for everyone** toggle in **Settings** → **Privacy**."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"You may opt-out of our use of your personal information for AI training purposes by using the toggle feature provided in your account settings."
Privacy Policytown.comcaptured 2026-11-08"We may use this anonymous or de-identified data and share it with third parties for any lawful business purposes."
Privacy Policytown.comcaptured 2026-11-08"In addition, Town may aggregate and de-identify data or create synthetic data derived from your use of the Services, and Town may use such aggregated and de-identified data for any lawful business purpose, including to improve, develop, and enhance Town’s products and services"
Terms of Servicetown.comcaptured 2026-11-08 - Human review Whether people read conversations
-
Stated Docs: staff see data only with your support approval, or a CEO/CPO-authorized look during incidents. For Google data, the policy also permits human reading for security or legal compliance.
What the policies say (3 quotes)
"**No one at Town can access your data by default** — it’s encrypted at rest and in transit. Access only happens two ways: you approve it for support, or our CEO/CPO authorizes a one-time look at a single session during a security incident (very rare)."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"**No Town team member has production database access.** Full stop."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"we do NOT allow humans to read the data unless we obtain your affirmative agreement to view specific messages, files, or other data, it is necessary of security purposes or to comply with law, or the data is aggregated and used for internal operations."
Privacy Policytown.comcaptured 2026-11-08 - Memory Remembered facts and profiles
-
Stated The Town Wiki holds your profile, preferences, style, work patterns, goals and projects. You can view and edit it. Memory Data can't be exported and may persist de-identified.
What the policies say (5 quotes)
"Your profile, preferences, communication style, and work patterns — plus the goals and projects moving through your work and life. It’s a living synthesis that your Townie updates over time, and you can correct anything that’s out of date."
Wiki \u2013 Town Docstown.comcaptured 2026-11-08"Your Wiki is maintained in the background, using your profile, saved memories, and recent activity."
Wiki \u2013 Town Docstown.comcaptured 2026-11-08"Edit any section yourself, or use **Edit with chat** to have your Townie rewrite it. You’re not the only editor, though: your Townie maintains it and makes it better over time. See exactly what changed under **Recent updates**."
Wiki \u2013 Town Docstown.comcaptured 2026-11-08"Memory Data constitutes Your Content; provided, however, that you acknowledge that Memory Data is stored in a format integral to the Services and may not be exported or transferred to third-party platforms."
Terms of Servicetown.comcaptured 2026-11-08"Town may generate and store information derived from your interactions with the Services, including your preferences, communication styles, and working patterns (collectively, **“Memory Data”**) to personalize the Services."
Terms of Servicetown.comcaptured 2026-11-08 - Connected apps Email, calendar, drive
-
Stated Town may access and store email bodies, subjects, attachments, metadata and correspondents' details. Storage is limited to 'what's necessary'. Disconnecting withdraws consent, and created information is removed within 30 days.
What the policies say (6 quotes)
"When you connect your email account(s) to the Service, this may include message content (such as body text, subject lines, and attachments), sender and recipient information (such as names and email addresses), email metadata (such as dates, timestamps, and threading information), and other data contained within your email communications."
Privacy Policytown.comcaptured 2026-11-08"By linking a Third-Party Account, you authorize Town to access, and where applicable store, information from your Third-Party Account to the extent necessary to provide the Services."
Terms of Servicetown.comcaptured 2026-11-08"You may withdraw your consent at any time by deleting your account or, as to each third-party service account, by disconnecting those third party service accounts from the Service. Any information you have used the Service to create will be removed from the Service within 30 days, subject to the subsection in the Your Choices section below titled “Retention Period for Personal Information.”"
Privacy Policytown.comcaptured 2026-11-08"we may process personal information of third parties contained in those communications, such as the names, email addresses, and other information of individuals with whom you correspond."
Privacy Policytown.comcaptured 2026-11-08"You can disconnect any integration anytime from your settings — or revoke Town’s access directly from your Google, Slack, or Notion security settings."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"Reads docs from Drive, Notion, and other sources for task context. Files are not stored beyond what's necessary."
Security, privacy, and approvals by designtown.comcaptured 2026-11-08 - Agent actions Actions taken, browsing, credentials
-
Stated Defaults conflict: one page says approval is required by default, but the docs say your threads and routines start in auto mode. Routines keep full action logs. Tokens are extra-encrypted.
What the policies say (7 quotes)
"Town never sends an email, modifies a document, or takes a destructive action without your explicit approval — unless you configure it otherwise."
