Susan — Beta Participation Agreement (draft v0.2)

1. Welcome

Thanks for agreeing to test Susan. You're one of a small handful of people helping shape what Susan becomes — your feedback during this beta is the difference between Susan growing into something genuinely useful and another half-baked AI tool.

This agreement is short on purpose. It says what you get, what we ask in return, and how we handle your data. Read it, ask questions, then tick the box on the sign-up form to confirm you've understood it.

2. What you get

While Susan is in beta you get:

• Free access to all features, including features that haven't been announced or priced yet.
• Direct founder support. If something breaks or behaves weirdly, email or message Zahir directly — you're not routed through a ticket queue.
• Influence over the roadmap. Beta feedback shapes what we build next. Several features in Susan today only exist because an early tester asked for them.
• Founder pricing for life. When Susan moves out of beta and we start charging, your account stays free for the first 6 months after general availability, then 50% off the published price for the following 18 months. After that you move to the published price, but you keep the "Founding Tester" tag on your account.
• A clear off-ramp. You can leave the beta at any time. Your data is deleted on request (see §9).

3. What we ask in return

Susan is free during beta in exchange for feedback. Specifically:

3.1 Scheduled check-ins (~10 minutes each)

You'll be prompted to give structured feedback at three points:

• Week 1 — what surprised you, what confused you, what's missing.
• Week 4 — what's still useful, what you've stopped using, what would make you cancel if you had to pay today.
• Week 8 — overall verdict + would you recommend Susan to one other person, and if so, who.

Each check-in is 2-3 short questions with no minimum word count. Skip-able once per session if you're in the middle of something; we'll ask again next time you log in.

3.2 One optional interview

Sometime in the first 6 weeks we may ask for a 30-minute video call to dig deeper into how you actually use Susan. You can decline; we won't ask twice.

3.3 Ongoing feedback

There's a feedback button in the dashboard chrome. Use it any time — typo, broken thing, "I wish Susan could…", whatever. We read everything.

3.4 Bug reports

If something breaks, tell us. Screenshots help. A rough description of what you were trying to do helps more.

You are not required to use Susan a certain number of times per week. Light usage is fine — but if you stop using Susan entirely for 14+ days we'll send a one-question email asking why. Your honest "it wasn't useful for me" is more valuable than silence.

4. Your data — what we collect and what we do with it

[NEEDS SOLICITOR REVIEW]

4.1 What Susan touches

To do its job, Susan needs access to:

• Your Google account via OAuth — specifically the gmail.modify scope (read, label, and modify emails; does NOT include deleting your account or changing your password) and basic profile (name, email address, profile picture).
• Your calendar (when you connect it) — read events, suggest times, create / update / decline meetings on your behalf when you approve them.
• Anything you paste into Susan — contracts, transcripts, notes.

4.2 What Susan stores

We store the minimum needed to run the product:

• Your email address, name, and profile picture.
• An encrypted copy of your OAuth tokens (encrypted at the application layer with tweetnacl secretbox before they touch our database — meaning even if our database were compromised, the tokens would be unreadable without a separate encryption key).
• The chores Susan has run for you (so you can audit and undo them).
• The artifacts Susan has produced (draft emails, summaries, action items).
• The labels and rules you've configured.
• An audit log of security-relevant events (sign-ins, OAuth connects / disconnects, etc.) for incident response.

We do NOT store the full content of your inbox. Susan reads emails on demand to process them, then forgets the raw content; only the derived structured data (label, summary, action item) is persisted.

4.3 Where your data lives

All data is hosted in Frankfurt, EU (Supabase + Vercel). Your data does not leave the EU for storage. AI inference happens via AWS Bedrock in the EU region.

4.4 What we never do

• We never sell your data.
• We never use your inbox content to train AI models. (Susan uses general-purpose foundation models — your emails are inference inputs, not training data.)
• We never share your data with third parties beyond the sub-processors listed in §4.6 below.
• We never act on your behalf without your explicit "Approve" click on the artifact in question. Susan drafts; you decide.

4.5 Your rights under GDPR

You have the right to:

• Access — request a copy of everything we hold on you.
• Erasure — request deletion of everything we hold on you. We action this within 30 days, and confirm in writing when done.
• Portability — request your data in a machine-readable format.
• Object — withdraw consent for any specific processing activity at any time.

To exercise any of these, email zahir@checksusan.com with the request. You'll get a written confirmation within 7 days.

4.6 Sub-processors

Per GDPR Article 28, here are the sub-processors that handle your data on our behalf. Each has its own Data Processing Agreement (DPA) signed with LetAI Services Ltd:

We notify beta testers by email at least 30 days before adding a new sub-processor or changing how an existing one handles your data, so you can object or leave the beta before the change takes effect.

5. What feedback you give us, we can use

[NEEDS SOLICITOR REVIEW]

Feedback you give us during the beta — survey answers, interview recordings, support emails, in-product feedback button responses — is ours to use to improve Susan. Specifically:

• We can quote you (anonymously, unless you give explicit consent for attribution) in marketing, blog posts, or investor materials.
• We can act on your feature requests without owing you anything for the idea.
• We will not share your raw feedback with other beta testers or third parties without your consent.

