Privacy policy

Last updated 25 September 2026

Twentyfirst is a private, invite-only workspace where a small group of friends write and develop ideas together. This page explains what data it keeps, why, and who it is shared with.

What we keep

• Your account: your email address, and your name and profile picture if you sign in with Google.
• What you create: pages, folders, uploaded images and videos, versions, and conversations with the workspace agent.
• Connections: if you connect a service (for example Gmail, Google Calendar, Google Drive, Outlook, Notion or Linear), the access tokens or keys for it, stored encrypted.
• Technical data: sign-in sessions, a few preferences stored in cookies (such as sidebar width and theme), and server logs kept for troubleshooting.

There is no advertising and no third-party analytics or tracking.

How it is used

Only to run the workspace for its members: showing and syncing your work, sending sign-in and invitation emails, and letting the agent act on your requests. We do not sell data or use it for anything else.

The agent and connected services

When you ask the agent something, the relevant content (your message, pages it reads, and results from services you connected) is sent to Anthropic, which provides the AI model, to produce the answer. Anthropic does not use this data to train its models. The agent only reaches a connected service when you, or someone chatting in your own conversations, ask it to, and admins decide which of its actions need your approval first.

Google user data

If you connect a Google account, Twentyfirst can read your Gmail, Google Calendar and Google Drive, and create drafts, apply labels, archive messages and manage calendar events when you ask the agent to. This data is used only to provide these features to you, is not shared with others except as described above to answer your requests, is not used for advertising, and is not used to train AI models. Twentyfirst's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who processes data

• Hetzner (hosting, in the EU)
• Anthropic (the AI model behind the agent)
• Resend (sign-in and invitation emails)
• Google, if you sign in with Google or connect a Google account
• Any other service you choose to connect, under that service's own terms

Keeping and deleting data

Your work stays until it is deleted. Items in the trash can be restored. You can disconnect a service at any time in Settings → Connections, which deletes its stored tokens. To have your account and personal data removed, email hello@twentyfirst.app.

Contact

Questions about your data: hello@twentyfirst.app.