Built so you stay in control
Approval before sending.
Deb instructs your assistant to show you the full draft and the conversation it replies to, and to wait for your confirmation before any message, invitation or other outward action. Sends are immediate once confirmed. Scheduled sends wait in a queue and can be cancelled until they go out.
Built-in pacing.
Deb tracks sends over a rolling 24 hours: 25 LinkedIn messages and invitations, and 50 WhatsApp messages, by default. When you reach the pace, Deb tells you. It informs you; it doesn't stop you.
You can always stop queued work.
Even if a subscription lapses, you can still see and cancel scheduled messages and delete drafts.
Protection from hidden instructions.
Text written by other people (emails, attachments, calendar descriptions, LinkedIn posts, comments and invitation notes) is marked as content, never as instructions for your assistant. Text hidden in an email's formatting is removed before your assistant sees it.
Clean outgoing messages.
Invisible characters are stripped from everything your assistant writes, and a link whose text differs from its address shows the real address.
What Deb stores.
Deb reads your messages, email, calendar and files from LinkedIn, WhatsApp, Google and Microsoft when your assistant asks for them, and doesn't keep a copy. It stores only what it needs to work:
- your account, your passkeys (only their public part) and your recovery email;
- your connected accounts and the sign-in keys Deb uses to reach them, encrypted;
- drafts of LinkedIn and WhatsApp messages, encrypted. Email drafts stay in Gmail or Outlook;
- scheduled messages until they go out, encrypted;
- files you upload to attach, for about a day;
- activity logs of which tools ran and when, without message content, for 180 days;
- feedback reports, if you allow them, and billing records.
Deb never stores your LinkedIn password. It's passed to our messaging connectivity provider to sign you in.
Connecting and disconnecting.
You connect Google and Microsoft accounts by signing in with them and approving specific permissions. LinkedIn and WhatsApp connect through our messaging connectivity provider.
You can disconnect any account at any time from your account page. Disconnecting deletes the sign-in keys Deb holds for that account, along with its drafts and scheduled messages:
- For Google, Deb also asks Google to cancel its access.
- For Microsoft, you can also remove Deb from the apps with access to your Microsoft account.
- For LinkedIn and WhatsApp, Deb also removes the connection from its messaging connectivity provider. You can unlink Deb under Linked devices in WhatsApp too.
Deleting your Deb account disconnects everything and deletes your data, as our Privacy policy describes. Deb's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Data and infrastructure.
- Where: Deb's database and services are hosted in Singapore.
- Encryption: every connection uses HTTPS. Sign-in keys for your connected accounts, drafts and scheduled messages are also encrypted with AES-256-GCM, using keys kept apart from the database. All other stored data is encrypted at rest by our hosting provider.
- Retention: activity logs are deleted after 180 days, scheduled messages 30 days after they go out, and uploaded files after about a day. The full list is in our Privacy policy.
- Service providers: hosting, network and security, email delivery, messaging connectivity and payments, each described in our Privacy policy.
No AI training on your data.
We don't use your data, or content from the accounts you connect, to train AI models. The only AI that receives anything from Deb is the assistant you connect, such as Claude or ChatGPT, under your agreement with Anthropic or OpenAI.
Report a vulnerability.
Email [email protected].