Privacy Policy

Last updated: 14 October 2026

1. Who we are

Mawdoo3 is operated by JTTTsolutions, Inc., a Delaware corporation ("we", "us"), whose registered office is 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA. This policy explains what information we collect when you use Mawdoo3, including the Mawdoo3 WhatsApp number, our website (mawdoo3.chat) and app (app.mawdoo3.chat), and the assistant we run for you (together, the "Service"), and what we do with it. Questions: [email protected].

2. Information we collect

When you message Mawdoo3 on WhatsApp

• Your WhatsApp phone number, or the identifier WhatsApp gives us if you use a WhatsApp username.
• Your WhatsApp profile name.
• The messages you send and receive, including text, voice notes, images, documents and locations, with their timestamps and delivery status.

When you message Mawdoo3 on Telegram

• Your Telegram user ID, name and username.
• The messages you send and receive there, including text, voice notes, images, documents and locations, with their timestamps.

When you join and sign in

• Your first and last name and your email address.
• Your birthday and gender, if you choose to give them, so your assistant can address you correctly and remember your birthday.
• The WhatsApp number or email you sign in with, and the one-time code we send to confirm it.
• A cookie that keeps you signed in on this website. It's needed for the site to work, it's cleared when you sign out, and it lapses after 30 days without use. While you confirm a sign-in with a WhatsApp message, a short-lived one holds that step.

When you use your workspace

• Your workspace, on this website once you sign in, shows and lets you change what we hold about you: your name, email and language, your time zone, and when your assistant may message you first (quiet hours and a daily limit).
• Your vault. If you save things there so your assistant can use them for a task (payment cards, logins, passport or ID details, notes, addresses and phone numbers), we keep them encrypted, apart from your assistant's own computer. Your assistant and the AI models see only a description, such as "Visa •••• 4242", never the value itself. Each use of a card, login, ID or note waits for your approval, unless you've chosen otherwise for that item: once per task (after you approve it on a site, it can be used there again for a few hours) or always. Addresses and phone numbers, which aren't secrets, are used without asking unless you choose to be asked. You choose on your vault page, and can change it at any time. We keep a log of each use so you can see what happened, and you can delete any item there at any time.