Security, privacy, and approvals by designtown.comcaptured 2026-11-08"Your own threads and threads with people you trust start in auto mode: your Townie goes ahead with what you explicitly asked for, and asks first when an action goes beyond your request or looks unsafe."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"Routines start in auto mode too, and run without asking; switch a routine to **Human in the Loop** to review actions other people would see."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"That list is opt-in and off by default — you choose exactly who it covers."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"Full action log for every routine. Clear reasoning for every step. Complete transparency into what happened, when, and why."
Security, privacy, and approvals by designtown.comcaptured 2026-11-08"On top of that, especially sensitive items — like the access tokens for your connected accounts — get an extra layer of application-level AES-256 encryption."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"You, and not Town, will be solely responsible for your use of the Agents, including any of the Outputs and decisions made or actions taken (whether by you or an Agent) based on any Input or Output."
Terms of Servicetown.comcaptured 2026-11-08 - Your inputs Who owns them
-
Stated You keep all rights in your content, including data pulled in from connected services. Town claims no ownership.
What the policies say (3 quotes)
"You retain all right, title, and interest in and to Your Content, including any Outputs generated through your use of the Services."
Terms of Servicetown.comcaptured 2026-11-08"Any content or information uploaded or transmitted to the Services by you or users, including from Third-Party Services (defined below) and any Outputs generated by or through the Services, constitutes **“Your Content.”**"
Terms of Servicetown.comcaptured 2026-11-08"Everything you bring into Town — emails, documents, prompts, outputs — remains yours. We claim no ownership over your content."
Security, privacy, and approvals by designtown.comcaptured 2026-11-08 - Outputs Who owns them
-
Stated You own Outputs. Town owns Performance Data, which includes agents' step-by-step execution traces, tool calls and intermediate reasoning, though Town may use it only in non-identifying form.
What the policies say (3 quotes)
"Inputs and Outputs are both Your Content."
Terms of Servicetown.comcaptured 2026-11-08"the step-by-step execution traces and task trajectories generated by Agents in the course of performing tasks, including sequences of actions, tool invocations, intermediate reasoning steps, and system-level operational data) (**“Performance Data”**). As between Town and you, all right, title, and interest in the Performance Data, and all intellectual property rights therein, belong to and are retained solely by Town."
Terms of Servicetown.comcaptured 2026-11-08"Town may use Performance Data to operate, improve, analyze, and support the Services and for other lawful business purposes, provided that the Performance Data will not identify you or your Confidential Information or any user."
Terms of Servicetown.comcaptured 2026-11-08 - License you grant Scope, and whether it is perpetual
-
Stated You grant a non-exclusive, worldwide, royalty-free license for the Term, only to provide the Services. It's not perpetual, but de-identified Memory, aggregated data and Feedback remain usable.
What the policies say (3 quotes)
"You hereby grant to Town a non-exclusive, worldwide, royalty-free and fully paid-up license during the Term (as defined below) to access and use Your Content to provide the Services and any accompanying support to you as set forth in this Agreement."
Terms of Servicetown.comcaptured 2026-11-08"Town may use and incorporate such Feedback in connection with its business, products and services without restriction or consideration to you."
Terms of Servicetown.comcaptured 2026-11-08"All provisions of this Agreement which by their nature should survive, will survive termination of the Services, including without limitation, ownership provisions, warranty disclaimers, and limitations of liability."
Terms of Servicetown.comcaptured 2026-11-08 - Sharing Model providers, subprocessors, ads
-
Stated Content goes to model providers: Anthropic (primary), OpenAI, Bedrock, Gemini/Vertex, OpenRouter, ElevenLabs, Vapi (Terms only). Contracts bar provider training, with carve-outs. Ad cookies may count as a 'sale'.
What the policies say (6 quotes)
"Large language model processing for assistant and routine features. Primary model provider."
AI Model Providers \u2014 Towntown.comcaptured 2026-11-08"The AI Tools are powered by foundation models provided by third-party providers, which may include Anthropic, OpenAI, OpenRouter, Amazon Bedrock, Vertex AI Platform (Google Cloud), ElevenLabs, and Vapi."
Terms of Servicetown.comcaptured 2026-11-08"Town's agreements with AI model providers contractually prohibit them from using customer inputs or outputs for model training."
AI Model Providers \u2014 Towntown.comcaptured 2026-11-08"we contractually require such providers not to use your personal information to train their own AI models except as necessary to provide services to us."
