FOUNDING BETA
Privacy Policy
Effective September 1, 2026 · Last updated September 1, 2026
Who we are
WarRoom AI — Sarge is operated by Titan Haven Group LLC through its WarRoom Solutions division (“we,” “us”). This Privacy Policy explains what we collect, how we use it, and the choices you have, during the Founding Beta.
Information we collect
• Account & profile: your name, email, password (stored only as a secure hash), and the business intake information you provide. • Workspace content: your conversations with Sarge, memories Sarge stores automatically (see below), Command Brief and Command Board records, and the decisions, risks, and commitments you track. • Files & tool activity: files you upload, analyses, documents and artifacts created, and records of in-app tool actions. • Subscription & billing: your subscription status and a Stripe customer and transaction reference — never your full card number. • Optional Google data: if you explicitly connect Google Calendar or Gmail, the read-only data those connectors surface. • Technical & security logs: device and browser information, IP address, an authentication cookie, and audit, security, and model-usage logs.
How Sarge's automatic memory works
Sarge may automatically identify and store durable business facts from your conversations so it can give you grounded, personalized guidance. This does not require a separate approval step; when Sarge records a memory it shows you an in-app notice, and you can view, correct, or delete any memory at any time in “What Sarge Knows.” Memories are drawn from statements you make — Sarge's own generated text is never treated as a memory source.
How we use your information
To provide Sarge's guidance grounded in your own records; to operate memory and in-app tools; to create and manage your account and subscription; to authenticate you and keep the Service secure; to provide support and debug issues; to comply with law; and to produce deidentified, aggregated operational metrics that help us improve reliability.
Communications
We send transactional emails only — such as “set your password” and password-reset links and necessary account-security notices. We do not send marketing email without your consent.
Service providers we share with
We share information only as needed to provide, support, secure, and legally operate the Service, with: our configured AI model provider (currently OpenAI), reached through our secure server-side gateway; Stripe (payments); Resend (transactional email); our hosting, database, and infrastructure providers; and Google, only when you connect a Google connector. We do not grant these providers rights to use your information beyond providing their services to us.
What we don't do
We do not sell your personal or workspace data. We do not use it for targeted advertising. We do not use your private workspace content to train general-purpose or public third-party AI models.
Google Limited Use
WarRoom AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we handle Google data
We request read-only Google access only. Connected Google data is used solely to power the visible, user-facing WarRoom features you have enabled. We do not use it for advertising and do not sell it. No human at our company reads your Google data except with your explicit permission (for example, to help with a support request), where necessary to investigate security or abuse, where required by law, or as aggregated/deidentified data permitted by policy. Disconnecting a connector revokes our future access at Google and deletes the stored connection credentials; WarRoom records already created remain until you delete them or request deletion.
AI processing
To answer you, relevant context from your workspace is transmitted through our secure server-side gateway to the configured model provider. Please do not submit passwords, API keys, banking credentials, or other secrets to Sarge (see the AI Use Disclosure).
Retention
We keep your account and workspace data while your account is active and as needed to provide the Service. After you close your account or request deletion, we delete your content within a reasonable operational period, except where we must retain limited information for backups, fraud and security prevention, billing, dispute resolution, or legal record-keeping.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect your information, including workspace isolation (your data is resolved server-side from your membership and is not exposed to other workspaces), hashed passwords, and access controls. No system is perfectly secure, and we cannot guarantee absolute security.
Your choices & rights
You can access and export your data, correct or delete information, and view, correct, or delete memories in “What Sarge Knows.” You can disconnect Google connectors at any time. Canceling your subscription is separate from deleting your data. Depending on where you live, you may have additional rights over your personal information. To make a privacy request, email legal@titanhavengroup.com; we will respond as required by applicable law.
Cookies & authentication
We use a secure, http-only session cookie to keep you signed in and to help protect your account. We do not use advertising cookies.
Children
The Service is for adults operating a business and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18.
Where we operate
We operate the Service in the United States, and your information may be processed there.
Changes & contact
We may update this Privacy Policy; material changes will be reflected by the “Last updated” date and, where required, by notice or re-acceptance. Contact: legal@titanhavengroup.com.