When your assistant works for you

• What it remembers about you. So you don't have to repeat yourself, your assistant keeps what it learns about you in your conversations: your preferences, the people and places in your life, your plans and routines. After each exchange an AI model picks out the facts worth keeping, and before each message the few that matter are brought back. They're kept on your assistant's own computer, with your reminders and tasks, the files it creates or you send it, and a history of its work. You can ask it what it remembers, or to forget something. Deleting your account deletes all of it.
• Where you are, when you share it. When you send your location, or share it live on Telegram, your assistant keeps your latest position to help you (places near you, directions, pickups). We keep only the latest one, not a history of where you've been. Stop sharing on your phone, or ask your assistant to forget where you are, and it's gone; deleting your account deletes it too.
• Web pages and online sources it visits to complete your requests.
• Files it shares with you as links. When your assistant sends you a link to a file, like a deck, a PDF or a page, we keep that file so the link works. Only you can open it, after signing in, unless you choose to let anyone with the link open it, on the file's page or by asking your assistant. Anyone who has a link can see the file's title and short description, and WhatsApp shows them in the link's preview.
• Accounts you connect. If you connect an account, such as your Google account (Gmail, Calendar, Drive and other Google Workspace apps), your Microsoft account (Outlook mail, calendar and contacts), a work chat (Slack, or Microsoft Teams with a work or school account) or a meeting-notes app (Granola or Fathom), a work tool (GitHub, Linear or Notion) or a booking page (Calendly), your assistant can read and act on the data in it when a task needs it: for example checking your calendar, finding a file, catching you up on a chat or drafting an email. It sends an email, posts or replies in a chat, or changes something in a work tool or a booking only when you've said so or have told it to handle certain things on its own. The first time you connect an account, your assistant also reads what's recent in it once, in the background (for example your recent email, calendar and contacts, your own recent chat messages and the names of your conversations, the titles and summaries of your recent meetings, or your recent issues, pull requests and pages), to learn how you like things done (how you write and how your emails look, who you deal with most and what you usually choose) and to notice anything still waiting on you. It keeps what it learns as preferences in its memory, not copies of your messages, with one exception: your email signature, kept as you use it (for example your name, title and phone number), so the emails it writes for you end the way yours do. You can tell it to stop or to forget any of it at any time. If you ask your assistant to tell you when something changes, such as a pull request, an issue or a page, it keeps your words for that while it's watching and for 7 days after. You choose whether to connect, you approve access on the provider's own sign-in page, and you can disconnect at any time by asking your assistant, in your workspace, or by emailing us. For a work account, your company may be able to see in its own records that the connection exists, and may need to approve it. Disconnecting an account, or deleting yours, cancels that access at the provider where the provider lets us. Where it doesn't (Microsoft, Granola and Fathom), the access stays listed in your account there until you remove it, and when you disconnect, your assistant tells you where.
• Your assistant's own email address. Your assistant has an email address of its own, for what it does for you. It uses it to write to a restaurant or a hotel, to confirm an account it opens on a website for you, or to get a reply. Its emails say it's your AI assistant. We keep the emails it sends and receives, with their attachments, so it can follow up and you can ask about them. Emails you send it from your own email address count as messages from you. Before anyone else's email reaches your assistant, it's checked for scams, for attempts to give it orders and for requests for your private details; one that fails the check is stopped, and your summary says who sent it and why. Before an email your assistant writes leaves, it's checked too. ID numbers, card and bank details, passwords and security codes are never sent that way. You can ask your assistant for its address, or to change it.
• What's new in those accounts. Once you connect an account, Mawdoo3 notices new emails, calendar changes, chat messages and meeting notes so your assistant can tell you about the ones that matter and stay quiet about the rest. For each one we keep a short record: who it's from, the subject or title, a short excerpt, and how it was handled. To judge what matters to you, we also consider your recent chats with your assistant and the preferences you give it. When you disconnect an account, the records from it are deleted.
• Finding times with other people. If you connect with another Mawdoo3 user, your assistant and theirs can ask each other when you're free and suggest a time. Their assistant can do only what you allow, which you set by telling your assistant, and you can see it, pause it or end it in your workspace. When our service answers for you, it shares only the times you're free, from the calendars and hours you allowed, never what's in your calendar. A suggested time reaches you as a question, and goes into your calendar only if you ask, or a rule you set says so. If you remove someone, their assistant can no longer reach yours, but what it was already told stays with them.
• Messages, questions and files between assistants. If you connect with another Mawdoo3 user, your assistants can pass messages, questions, files, reminders, shared lists and plans between you, only when you ask or a rule you set allows it. A message you ask us to pass word for word is shown to them exactly as you wrote it, with your name. All of it passes through our servers and isn't end-to-end encrypted. A file you send is copied into their files; if you later remove them, or delete your account, what they received stays theirs. We keep the words of a message for 7 days and the record of who sent what for 90.
• Connecting by phone number. You can ask to connect with someone by their number. We never tell you whether a number is on Mawdoo3. If it isn't, we keep your request for 30 days as an unreadable code, and if that person joins, it reaches them. The person you ask sees your name and your whole number, and so do the people you are connected with.
• People who aren't on Mawdoo3. Your assistant can make a link for someone who isn't on Mawdoo3 to pick one of your free times, or, in a plan with several people, to say which of the times you suggested work for them. The link shows your first name, what the meeting is and those times, and nothing else. When they pick a time, we add the meeting to your calendar and, if they give their email, send them the invitation from your calendar, so you'll see their name and email there. In a plan with several people, the meeting goes in your calendar when you ask, and a guest who gave an email gets the invitation then. We keep what they gave us for 30 days after the meeting and use it for nothing else.
• Invitations. We keep who invited whom, and how many people joined through each of your invite links, for as long as you have an account.

When you use this website

• Technical information such as your IP address, browser type and the pages you open. We use it to run and protect the site (for example, to limit repeated sign-up attempts).
• This site stores your language and your light or dark choice in your browser. Apart from the sign-in cookie above, it doesn't use cookies, and it does not use advertising cookies or trackers. Fonts are loaded from Google Fonts, which receives your IP address when your browser fetches them.

Please don't send Mawdoo3 passwords, full card numbers or other highly sensitive information unless a task truly needs it.

