Pancake
Start freeBook a demo

Last updated: September 18, 2026

Privacy Policy

Pancake is operated by Basalt AI Inc., 535 Mission St, San Francisco, CA 94105, USA. As part of its activities, Pancake may process personal data. We attach the utmost importance to the security and confidentiality of user data, whether collected via our website (https://getpancake.ai), web application (https://app.getpancake.ai), or integrations such as Slack, ChatGPT, Codex, and Claude.

1. Data We Collect

We may collect and process the following categories of personal data:

  • Account Information: name, email address, company name
  • Usage Data: interactions with the platform, feature usage, logs
  • Technical Data: IP address, browser type, device information
  • Slack Data (if applicable):
    • User IDs
    • Workspace IDs
    • Channel IDs
    • Messages or content explicitly sent to the Pancake app
    • Metadata associated with Slack interactions (timestamps, event types)
  • Agent Connector Data (if applicable): tool requests from the AI client you connect, the Pancake workspace records needed to answer them, and metadata about the connection. This may include your GTM Brain, business-contact lead records, signal settings, SEO plans, run history, and feedback.
  • Demo Request Data (if applicable): your answers to our demo form, recordings and transcripts of calls with our AI voice agent, and the meeting you book. See section 10.

2. How We Use Data

We use collected data to:

  • Provide and operate the Pancake service
  • Authenticate users and manage accounts
  • Improve product performance and features
  • Ensure security and prevent abuse
  • Respond to user requests and support inquiries

Slack Data Usage:

  • Slack data is only used to provide requested functionality within the Slack integration
  • We do not use Slack data for advertising or unrelated purposes

3. Cookies & Analytics

Our website uses cookies and similar technologies to understand how visitors use the site and to measure our marketing.

  • Analytics: Google Analytics 4 (loaded through Google Tag Manager) and PostHog measure page views and product usage.
  • Advertising measurement: tags from Meta, LinkedIn, and X measure the performance of our ad campaigns.
  • Attribution: a first-party script records which page or campaign brought you to the site.

You can remove or block cookies in your browser settings at any time. The website works without them.

4. Data We Do Not Use

In some cases, Pancake may receive data from Slack (such as event payloads or system logs) that is not actively used.

  • This data is not processed beyond what is necessary for system operation
  • It is not stored long-term and is automatically deleted

5. Data Retention

Personal data is retained only as long as necessary for the purposes described above:

  • Account data: retained while the account is active
  • Usage logs: retained for a limited period (e.g., up to 30 days) for security and debugging
  • Slack data: retained only as needed to provide the service and may be deleted immediately after processing depending on the feature
  • Demo requests and voice calls: as described in section 10

We may retain certain data longer if required by law.

6. Your Rights

In accordance with GDPR and applicable laws, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Request data portability

To exercise your rights, contact us at: support@getpancake.ai

7. Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or disclosure. All data is transmitted over TLS/SSL and encrypted at rest using AES-256 on disk.

Data is hosted on GCP infrastructure located in the United States.

8. Google User Data

Pancake integrates with Google Workspace to act as a cofounder for our users. With your explicit consent, Pancake requests access to the following Google OAuth scopes:

  • https://www.googleapis.com/auth/userinfo.email and https://www.googleapis.com/auth/userinfo.profile — to identify you and create your Pancake account.
  • https://mail.google.com/ — to read, compose, send, and manage Gmail messages on your behalf when you ask Pancake to triage your inbox or send email on your behalf.
  • https://www.googleapis.com/auth/drive — to read, create, and modify files in your Google Drive that are relevant to tasks you delegate to Pancake.
  • https://www.googleapis.com/auth/documents — to read and edit Google Docs you ask Pancake to work on.
  • https://www.googleapis.com/auth/spreadsheets — to read and edit Google Sheets you ask Pancake to work on.
  • https://www.googleapis.com/auth/calendar — to read your calendar, create events, and manage scheduling on your behalf.
  • https://www.googleapis.com/auth/contacts — to look up and reference contacts when scheduling, sending email, or sharing files.

How we use Google user data

Google user data is used solely to provide and improve the user-facing features of Pancake — specifically, to let our AI cofounder read, draft, schedule, and edit on your behalf in response to your instructions. Google user data is not used for any other purpose.