Privacy Policytown.comcaptured 2026-11-08"our use of third-party advertising cookies and pixels for interest-based advertising, as described in this Privacy Policy, may constitute a “sale” of personal information or “sharing” of personal information for cross-context behavioral advertising, as those terms are defined under applicable state law. The categories of personal information involved are the Device data and Online activity data described above."
Privacy Policytown.comcaptured 2026-11-08"We never sell your data."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08 - Where data lives Regions and residency
-
Stated Data is hosted in the US on Convex and AWS. There's no EU data residency, and international transfers rely on SCCs in the DPA.
What the policies say (2 quotes)
"Town is **US-hosted** (Convex and AWS). We don’t offer EU data residency today. International data transfers are covered by the Standard Contractual Clauses (SCCs) in our [DPA ](https://www.town.com/dpa)."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"This means that, if you use the Service, your personal information will necessarily be accessed and processed in the U.S. It may also be provided to recipients in other countries outside of your home country."
Privacy Policytown.comcaptured 2026-11-08 - Enterprise controls Retention settings, DPA, SSO
-
Stated A Team admin may access, monitor, restrict or remove your content, and may disable your work-email account if you're removed. Organization-level controls are listed under enterprise.
What the policies say (2 quotes)
"If you are a member of a Team administered by an Organization, you acknowledge that the Team administrator may have the ability to access, monitor, restrict, or remove Your Content within the Team, and may control your access to certain features of the Services."
Terms of Servicetown.comcaptured 2026-11-08"where the user’s account is associated with a work email address provided by or through the Organization, the user’s account will be downgraded to the individual tier of the Services, and the user will retain Your Content associated with such account; provided that the Organization administrator may elect to disable such account entirely."
Terms of Servicetown.comcaptured 2026-11-08
Town for Organizations (Enterprise Agreement / DPA customers) Enterprise
- Default retention How long prompts and chats are kept
-
Not stated Not stated in the captured policies. Business-customer data falls outside the privacy policy and is governed by the customer agreement, which isn't captured.
- After you delete How long until it is gone
-
Inferred Inferred: the docs' 30-day account deletion statement isn't limited to individual plans, but an Enterprise Agreement or DPA (not captured) could set different terms. Terminating an Organization disables work-email accounts.
What the policies say (2 quotes)
"**Everything is permanently removed within 30 days.**"
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"any Team member whose account is associated with a work email address provided by or through the Organization will have their account disabled."
Terms of Servicetown.comcaptured 2026-11-08 - Kept longer when Safety flags, legal holds, backups
-
Not stated Not stated for enterprise customers specifically. That would be in the Enterprise Agreement or DPA, neither of which is captured.
- Zero data retention Whether it exists and who can get it
-
Not stated No zero-data-retention offering is described for organizations.
- Trains on your data By default
-
Stated The default for organizations isn't stated. An Organization's training opt-out overrides each member's own setting. Google Workspace data is never used for training.
What the policies say (2 quotes)
"For users under an Organization license (as provided in the Terms of Service), if the Organization’s setting has opted-out of training, this will supersede individual user settings for that Organization."
Privacy Policytown.comcaptured 2026-11-08"we do NOT use Google user data to train machine learning models"
Privacy Policytown.comcaptured 2026-11-08 - Opting out How, and what it doesn't cover
-
Stated There's an Organization-level setting that, once opted out, overrides individual users. How admins reach it isn't described.
What the policy says
"if the Organization’s setting has opted-out of training, this will supersede individual user settings for that Organization."
Privacy Policytown.comcaptured 2026-11-08 - Human review Whether people read conversations
-
Inferred Inferred: the docs' staff-access limits (support with approval, CEO/CPO for incidents) appear to apply company-wide. The Organization's own admin may access members' content.
What the policies say (2 quotes)
"**No Town team member has production database access.** Full stop."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"the Team administrator may have the ability to access, monitor, restrict, or remove Your Content within the Team"
Terms of Servicetown.comcaptured 2026-11-08 - Memory Remembered facts and profiles
-
Inferred Memory Data handling for organizations may be governed by the Enterprise Agreement. Its enterprise-specific terms aren't captured.
What the policy says
"To the extent an Enterprise Agreement has been duly executed by your Organization, Town’s collection, use, and processing of Your Content obtained in connection with your use of the Services pursuant to your relationship with such Organization may be governed by such Enterprise Agreement."
Terms of Servicetown.comcaptured 2026-11-08 - Connected apps Email, calendar, drive
-
Stated Team-level integrations and shared content are stripped from a member's account when they leave or the Organization terminates. Microsoft 365 admins can manage access through Entra.