3. How we use it

• To provide the Service: answer your messages, run your assistant, carry out the tasks you ask for, and send you the messages you asked for (such as reminders).
• To manage the waitlist and tell you when your spot opens.
• To contact you about your account, for example by email.
• To confirm it's you when you sign in, and to let you manage your details and saved items on this website.
• To keep the Service safe and working: preventing abuse, fixing problems and securing our systems.
• To understand, in aggregate, how the Service is used so we can improve it.
• To comply with the law.

We do not sell your personal information, and we do not use your conversations to train AI models of our own.

Information from accounts you connect, including data received from Google APIs, is used only for your assistant's work for you: to do what you ask, and to learn your preferences as described above. We don't sell it, use it for advertising, or use it to train AI models, and people at JTTTsolutions, Inc. don't read it unless you ask us to, it is needed for security, or the law requires it.

Our team reads your chat with your assistant only when you ask for help (for example by sending "human", or asking your assistant to reach the team), and only what that help needs, or when the law requires it.

4. Who we share it with

We share information only as needed to run the Service:

• WhatsApp (Meta). Your messages travel through the WhatsApp Business Platform, which Meta operates. Meta's own terms and privacy policy also apply to your use of WhatsApp.
• Telegram. If you use Mawdoo3 on Telegram, your messages travel through Telegram's Bot API. Telegram's own terms and privacy policy also apply.
• Sign-in codes. Codes are sent by text message through Telnyx, or, for numbers in the Middle East, through Message Central by text message or WhatsApp. Each receives your number and the code, only to deliver it.
• AI models. Your assistant's replies and tasks, and picking out what it remembers about you, are handled by an open AI model that runs on our own GPU servers; your conversation is not sent to an outside AI provider for that. For voice notes (turning speech into text and text into speech), for pictures you ask it to make, and for indexing what it remembers, we send only what that step needs to AI model providers, accessed through OpenRouter. They process it to provide their service to us.
• Connected accounts. Connections to accounts such as Google, Microsoft, Slack, Granola, Fathom, GitHub, Linear, Notion and Calendly are handled by Composio, which keeps the access you grant and carries out your assistant's requests to those services. The sign-in page may show Composio's name.
• Deciding what's worth your attention. To judge which new emails, calendar changes, chat messages, meeting notes and updates from your work tools and bookings are worth telling you about, we send a short excerpt of each (the sender, the subject and the start of the text), with a little context about you, to TypeSafe, whose AI model classifies it. The same goes for emails to your assistant's own address, which TypeSafe also checks for scams and for attempts to give it orders or get your private details, and for emails your assistant is about to send, which it checks for private details before they leave. TypeSafe also reads the text of each message you send your assistant, to pick a fitting reaction while it works. TypeSafe processes it to provide its service to us and does not use it to train its models. It also checks what other people's assistants send yours (messages, questions, the names and captions of files, reminders, list items, and what a suggested time is about) and what someone leaves on a pick-a-time page, for attempts to give your assistant orders, to pressure or deceive you, or to get your private details, before your assistant sees them; and what your assistant sends theirs, for private details, before it leaves. It doesn't read the files themselves.
• Your assistant's email. Emails to and from your assistant's own address go through Resend, which sends and receives them for us in Ireland. We keep them, with their attachments, on our own servers.
• Looking things up. When your assistant searches for you (the web, places, products, flights, papers or news), the search itself goes to Serper and SerpApi, which return Google's results. They receive the search words, not your name or number.
• Files shared as links. Files your assistant shares with you as links are stored on our own servers.
• Your assistant's browser. When your assistant uses a website for you, the page opens in a browser of its own on our servers. A value from your vault is entered into the page there only for a use you approved, and the browser keeps no recordings.
• Hosting providers. Our servers, your assistant's computer, the AI model and your vault run on machines we rent from RunPod. Our domain's addresses are managed by Cloudflare, and Cloudflare Turnstile checks that a sign-in comes from a person, not a bot.
• Services your assistant uses for you. When your assistant searches the web or uses another service to complete your request, it shares with that service what the request needs.
• People you connect with. When you ask to connect with another Mawdoo3 user, they see the name you go by and your whole number, and so do the people you're connected with. Their assistant gets only what you allow or say yes to: the times you're free, your answers, and the messages, files and other things you send them.
• Legal and safety. When required by law, or to protect the rights, safety and security of our users, the public or JTTTsolutions, Inc.
• Business changes. If JTTTsolutions, Inc. is involved in a merger, acquisition or sale of assets, your information may be transferred as part of it, under this policy.

