Edmond — Privacy policy

Our commitments

Edmond does nothing without your approval. It prepares, you approve every step. You stay in control, and a test proves it with every release.
No account in your name at the AI provider. Edmond calls the AI model (Anthropic) under its own business account: you have neither an account nor a profile there.
No training. Anthropic does not train its models on the data Edmond sends (commercial terms of its API). AssemblyAI transcribes your voice notes on servers in the European Union, without training, and the transcript is deleted there as soon as Edmond has read it.
Only what is needed. Gmail: read and drafts; Edmond contains no code able to send from your mailbox, and a test proves it with every version. Outlook: never the right to send. Calendar: never a guest. Google Drive: only the files created by Edmond or that you pick for it. Nothing more than the task needs.
Encrypted, stored in Singapore. The database (Supabase) is encrypted at rest (AES-256) and in transit (TLS). Each company's data is kept separate from the others', and an automated test checks it. The robot (Render) and the portal functions (Netlify) run in Singapore. The AI model (Anthropic) and the keeper of your authorisations (Nango) are in the United States.
Your access. The authorisations that connect your tools are kept encrypted at Nango, never by Edmond. Your card stays with Stripe.
The fuse. Disconnecting a tool erases what Edmond read from it. "Erase what Edmond read", from your space, at any time. Account deletion on simple request, within 30 days.
Certified providers. According to their public compliance pages (checked on 22 October 2026): SOC 2 Type II (Supabase, Render, Nango, Anthropic, AssemblyAI); ISO 27001 (Supabase, Render, Anthropic); ISO 42001 (Anthropic). Edmond is designed for the GDPR (European Union) and the PDPA (Singapore), with a Data Processing Agreement and the list of sub-processors.

In plain words: Your data. The tests that prove these commitments, at every publication: the proofs.

Who we are

Edmond is an assistant for sales representatives, provided by Monte Cristo APAC Pte. Ltd. (UEN 202620688D), 261 Waterloo Street, Waterloo Centre #03-036, Singapore 180261. It prepares e-mail drafts and appointments for you, and files your expense receipts. Edmond is in a test phase (beta) until 20 November 2026, then by subscription (see the Terms of use).

Data protection officer (DPO): Matthieu Chapoutier — hi@youredmond.com. Your data is processed in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and, for our European customers, the GDPR.

Edmond's promise

Edmond does nothing without your approval: it prepares, you approve every step. You stay in control, and a test proves it with every release. Edmond prepares drafts: it never sends an e-mail, a message or an invitation to your clients or on your behalf, it never deletes your data and it never pays for anything. This limit is written into its code. Edmond only ever communicates with you: in your Telegram or WhatsApp conversation, and through fixed-text service e-mails sent to your own address: three at most (a welcome with the link to your space, then two reminders if something is missing), and the link to your space when you ask for it. Never a marketing e-mail.

The data Edmond reads, and why

Edmond only accesses the tools you connect yourself, and only with the rights shown when you connect them. You can withdraw this access at any time.

Your Google account: your e-mail address and name, to identify the connected account.
Gmail: reading your e-mails, to understand what you are being asked and prepare a reply; creating drafts, which you review and send yourself. Edmond never uses Gmail to send.
Google Calendar: reading and creating events in your calendar, without ever inviting anyone.
Google Drive: only the files Edmond creates for you (for example the folder and spreadsheet of your expense receipts). Edmond does not see your other files.
Microsoft 365 (if you connect it): Outlook — reading your e-mails and creating drafts, never sending (Edmond does not ask for the right to send); Outlook Calendar — reading and creating events, without ever inviting anyone; OneDrive — Microsoft grants access to your files, and Edmond only uses the ones it creates for you.
CRM (Pipedrive, Salesforce, HubSpot): searching for your customers, creating a record when none exists, adding a meeting-report note. Edmond deletes nothing and creates no activity or appointment in your CRM.
Dropbox: only Edmond's app folder, for your expense receipts.
Granola (meeting notes): reading your notes and transcripts, to prepare a debrief and a follow-up draft.
WhatsApp (if you link it): as with Telegram, the messages, photos, documents and voice messages you send to Edmond, in order to answer them.
Business cards and contact book: the cards you photograph (name, company, role, contact details) and the contacts you import or dictate, kept in your contact book; you can export it at any time.
Trips: those found in your confirmations and calendar, or that you tell or show Edmond (ticket, booking); if you give them, your nationality and your passport's expiry date, for arrival cards and validity alerts; for your loyalty programmes, their name and at most the last four characters of the number, never the full number.
The profile written by your AI (if you paste it): read to suggest a profile to you, saved only after your ✅; the customers named in it are never kept.
Telegram: the messages, photos and voice messages you send to Edmond, for example a photo of a receipt or a dictated meeting report, in order to answer them.

