Legal
Privacy Policy
Effective September 1, 2026
This policy explains what Sutro, Inc. collects, how we use it, and the choices you have. It covers our website and the Sutro service.
Information we collect
Account details, like your name, work email, and company. Workspace content, like workflows, rules, run logs, and the documents Sutro reads from tools you connect. Usage data, like pages visited and features used.
How we use it
We use account details and usage data to run, secure, support, and improve the service and to send service messages. We use workspace content only to perform the work you’ve set up, to provide support you request, and to keep the service secure.
What we don’t do
We don’t sell personal information. We don’t use workspace content or runs to train our models. We don’t share personal information with third parties for their direct marketing.
Who we share it with
Vendors that help us run Sutro, such as cloud hosting, model providers, and email delivery, under contracts that limit their use of your data. We may disclose information if the law requires it.
Customer data belongs to your company
When your company uses Sutro, it controls the workspace content. Requests about that content go to your company’s administrator.
How long we keep it
Run logs are kept for the period your plan allows or your administrator sets. When a workspace is deleted, we delete its content within 30 days. Backups expire on their normal schedule.
Security
We encrypt data in transit and at rest and limit access to people who need it. No system is perfectly secure. If a breach of personal information occurs, we’ll notify affected account owners as required by law.
Cookies and Do Not Track
We use cookies that keep the site working and measure how it’s used. You can block cookies in your browser. We don’t respond to Do Not Track signals, because there’s no common standard for them. Other than our analytics provider measuring use of our site, we don’t allow third parties to collect personally identifiable information about your online activities over time and across other websites.
Your choices
To access, correct, or delete personal information in your account, email privacy@usesutro.com. We’ll respond within 30 days. Requests about workspace content go to your company’s administrator.
Children
Sutro is for businesses and isn’t directed to children under 16.
Changes
If we change this policy, we’ll update the date above and, for material changes, notify account owners by email.
Contact
Sutro, Inc. · PO Box 4417, San Francisco, CA 94120 · privacy@usesutro.com