5. How long we keep it

We keep your information while your account is active and for as long as we need it to provide the Service. Records of the new emails, calendar changes, chat messages and meeting notes we noticed for you are kept for 90 days. Emails to and from your assistant's own address are kept for 12 months; the original form they arrived in, and emails the check stopped, for 30 days. Between your assistant and other people's, we keep a request to connect and its answer for 90 days, and a request to a number that isn't on Mawdoo3 for 30 days, as an unreadable code; what was asked and answered (the times, the places, who does what) for 30 days; the words of a message, a question, an answer or a list item for 7 days, and a reminder's until it's delivered and 7 days after; the record of each exchange and how it ended for 90 days; and the record of a file for 90 days after it was delivered (the file itself is in each person's own files). We keep who invited whom while the person who invited them has an account. What someone who isn't on Mawdoo3 gave on a pick-a-time page is kept for 30 days after the meeting. Our records of what each assistant did are kept for 90 days; what it cost us is kept after that only as daily totals, with no one's details in them.

When you delete your account (in your workspace, under Preferences, or by asking us), we delete it right away, everywhere we keep it: your account (name, email and number, and your birthday and gender if you gave them), your chat history, your assistant with its computer, memory, reminders and files, your vault, your files and their links, your trusted people (the people you connected with, what they could do, the requests, messages and files between you, your pick-a-time links with what visitors gave on them, and your invite links with the record of who joined through them), what Mawdoo3 noted from your connected accounts, the sites your assistant's browser was signed in to, your assistant's emails, and our logs of your messages. Your assistant's email address is retired and never given to anyone else. We also cancel your assistant's access to your connected accounts at the provider where the provider lets us; where it doesn't (Microsoft, Granola and Fathom), the access stays listed in your account there until you remove it. Then we check that nothing is left. It usually takes a minute, and at most a day. Copies in our backups are gone within 30 days. If you write to Mawdoo3 again, you start fresh.

What stays: a record that an account was deleted on that date, with no name, number or content (only a one-way code of the number, so we can confirm it was deleted if you ask); your WhatsApp chat on your phone, and what WhatsApp keeps under its own policies; your Telegram chat on your phone, and what Telegram keeps under its own terms; what the assistants of people you were connected with were already told, and the messages and files in their chats, which stay with them; and what the service providers that processed parts of it to serve you keep under their own terms. We may also keep limited records where the law requires it.

A sign-in code works for a few minutes. A sign-in on this website lasts until you sign out or 30 days pass without use. Items in your vault stay until you delete them: you can delete each one on the vault page, and the encrypted copies in our backups go as those roll over.

A file shared as a link stays until you delete it, or until 12 months go by without anyone opening or changing it. A link open to anyone closes after 30 days unless you choose otherwise. A deleted file can be restored for 7 days, then it's gone; its record leaves our backups within 30 days.

6. Your choices and rights

• Delete your account and data: in your workspace, under Preferences, or see how to delete your data for the other ways.
• Your details: change your name, email, language, time zone and message limits in your workspace.
• Your saved items: see, add and delete what's in your vault, and choose when each item may be used, on the vault page.
• Your files: see, share and delete the files your assistant shared with you as links on your files page.
• Stop messages: send "stop messaging me" to Mawdoo3 on WhatsApp or Telegram, or block the number or the bot.
• Access or correct your data: email us at [email protected].

Depending on where you live, you may have further rights, such as to object to or restrict processing, to receive your data in a portable form, or to complain to your data protection authority. Contact us to exercise them. We won't treat you differently for doing so.

7. Security

We use reasonable technical and organizational measures to protect your information. Each person's assistant runs in its own separate computing environment. No system is perfectly secure, and an assistant that browses the web and handles files carries its own risks, so please share sensitive information with care.

8. International transfers

Our servers are located in the European Union (Sweden), and some of our providers process data in other countries, including the United States. When your information moves across borders, we rely on appropriate safeguards where the law requires them.

9. Children

Mawdoo3 is for people aged 18 and over. We do not knowingly collect information from anyone younger. If you believe a minor has given us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy. When we make a material change, we will tell you on WhatsApp or by email before it takes effect. The date at the top shows when it last changed.

11. Contact

JTTTsolutions, Inc. · 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA · [email protected]