Executive Report privacy notice
Effective date:
Executive Report is operated by Sottaku Inc. This notice describes information processed by the Executive Report website and its connected ChatGPT tools. Contact [email protected] with privacy questions or requests.
Information processed
- Account information: verified email address, display name, name variants, profile information supplied during sign-in or profile editing, signup dates, and onboarding state.
- Workplace information: organizations, teams, memberships, roles, invitations, permissions, projects, and events.
- Work records: activity-log text and source links, work dates, status flags, reports, contributing-log links, and report-generation history.
- Connection and security information: consent scopes, connection dates and expiry, hashed OAuth credentials, login and security records, and technical request information needed to operate and protect the service.
- Change records: plugin-write identifiers and before/after snapshots used to prevent duplicate writes, detect conflicting edits, and audit changes.
- Billing information: workplace seat counts, subscription state, and Stripe customer, subscription, checkout, and event identifiers. Payment details are entered through Stripe's hosted payment services.
Purposes and access
We process this information to authenticate users, operate workplaces, record and review work, generate reports, manage subscriptions, provide support, recover from failures, and protect the service. Workplace and team permissions control access. Authorized leaders, workplace administrators, and service administrators may access information as permitted by their roles and operational responsibilities.
ChatGPT and other connected services
Each user authorizes their own Executive Report connection. The tools can return the connected account's identity, permitted teams and projects, and that member's own logs, including dates, flags, source links, and identifiers needed to select or update records. Write tools store the submitted summary and status flags as that member. Submitted logs become available under the team's normal permissions.
Slack and Gmail connections are separate. Executive Report does not receive those services' OAuth credentials through this integration. It receives the content and links submitted to its tools; those may include information that the user asked ChatGPT to summarize from email, Slack, or the current chat. Executive Report does not retrieve the linked source pages itself.
When a report manager requests AI report generation on the website, the selected activity logs and report baseline are sent to OpenAI to prepare the report draft. Review generated drafts before publication. OpenAI's handling of that processing depends on the applicable OpenAI service terms and the account used for generation.
Service providers
The service uses providers for hosting, network delivery, authentication, email, payments, AI processing, and backups. The current integrations include Cloudflare, Google, Zoho ZeptoMail, Stripe, OpenAI, and Dropbox. Information needed for the relevant function may be processed by those providers, including in countries other than the user's country. Separately connected Slack, Gmail, and ChatGPT accounts also remain subject to their providers' terms and privacy notices.
Cookies and security
The website uses cookies for signed-in sessions, login and OAuth return state, request-forgery protection, and language preferences. Connection credentials are stored as hashes. Access controls and encrypted transport help protect the service; do not submit credentials or unnecessary sensitive information in activity logs.
Retention, corrections, and deletion requests
Work records remain available for workplace operations and reporting until removed through authorized actions. Removing a membership or revoking a plugin connection does not itself erase previously submitted work. Change-audit records may retain earlier versions, and backups may retain copies after a live record is deleted. Billing, security, and operational records may also need to be retained separately.
Use the application's editing and connection controls for supported changes. Contact [email protected] for account access, correction, deletion, or other privacy requests. We may need to verify your identity and coordinate with the workplace responsible for shared work records. Any retention required for a particular request will be explained when the request is handled.