What the policies say (2 quotes)
"provided, however, that all Team-level integrations, shared content, and Team-level features will be removed from such account"
Terms of Servicetown.comcaptured 2026-11-08"For Microsoft 365 tenants, admins can already manage access via [Microsoft Entra](/docs/admin-setup/microsoft-entra)."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08 - Agent actions Actions taken, browsing, credentials
-
Not stated No enterprise-specific agent logging or approval controls are described beyond the per-agent, per-workflow and per-tool modes available to all users.
- Your inputs Who owns them
-
Inferred Inferred: the Terms' rule that you keep rights in Your Content applies unless the Enterprise Agreement conflicts, since that agreement prevails.
What the policies say (2 quotes)
"then the terms of such Enterprise Agreement will govern your use of and access to the Services and will supersede this Agreement to the extent of any conflict."
Terms of Servicetown.comcaptured 2026-11-08"You retain all right, title, and interest in and to Your Content, including any Outputs generated through your use of the Services."
Terms of Servicetown.comcaptured 2026-11-08 - Outputs Who owns them
-
Inferred Inferred: the standard Terms (you own Outputs, Town owns Performance Data) apply unless the Enterprise Agreement says otherwise.
What the policy says
"You acknowledge and agree that this Agreement is incorporated into any Enterprise Agreement to which you are bound, and the terms of that Enterprise Agreement prevail in the event of conflict with this Agreement."
Terms of Servicetown.comcaptured 2026-11-08 - License you grant Scope, and whether it is perpetual
-
Inferred Inferred: the Term-limited, service-only license in the standard Terms applies unless the Enterprise Agreement changes it. That agreement isn't captured.
What the policies say (2 quotes)
"You hereby grant to Town a non-exclusive, worldwide, royalty-free and fully paid-up license during the Term (as defined below) to access and use Your Content to provide the Services and any accompanying support to you as set forth in this Agreement."
Terms of Servicetown.comcaptured 2026-11-08"the terms of that Enterprise Agreement prevail in the event of conflict with this Agreement."
Terms of Servicetown.comcaptured 2026-11-08 - Sharing Model providers, subprocessors, ads
-
Inferred Inferred: the same model-provider list and no-training commitment cover all customers. The DPA governs processing for Organizations, and the subprocessor list is on a separate, uncaptured page.
What the policies say (2 quotes)
"The following AI model providers may process customer data when delivering Town's product features."
AI Model Providers \u2014 Towntown.comcaptured 2026-11-08"If you are accessing or using the Services on behalf of an Organization, Town’s Data Processing Addendum (**“DPA”**), available at [town.com/dpa](/dpa), is incorporated into and forms part of this Agreement and governs Town’s processing of personal data on behalf of such Organization in connection with the Services."
Terms of Servicetown.comcaptured 2026-11-08 - Where data lives Regions and residency
-
Stated US-hosted only, with no EU residency option and SCCs for transfers.
What the policy says
"Town is **US-hosted** (Convex and AWS). We don’t offer EU data residency today."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08 - Enterprise controls Retention settings, DPA, SSO
-
Stated A DPA, SOC 2 Type 2 and CASA are in place, and SSO/SAML is on the roadmap. SCIM, HIPAA/BAA and 'GDPR' are unavailable. Custom retention and audit logs aren't stated.
What the policies say (6 quotes)
"**SSO / SAML** — on the enterprise roadmap; no committed date yet."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"**SCIM (automated user provisioning)** — not supported and not currently planned."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"**HIPAA / BAA** — not available today."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"**GDPR** — not available today."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"**SOC 2 Type 2 — completed.**"
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"The Organization is responsible for managing Team membership, access controls, and permissions within the Team and for payment obligations associated with the Team."
Terms of Servicetown.comcaptured 2026-11-08
Notes
-
Training statements conflict. The docs say Town's own training is off by default and opt-in, but the privacy policy says Town may train its models and offers an opt-out toggle.
What the policies say (2 quotes)
"Using your data for AI training is off by default"
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08"You may opt-out of our use of your personal information for AI training purposes by using the toggle feature provided in your account settings."
Privacy Policytown.comcaptured 2026-11-08 -
The provider no-training promise is worded differently on each page. The privacy policy carves out training 'as necessary to provide services to us', and the AI providers page allows it if a customer enables it.
What the policies say (3 quotes)
"we contractually require such providers not to use your personal information to train their own AI models except as necessary to provide services to us."
