Privacy Policy

Effective 7 August 2026 · Shovel Labs LLP

Stevens is a personal assistant for your household, currently in an invite-only beta. To do its job it reads, with your permission, the sources you connect — above all your email — and turns what it finds into briefs, answers and reminders. This policy says what we collect, why, who processes it, and the choices you have. It is written to be read.

1 · Who we are

The Stevens app and the website shovel.company are operated by Shovel Labs LLP, LLPIN AAX-1370, registered office: Om Chambers, 648/A, 4th Floor, Binnamangala 1st Stage, Indiranagar, Bangalore — 560038 (“Shovel”, “we”, “us”). Privacy questions and requests: contact@shovel.company.

2 · Consent

By creating an account and by connecting each source, you consent to the processing this policy describes. Each source (for example Gmail) is connected through that provider’s own permission screen and can be disconnected at any time in the app (Manage connections); disconnecting stops syncing and revokes our access. You can also withdraw any consent by writing to us. Withdrawal does not affect processing already done.

Beta quality review. During the beta, you agree that a small number of authorised Shovel team members may review your conversations with Stevens — including content Stevens produced from your connected sources — to diagnose mistakes and improve quality. Reviews happen under confidentiality obligations and access controls, and this access ends when the beta ends or when you delete your account.

3 · What we collect

We show no ads, we do not sell personal data, and we do not use your data for advertising or cross-app tracking. Some extracted content (bills, card statements) is financial information and therefore sensitive personal data under Indian law; we treat it accordingly (Section 7).

4 · Why we process it

• To run the product — compose your brief, answer questions over your own documents, keep reminders, track orders and bills, and speak with you by voice.
• To operate accounts and households — authentication, the sharing you have chosen, and support.
• To keep Stevens reliable and honest — crash diagnosis, performance measurement, and the beta quality review described in Section 2.
• To meet legal obligations and respond to lawful requests of Indian authorities.

Promotional messages: we currently send none. If we introduce them, they will be opt-in, separate from service messages, and every one will carry a simple opt-out.

Model training: we do not train AI models on your personal data. The AI providers we use process it under commercial API terms that do not permit them to train on it. If we ever want to use your data to improve models, we will ask you first, separately, and you will be able to say no.

De-identified data: we may use fully de-identified, aggregated data to understand and improve Stevens, and we will not attempt to re-identify it. Google-sourced data is used only as Google’s Limited Use requirements permit (Section 5).

5 · Google user data — Limited Use

Stevens’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Gmail data is used only to provide the features you see, is never used for advertising, is never sold, and is never used to train generalised AI or machine-learning models. It is transferred to third parties only as needed to provide those features (Section 6), for security, or to comply with law. Humans do not read your Gmail data except with your consent (including the beta quality review you agree to in Section 2), for security or abuse investigation, to comply with law, or in de-identified, aggregated form.

6 · Who processes data for us

Each processes data only to provide its service to us. We may also disclose data where Indian law requires it, or as part of a merger or acquisition, with notice to you. No other sharing happens.

7 · Security

We follow reasonable security practices and procedures as required by the Information Technology Act, 2000 and its rules, including the standard applicable to sensitive personal data such as financial information. Data is encrypted in transit, stored with reputable cloud providers that encrypt data at rest, and access inside Shovel is restricted to those who need it. Our processors run in data centres outside India (primarily the United States); by using the service you consent to processing in those locations. If a data breach affects you, we will notify the appropriate authorities and affected users as applicable law requires.

8 · Retention and deletion

We keep your data while your account is active, because Stevens’ memory of your household is the product. When you disconnect a source, syncing stops and our access is revoked.

Deleting your account: in the app (Control Centre → Delete Account), at shovel.company/stevens/delete-account, or by emailing contact@shovel.company from your registered contact. Deletion takes effect immediately: your account is deactivated, connected sources are disconnected and their access tokens revoked, scheduled reminders stop, and all use of your data by the service ends. Remaining records are kept in a deactivated state, inaccessible to the service, protected as described in Section 7, and are removed in the ordinary course of system maintenance, except records we must retain under law.

9 · Your choices and rights

You can see and fix your profile in the app, disconnect any source at any time, delete your account as above, and write to us for a copy or correction of the personal data we hold about you. We honour the rights available to you under applicable Indian law, including, as the Digital Personal Data Protection Act, 2023 and its Rules come into force, the rights they provide.

10 · Children

Stevens is for adults. You must be 18 or older to create an account. We do not knowingly process children’s personal data; if we learn we hold any, we will delete it.

11 · AI-generated content

Stevens’ answers, briefs and summaries are generated by AI over your data. They can be incomplete or wrong. Verify amounts, due dates and statuses against the underlying document — Stevens shows its sources so you can. You can report a problematic response in the app; reports feed our quality process.

12 · Changes and contact

We will notify you in-app of material changes and update the date above. As India’s data-protection rules phase in (through May 2027), we will update this policy and our practices to meet them. Questions: contact@shovel.company.