Security & Privacy

1. We Never Access Your Integration Data

SuperIntern connects to your email, calendar, and other platforms through integrations. All access is agent-only — our team never reads, processes, or retains your raw data beyond what your agents need to complete a task.

We use SuperIntern for our own workflows every day. Your data is yours — we treat it exactly the way we treat our own.

2. Compliance & Certifications

We take compliance seriously and are actively pursuing the following certifications and frameworks:

• GDPR — We are committed to full General Data Protection Regulation compliance. See our Privacy Policy for details on how we handle personal data.
• SOC II — Certification is currently in progress. We will update this page once complete.

3. Data Retention & Automatic Deletion

We keep only what's necessary, for only as long as it's needed.

• Conversations (chat history): Kept for the lifetime of your account unless you delete them. Conversations older than 90 days may be automatically removed.
• Cached platform data (e.g. emails, calendar events, Slack messages): Automatically deleted after 90 days. These are short-lived caches that exist only to give your agents the context they need.
• Other artifacts: Temporary data produced during task execution (intermediate outputs, tool-call logs, etc.) is automatically purged and never retained long-term.

4. Double-Layer Encryption for Platform Data

Cached integration data (such as emails, calendar events, and messages fetched during a session) is protected by a second encryption layer on top of standard at-rest encryption. This means:

• Our team cannot read them — even if they have access to the underlying database.
• Decryption only happens at runtime — data is decrypted only when your AI agent needs it to complete a task.
• This cached data exists solely to provide context to agents — it is not used for any other purpose.

5. Debugging & Access Control

We never access user sessions without explicit permission:

• If we need to investigate an issue, we will ask you to generate a share link — limiting our access to that single session only.
• We will never proactively access your data without your consent.
• All internal access is subject to a formal audit process.

6. Infrastructure & Storage

All user data is hosted on Google Cloud — one of the world's most secure and compliant cloud platforms.

• Encryption at rest: AES-256
• Encryption in transit: TLS 1.2+
• Access controls: Role-based access with multi-factor authentication for all internal systems
• CDN & DDoS protection: Cloudflare web application firewall

For a full list of our infrastructure providers and sub-processors, see our Sub-processor List.

7. Your Data Controls

You own your data and can manage it at any time. Here's how:

Delete All Your Data

Request full deletion of your account and all associated data at any time:

Delete Individual Chat Sessions

Delete any individual conversation directly from the SuperIntern interface:

1

Open the SuperIntern web app

Go to app.superintern.ai and navigate to your conversation list on the left sidebar.

2

Hover over the conversation you want to delete

Find the chat session you wish to remove from the sidebar.

3

Click the three-dot menu (⋯)

A menu icon will appear when you hover. Click it to open the options menu.

4

Select "Delete"

Click "Delete" from the dropdown menu to permanently delete that conversation. All data is immediately removed from our systems.

8. Related Documents