Privacy Policytown.comcaptured 2026-11-08"We configure each provider and routing layer so customer inputs and outputs are not used to train third-party foundation models, unless a customer explicitly enables or instructs that use."
AI Model Providers \u2014 Towntown.comcaptured 2026-11-08"We ensure that our agreements with providers of AI Tools do not permit them to use Inputs to train their models"
Terms of Servicetown.comcaptured 2026-11-08 -
The Terms name Vapi as a model provider, but the AI model providers page doesn't list it. Town can change providers at any time.
What the policy says
"Town may add, remove, or replace third-party model providers at any time, and your continued use of the Services constitutes acceptance of the applicable acceptable use policies of any such providers."
Terms of Servicetown.comcaptured 2026-11-08 -
The Wiki and Memory Data cannot be exported, and after termination Town may keep Memory Data in de-identified form. That sits uneasily with 'permanently remove all data within 30 days'.
What the policies say (2 quotes)
"Memory Data is stored in a format integral to the Services and may not be exported or transferred to third-party platforms."
Terms of Servicetown.comcaptured 2026-11-08"may retain Memory Data in de-identified or aggregated form for product improvement purposes."
Terms of Servicetown.comcaptured 2026-11-08 -
Town owns agent execution traces, including tool calls and intermediate reasoning, as 'Performance Data'.
What the policy says
"As between Town and you, all right, title, and interest in the Performance Data, and all intellectual property rights therein, belong to and are retained solely by Town."
Terms of Servicetown.comcaptured 2026-11-08 -
Despite 'we never sell your data', the privacy policy runs interest-based advertising and session replay, and says ad cookies may legally count as a 'sale'.
What the policies say (2 quotes)
"We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online properties."
Privacy Policytown.comcaptured 2026-11-08"**Session-replay technologies**, such as those provided by third parties that employ software code to record users’ interactions with the Service in a manner that allows us to watch video replays of those user sessions."
Privacy Policytown.comcaptured 2026-11-08 -
Town's total liability is capped at US$100.
What the policy says
"IN NO EVENT WILL TOWN’S AGGREGATE, CUMULATIVE LIABILITY IN ANY WAY RELATING TO THIS AGREEMENT EXCEED ONE HUNDRED U.S. DOLLARS (US\$100)."
Terms of Servicetown.comcaptured 2026-11-08 -
Town's encryption isn't zero-knowledge, so its systems can process your content.
What the policy says
"One honest note: this isn’t “zero-knowledge” encryption. Town’s systems work with your data to actually do tasks for you, so the service can process your content during normal operation."
Trust & Security \u2013 Town Docstown.comcaptured 2026-11-08
Open questions
Questions the captured policies leave unanswered, and where the answer probably lives.
What exactly happens to already-indexed or stored email, calendar and Drive data when one integration is disconnected. The security page lists the FAQ 'What happens if I disconnect an integration?' but its answer isn't captured. Likely answered by an expanded security FAQ or the docs' integration pages.
How long security/audit records, legal-hold data and backups are retained after the 30-day deletion. Likely in the DPA (town.com/dpa) or the Trust Center (trust.town.com).
How long routine action logs and conversation/thread history are kept. Likely in /docs/safety/modes-approvals or /docs/safety/security.
Which training default actually applies (opt-in per the docs vs opt-out per the privacy policy), and whether the toggle covers Wiki/Memory Data. Likely in Settings → Privacy help docs or a future privacy-policy update.
How saved memories are stored and deleted individually. Likely in /docs/features/context-and-memory, which the Wiki page links to.
Enterprise retention, deletion, sub-processor and breach-notice terms. Likely in the DPA (town.com/dpa) and the subprocessor list (town.com/subprocessors).
Whether model providers' own abuse-monitoring retention applies, and for how long. Likely in each provider's commercial terms linked from /ai-model-providers.
Documents read
-
AI Model Providers \u2014 Town
town.com captured 2026-11-08 sha256 b5ebe240bce7 -
Privacy Policy
town.com captured 2026-11-08 sha256 4f044e6d1640 -
Security, privacy, and approvals by design
town.com captured 2026-11-08 sha256 2338cd79f3eb -
Terms of Service
town.com captured 2026-11-08 sha256 4b11109c0602 -
Trust & Security \u2013 Town Docs
town.com captured 2026-11-08 sha256 fec4f6aec456 -
Wiki \u2013 Town Docs
town.com captured 2026-11-08 sha256 e0e1d252337c