This does not apply to your data (emails, contracts, transcripts). That remains yours, always.

6. Confidentiality

Susan has features in beta that aren't public yet. We ask that you:

• Don't post screenshots of un-released features publicly (Twitter, LinkedIn, blog posts). You're welcome to show them to colleagues or friends you'd like to refer.
• Don't share your login with anyone else. If a colleague wants access, put us in touch and we'll invite them properly.
• If you write or speak publicly about Susan, that's great — please use the version of the product visible at https://checksusan.com (the demo
  • public marketing material) as the reference, not screenshots of features that haven't shipped to the public yet.

This is a 12-month soft commitment, not an NDA. There's no penalty for breach; it's a request based on trust.

7. Limitations of the beta

[NEEDS SOLICITOR REVIEW]

Susan is software under active development. During the beta:

• No SLA. We aim for uptime but don't guarantee it. Don't make Susan load-bearing for anything where downtime would seriously hurt you.
• Features may change or disappear. If we're shipping a v2 of a feature, the v1 may be removed. We'll tell you before that happens.
• Bugs exist. We test, but small teams + AI = surprises. Always review what Susan has drafted before approving it.
• AI output requires human review. Susan summarises contracts and drafts replies; the summaries and drafts may be wrong. You are responsible for what gets sent under your name. Treat Susan like a junior assistant who needs supervision, not a senior one who doesn't.
• Limitation of liability. Susan is provided "as is" during the beta. To the maximum extent permitted by law, LetAI Services Ltd's total liability arising from your use of Susan is limited to the amount you have paid us — which during the beta is zero. Nothing in this clause excludes liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded under the laws of England and Wales (notably the Unfair Contract Terms Act 1977 and the Consumer Rights Act 2015 where applicable).

  Solicitor note: the enforceable floor of this clause depends on whether the tester is acting as a business or a consumer and on the specific damages claimed. A solicitor should confirm the wording before this agreement is used outside the founder's personal network.

8. Costs

Susan is free during the beta. While you're a beta tester, LetAI Services Ltd covers all infrastructure costs (database, hosting, AI inference, etc.) for normal individual usage.

If your usage runs significantly above what an individual would naturally generate (e.g. heavy automation, multiple inboxes, scripted batch processing), we'll talk to you first — never surprise charges. The likeliest case is we ask you to cover the incremental AI inference costs at our cost, no markup.

When the beta ends and Susan moves to paid plans, you'll get notice and the founder pricing described in §2.

9. Ending the beta

9.1 You leaving

You can leave the beta at any time. Either:

• Email zahir@checksusan.com with "remove me from the beta" and we'll disconnect your Google account, delete your data within 30 days, and confirm in writing.
• Or, in the dashboard, go to Settings → Account → Delete account. Same effect, no email required.

9.2 Us asking you to leave

We may ask you to leave the beta if:

• You violate the confidentiality request (§6) in a way that causes us real harm.
• You're using Susan in a way that's clearly outside the intended use (e.g. automated scraping, abuse of OAuth tokens for purposes other than what we authorised).
• You're not responsive to scheduled check-ins (§3.1) for 3 cycles in a row AND not using the product. In practice this means you've forgotten about Susan, and we'll free up the slot for someone else.

If we ask you to leave, you'll get 14 days' notice + the same data deletion process as §9.1.

9.3 What happens to your data when you leave

We delete:

• Your account record.
• Your encrypted OAuth tokens (we also call Google's token revocation endpoint to disconnect on their side).
• All chores, artifacts, labels, and configuration tied to your account.
• All audit log entries older than 90 days; entries newer than 90 days are retained for security incident response only, then deleted on their normal 90-day cycle.

We retain:

• Anonymised aggregate usage statistics ("X testers used the meeting feature this month").
• Your feedback (per §5).
• Anything we're legally required to keep (e.g. tax records, if you ever paid us — which during beta you didn't).

10. Changes to this agreement

We may update this agreement during the beta. If we do, we'll email you the diff with a one-paragraph summary of what changed and why. You can accept, ask questions, or leave the beta.

We won't quietly change material terms (data handling, what we ask in return, who owns what). Cosmetic edits or new features we add to Susan won't trigger a new agreement; substantive changes will.

11. Governing law and jurisdiction

This agreement is governed by the laws of England and Wales. Any disputes arising from this agreement will be resolved in the English courts.

12. Contact

For anything covered in this agreement, questions about your data, or just to chat about Susan:

• Email: zahir@checksusan.com
• Founder: Zahir Parris
• Operating entity: LetAI Services Ltd, a company registered in England and Wales, company no. [TODO: fill in from Companies House], trading as Susan (or "Susan AI"). LetAI Services Ltd is the data controller for the personal data described in §4.

Sign-up confirmation

By ticking the box on the sign-up form, you confirm:

• I've read this agreement and understand it.
• I'm authorised to connect the Google account I'll be using to Susan (i.e. it's mine, not my employer's, unless I have permission).
• I understand Susan is in beta and may have bugs.
• I'll do my best to participate in the scheduled feedback check-ins.