What Edmond keeps from your Google data, and for how long

Edmond does not store your e-mails. When you ask for a draft, Edmond reads the e-mail and its thread, sends the relevant text to our AI provider (Anthropic) to prepare the draft, and creates the draft in your Gmail — the draft lives in your Gmail, not on our servers. Edmond keeps only compact extracts: the identifiers of e-mails it has already read and the last exchanges of your conversation with Edmond, for 30 days at most; and your trips (flights, hotels, trains), until 30 days after the end of each trip. The authorisations that connect your Google account are stored encrypted by Nango and never by Edmond. Your calendar events and the files Edmond creates stay in your Google account.

Google data: limited use

Edmond's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your Google data is only used to provide you with the service described above.
It is neither sold nor used for advertising.
It is not used to train general-purpose artificial intelligence models.
No one reads it, except with your explicit consent, for security reasons, or where the law requires it.

Who processes your data for us

Edmond relies on technical providers, each for a specific task:

Supabase: database (Singapore region);
Nango: encrypted storage of the authorisations that connect your tools;
Netlify: hosting of this page and of the connection functions;
Anthropic: artificial intelligence model that reads your messages and receipts to prepare drafts; your data is not used to train its models;
AssemblyAI (servers in the European Union): transcription of your voice messages; the transcript is deleted at AssemblyAI as soon as Edmond has read it; no training on your data;
Microsoft: if you connect Microsoft 365, your e-mails, calendar and files stay at Microsoft; Edmond accesses them only with the rights shown when you connect;
Render: hosting of the robot that processes your messages (Singapore region);
n8n: automatic sequencing of Edmond's tasks;
Resend: sending of service emails (welcome, reminders, link to your space); data stored in the United States. What goes through Resend: your email address, the fixed text of the email and your personal links to your space and to Telegram, nothing else;
Telegram: the messaging app through which Edmond talks to you;
Meta Platforms (WhatsApp Business Platform): delivery of WhatsApp messages between you and Edmond, if you choose WhatsApp;
Stripe: payment, invoicing and subscription management; your card details are held by Stripe only, never by Edmond; Stripe also uses the data entered on its pages to detect fraud, including to train its fraud-detection models, under its own privacy policy.

Full list, locations and data concerned: sub-processors. Business customers: Data Processing Agreement.

Security

Exchanges are encrypted (HTTPS). Each company's data is kept separate from the others', and an automated test checks this. Receipt photos are encrypted at rest. The authorisations that connect your tools stay at Nango and are never stored by Edmond.

Retention and deletion

Your data is kept as long as your Edmond account is active. On simple request to hi@youredmond.com, or when you stop using Edmond, it is deleted within 30 days.

You can also withdraw Edmond's access to your Google account at any time from your Google account's permissions page.

Your consents

Before you connect any tool, Edmond's portal asks for your consent to the data processing the service needs. A second box, separate, optional and unticked by default, lets you also accept the analysis of how you use Edmond, to improve the product: declining it changes nothing to the service.

If you accept this second box, Edmond's portal records which of its screens you open, how long you stay on each, and which main buttons you click (for example “Sign in with Google” or “Copy the prompt”). It never records what you type. Withdrawing your consent stops these records at once; those already made are deleted after 90 days.

Each choice is recorded with its date and the version of the text accepted. You can change your mind at any time from your private link; the history of your choices is kept as proof.

Our website

The Edmond Founders website counts its visits anonymously: for each day, page and action (page viewed, button clicked, language changed), a simple total, together with the site that sent the visitor (for example linkedin.com) or the campaign named in the link. No cookie, no visitor identifier and no IP address is stored: these totals cannot be linked to anyone.

Your rights

You can request access to your data, its correction, its deletion or its export, by writing to our data protection officer (DPO): hi@youredmond.com. You can also contact the data protection authority of your country (for example the PDPC in Singapore, or the CNIL in France).

Governing law: the law of Singapore.