How we share Google user data

Google user data is processed by a single sub-processor: Anthropic, PBC, the provider of the large language model that powers Pancake's reasoning. Anthropic processes the data only to generate responses for Pancake and, per its commercial terms, does not retain prompts or completions beyond what is necessary to provide the service and does not use them to train its models. We do not share Google user data with any other third party.

How we protect Google user data

Google user data is encrypted in transit using TLS/SSL and at rest using AES-256. Access is restricted to authorized personnel via SSO and is logged and audited. OAuth tokens are stored in an encrypted secrets store.

How we retain and delete Google user data

Google user data fetched to fulfill a user request is retained for up to 14 days and then automatically deleted. You can revoke Pancake's access at any time from your Google Account's Third-party apps with account access page, or by emailing support@getpancake.ai. On revocation or account deletion, all stored Google user data is deleted within 14 days, except where retention is required by law.

What we do not do with Google user data

  • We do not sell Google user data.
  • We do not use Google user data for advertising, including personalized, retargeted, or interest-based advertising.
  • We do not transfer Google user data to data brokers, or for credit-worthiness or lending purposes.
  • We do not use Google user data to develop, improve, or train generalized or non-personalized AI/ML models. Anthropic, our model provider, does not train its models on Pancake customer data.
  • Humans do not read Google user data except (a) with your explicit permission, (b) for security purposes (e.g., investigating abuse), (c) to comply with applicable law, or (d) where the data has been aggregated and anonymized for internal operations.

Limited Use disclosure

Pancake's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. AI Agent and Connector Integrations

You can connect a supported AI client, such as ChatGPT, Codex, or Claude, to one Pancake workspace. The client sends specific tool requests to Pancake after you sign in, choose the workspace, and approve access.

Data sent to your AI client

Pancake returns only the workspace data needed for the tool you or the client invokes. The client may use that data to answer your prompt. Data sent to the client is then processed under that provider's own terms and privacy policy. Pancake does not receive your full third-party chat transcript unless the client includes part of it in a tool request.

Connection security and control

Each connection uses OAuth and is limited to the workspace you approve. Access and refresh tokens are stored only as one-way hashes. You can revoke a connection in Pancake under Settings → MCP → Connected clients.

Retention

Pancake keeps non-secret connection metadata while the grant remains active. Any feedback or workspace change made through a connected client is retained like the same change made in the Pancake web app. Pancake does not create a separate copy of your third-party conversation solely because you use the connector.

10. Demo Requests and Voice Calls

On getpancake.ai/demo you can book a demo by filling in a short form or by talking to Pancake, our AI voice agent.

What we collect

  • Form answers: first and last name, work email, company website, team size, whether you have a Pancake account, and your main goal.
  • Voice calls: the audio of the call, its transcript, and the answers the agent collects. A call starts only after you click "Talk to our AI" and allow your microphone. The call screen tells you that you are talking to an AI agent and that the call is recorded.
  • Booking details: the meeting time you choose and anything you add on the booking page.

How we use it

We use this data to route you to the right meeting, prepare for it, and keep a record of our conversations with your company. We do not sell it or use it for advertising.

Who processes it

  • ElevenLabs runs the voice agent. It receives the call audio, the transcript, and the form answers you already typed, except your email address. The agent's language model runs through ElevenLabs. The call software loads from the jsDelivr content delivery network when you start a call.
  • Calendly schedules the meeting. The voice agent reads open times from Calendly and opens the time you pick with your name, email, and answers filled in. You confirm the booking yourself.
  • Attio, our CRM, and Slack and Airtable, where our team is notified of new requests, receive your form answers. The voice agent also posts a short summary of each call to our Slack, with a link to the call in ElevenLabs.

Retention

  • Call recordings and transcripts in ElevenLabs: deleted after 90 days
  • Form answers, CRM records, and call summaries in our Slack: kept while we are in contact with you or your company, and deleted on request
  • Bookings: kept in Calendly and our calendars as long as needed for the meeting

To access or delete this data, contact support@getpancake.ai.

11. Contact

For any questions or requests regarding your data, you can contact us at:

support@getpancake.ai

12. Changes to This Policy

This policy may be updated at any time. We encourage you to review it regularly. Significant changes will be communicated where appropriate.